We've recently upgraded our SEPMs to 12.1.6 MP3 though most clients are running a mix of 12.1.4, 12.1.6 and 12.1.6 MP1 at the moment with a few 11.x clients that are being addressed as they never took the initial 12.x upgrade. The SEPMs are both Server 2012. However my concern is that in order to remediate clients whose definitions are out of date by two weeks or more we set an HI policy in place that after a week out of date they should go to the Symantec LiveUpdate servers. So far so good as the number of clients in this category have dropped. In reviewing those clients that are still in this category I do see a number of them (about 20 or so out of 60) that are reporting HI Status as check is disabled. I'm not seeing any setting that would allow/disallow users from disabling this feature nor am I seeing any correlation in these clients. I need to get the script up and running on these machines. Thanks.