...
Some users may have initial (or later) started logging in with their admin account anyway, and have their email set up, documents, bookmarks set.
If their account is not an 'admin' name (e.g username-admin), you can just demote the user with MacOS - Demote all unauthorized MacOS admin usersuser accounts via Jamf
However if they are using their admin-named account, you can rename it to another username using script rename-user-account.sh which will preserve their settings, documents, etc.
It’s best to use rename-user-account.sh from ssh or terminal, rather than Jamf. You can download it from https://jamftools.engr.utexas.edu/scripts/rename-user-account.sh
It will rename the account and update the symlinks within to the new path. The user's password will remain the same. NOTE: before logging in to the renamed account, the Mac must be rebooted!
...