...
Next create a policy to install Outset and utexas-blockblockuseradmin-user-admin-2.0 (both in Jamf packages)
Outset-4.1.2.21936.pkg
utexas-outset-blockuseradmin-2.0.pkg
Scope it to All Computers, or only those you want user admin blocking active on. Set it to install Once Per Computer.
...
Some users may have initial (or later) started logging in with their admin account anyway, and have their email set up, documents, bookmarks set.
If their account is not an 'admin' name (e.g username-admin), you can just demote the user with MacOS - Demote all unauthorized MacOS admin usersuser accounts via Jamf
However if they are using their admin-named account, you can rename it to another username using script rename-user-account.sh which will preserve their settings, documents, etc.
It’s best to use rename-user-account.sh from ssh or terminal, rather than Jamf. You can download it from https://jamftools.engr.utexas.edu/scripts/rename-user-account.sh
It will rename the account and update the symlinks within to the new path. The user's password will remain the same. NOTE: before logging in to the renamed account, the Mac must be rebooted!
...