Policy issues are one of the most common issue I see in different business environments, especially when dealing with Windows 7 machines that have run for several years.
In order to resolve a policy issue on client machines, you need to have an account that has local administrator privileges on the targeted machines. You also need full access to the System Center Configuration Manager console.
You will discover that deploying System Center Endpoint Protection on your business machines will be very easy, however some of your clients will have issues that needs to be resolved. And some will actually Endpoint Protection together with Configuration Manager resolve automatically.
But why do we have these kinds of errors now, and not when I was running SCEP?
The answer is that we probably did, but it was hard to discover them in SCCM 2007 or earlier, or if we didn't have any kind of Management product.
Microsoft are good at integrating products...