We are enrolling macOS laptops using Apple Automated Device Enrollment for our enterprise rollout. As part of the ADE profile, we have configured a local admin account for first-time setup. Now we have a few operational concerns. For already enrolled laptops, we want to manage or remove existing local accounts and also change the admin password used in the ADE profile for future enrollments. We are trying to understand whether these ADE-created accounts can be edited or deleted post enrollment, and what the recommended approach would be to avoid security or compliance issues going forward.