Endpoint Protection

I have several WIndows 2000 servers that after each definition update show up in the console as Auto-Protect off. If I stop and start the SEP service auto-protect is enabled. This does not happen on all of my Windows 2000 servers. We are running version 11.0.5002.333. Does anyone know how I can fix this problem?

Do you have any files in quarantine folder
If yes try by removing them..
Is it is happening only in some particular servers?
Any similarity you can find with these servers?

Try repairing the SEP on one of the client and see whether it makes a difference. If it does then create a new customized package and then deploy it to the clients in question.

I tried a repair, it didn't resolve the issue

I checked a couple, they did have SecurityRisks.Aports in quarantine, so I have removed them. We will see what happens after the next update.

The other similarity seems to be they are all Citrix servers (although it doesn't happen to all of my Windows 2000 Citrix servers)

I removed the quarantined files, but they still failed after the next update.

open sepm 
click on policies
select antivirus policy
select file system autoprotect
in the advanced options
close the lock...( click on the lock icon ) under autoprotect reload and enabling
make it to 1 min and close the lock

if the above does not work
on the same tab; uncheck rescan file cache..when new defs arrive;
let us know the results.

Un-install SEP and try installing Unmanaged SEP on these servers.