...
All steps below MUST be completed or the first logged in user may not be made a “Volume Owner”, and this will prohibit the user from running Software Updates.
Have the first user log in as soon as possible after the computer goes through setup.
The first user (and only the first user) to log in to the computer will automatically be made an Admin – no need to have them go into the Self Service App to make themselves an Admin.
Encryption will be enabled when the first user logs in. When prompted to Encrypt, click Allow.
After the first user is logged in and at the desktop screen, have the user immediately log out.
After logging out have the first user immediately log in one more time, then go into the Self Service App and run Update Inventory.
...