We should track forced enrollment in a new UMA table, e.g. Enterprise.EnrollmentForcedInitial. (Or whatever better name we can find! I like the EnrollmentForced prefix so people can find all the forced variants easily.)

This may require a new mode/flavor so we can tell this from the normal manual enrollment (which in turn means DMServer should know about that flavor too).