Better handling of ensuring at least one enabled sys adimin