There are several events on DS that reports the device to switch into user mode, without a previous switch to admin mode.
Most of them looks as being reported early in the morning (probably on devices turning on)
Is there a way to end user switch to admin mode and prevent to dispatch events or erase them before being sent to DS ?