When you follow through on that article I linked to...to the Sophos KB on this. It appears to only happen when a scan finds something, like malware. Then it performs the cleanup function that resets this.
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Klaus Hartnegg Sent: Monday, March 13, 2017 3:46 PM To: [email protected] Subject: Re: [NTSysADM] Sohpos disables UAC Several more affected PCs found, but also two counter examples: same Windows, same Sophos, but UAC is on. Strange. -- Message sent from a mobile device, please excuse brevity and typos

