If a user who enrolled a device is deleted (eg, could be user from stale enrolment package) for whatever reason, the device then becomes eternally non-compliant because "User exists" will always be False. (thinking mostly about shared devices in a classroom)

What is the most efficient way to deal with this without having to reimage the device.