Apple DEP device fails to enroll with the following error:
Profile Installation Failed

To resolve this issue add "Shared Devices Enroller" permission for DEP devices using local "Device Enrollment Program User".

http://docs.citrix.com/en-us/xenmobile/10-1/xmob-configure-server-settings/xmob-settings-ios-device-enrollment/mdx-toolkit-ios-appledep.html
http://docs.citrix.com/en-us/xenmobile/9/xmob-dm-connect-enroll-usersdevices-wrapper-con/xmob-dm-connect-ios-dep.html

Enrolling Shared Devices Through the Device Enrollment Program

You can use the Device Enrollment Program to enroll shared devices. To do this, configure an access control role for the Device Enrollment Program user and assign the user the shared devices enrollment role. For more information about configuring access control roles, see Configuring Role-Based Access Control (RBAC).