I have one user who is getting an error when enrolling "Your account has been restricted, please contact your administrator".  I checked the user is in the correct OU that should get the enrollment email and the user is not getting it.  I synced the domain settings and when running the un-enrollment report the user does not show up.  Please Advise.