I recently upgraded my license to UEM edition to get the full version of Mobile Device Manager Plus. Has anyone successfully disabled Find My Mac in their MacOS profile? I cannot get this to work on a Mac in Apple Business Manager and a Mac not in ABM. 

Enabling Find My Mac on local admin account can be over-ridden by domain user that's an admin account on the Mac. 

The whole purpose of upgrading was to lock down employer owned machines so employees cannot enable find my mac.  

What are the steps you took to handle your Macs in MDM plus to prevent employees from potentially bricking the device in a disgruntled firing or layoff? *Besides an employee termination checklist because somethings slip through the cracks when you have multiple managers in multiple departments*