When enrolling shared machines (RDSH\citrix shred desktops) into defender should it be installed as device mode instead of user?