When the client comes to the Helpdesk to pick up their new (or newly reimaged/refreshed) Mac, please use this procedure while setting it up with them:

1. Connect the Mac to ethernet.
2. Power the Mac on.
3. Have the client sign in.
4. Have the client elevate to admin using ABR to ensure ABR is working correctly.  Leave the ABR session running for now.
5. Open terminal, run sudo jamf policy. The client will have to enter their password.  This will run any policies that are currently queued up, such as updating Safari.  It may also update inventory, meaning there will be a bunch of pop-ups asking for permissions to allow Terminal to access various things as the inventory process runs.  Please click "Allow" on all of these.
6. Close terminal.
7. End the ABR session.
8. Go to the Apple menu and choose "Shut Down."  (NOT Restart.) You may see a message that software is being installed and the Mac cannot be shut down yet.  This is due to Microsoft applications being updated in the background.  If this happens, wait a few minutes and try to shut down again.  
9. While shutting down, the Mac will prompt for the client's password to enable Filevault.  Have them enter it.  Filevault will be enabled after a minute or two, and then the Mac will finish shutting down.
10. After the Mac has completely shut down, allow it to sit for a few seconds and then power it back on and have the client log in.
11. If they're able to get to their desktop, they should be good to go.  Shut the Mac down again.