This walks you through how to add and remove users' ability to add devices to the Azure Active Directory.