User intervention is required only during enrollment. Once a device is enrolled, you can mange it with zero effort on part of the users.