I've seen this a few times recently. We did the SEP 12.1.5337.5000 upgrade recently. That had some bumps but things settled down. Similar situation here -- Problem, but then it settles down on its own.
I took a Surface Pro 3, installed software, did updates, etc., sysprepped it with no unattend file. It was never on the network to keep it more pure. SEP was not installed ever on that device. I used Clonezilla to capture an image after it was sysprepped.
I just applied that image to a different Surface Pro 3. Some bumps, but a second attempt was normal and successful, no errors with the imaging process.
Then I installed SEP 12.1.5337.5000.
And then Teamviewer 10.
I continued updating and tweaking for post-image things. Not problems. Finished, but then Teamviewer 10 started alerting me that anti-virus protection was disabled on this newly image Surface Pro 3.
I ended up uninstalling SEP and Teamviwer and reinstalling them. Each installed separately with a restart inbetween.
I also tried reinstalling SEP over itself.
No change...
In SEP, logged in Windows 8.1 as myself with admin rights... SEP has "liveupdate" greyed out. At one point it said network protection was disabled but I only saw that once. Greyed out liveupdate stuck there. I've seen that on other machines after the SEP 12.1.5 upgrade and after installing Teamviewer 10.
I clicked "update policy" a lot from the user machine and from SEPM. No change. Unless it's the heartbeat timing that solved this finally....
Within SEPM, the user policy is check for allowing the user to manually liveupdate. I tried unchecking and rechecking that box.
I was giving up, and then I noticed liveupdate was black again.
What's causing that? And what's the real solution?
I think it's something with Teamviewer 10 installing and the SEP 12.1.5 upgrade.
And waiting seems to be the only solution. Update the policy and wait for the heartbeat.
Any ideas?
It's a little disconcerting to see the disabled ability on SEP. Does SEP 12.1.5 work ok with a Surface Pro 3 tablet and Windows 8.1? Is it Teamviewer 10?
I suppose we could leave SEP off the Surface tablets. It's got Windows Defender.