We've deployed a 'Block and allowlist' policy to machines in a Group. On those machines, the 'Remove all managers' button is not greyed out. I assume this to mean that the end user can click this button and remove themselves from being managed on that device. End goal: We don't want computers outside the company to remote into our company machines.