SEP clients disabled by default, multiple problems, AV & antispyware/proactive threat off

Hi

have a weird problem with our symantec endpoint protection (v 11.0.5002.333)

When a user logs on, the SEP client is not enabled.  The user can open the client and click Fix All and everything will correct itself and enable SEP but need to sort this so it launches correctly

thanks in advance

Simon