Enroll a fully-managed device with EMM token