How do I enroll devices while "Can enable remote management" is disabled?
Four years after you posted this, Apple's answer to this is Device Enrollment Program to point all the macOS and iOS hardware you buy to your MDM enrollment URL without user interaction. 

That way the devices can be enrolled, supervised, managed without needing to train end users.