We are having an issue where clients are not able to open the SEP client console unless they have Admin access or we disable UAC. We have very few clients with Admin access and disabling UAC is not an option. These are the only two methods that I have been told that will allow the clients to be able to perform this function.
There are many very good business reasons for this
1. Allow users to see the current state of the SEP client. There is no way to do this without opening the console. This is a major issue for us.
2. Run various scans.
3. View quarantine.
4. Schedule scans (aside from the one we set from the SEPM console)
5. Validate connectivity from the Help > Troubleshooting
There are others also, but these are some of the main reasons we need the clients to be able to have access.
We also have a competing product on premis and this is not an issue with this product.
Thanks
Martin