Endpoint Protection

I have several client machines running windows 7 32bit and Symantec Endpoint Protection 12.1. When users on these machines logon they get a UAC prompt for administrative credentials. The executable requesting them is smc.exe -stop

When they cancel out of that, they immediately get presented with an identical UAC prompt except this time the executable is smc.exe -start

None of the users in questions are local administrators on the machines. I don't know why the Symantec management client would require admin priviliges and I don't know why it's doing these two operations next to each other (stop then start)

I need help identifiying the root cause for this UAC prompt and getting rid of it, if there is any way short of disabling UAC completely.

See if this helps to explain:

Windows User Account Control (UAC) prompts when opening the Endpoint Protection 12.1 client interface

http://www.symantec.com/docs/TECH169884

Have you tried to replace Sylink or assigned auto upgrade package to these machines?

The problem is users don't try to open the SEP GUI. They get these two prompts right after they log on and their desktop loads without doing anything else.

What is Sylink? 

No, I have not assigned them auto upgrade.

sylink.xml is the communication file, when you push these files from the SEPM using communication deployment option it would stop smc and start after replacing.

I see. I actually use the Remote Push method from the SEPM to new clients, but these clients have been running for weeks now with this error and they have been rebooted many times and SEP functions normally on them except for this issue.

it happens only when they restart right and not when they log off and log back in?

I believe  in the Antivirus policy settings you would have changed, Start Symantec endpoint when computer starts?

under AV policy,advanced , Autoprotect what options have you selected?

A screenshot of this configuration page is attached.