Endpoint Protection

Our SEP Manager is showing 3 different desktops as disabled endpoints, and none of them are able to do LiveUpdates, as the option is greyed out on the status screen. However, under clients tab I can find all 3 of them as being managed, online and up-to-date with their protections. Does anyone know why this would be the case? As far as being able to perform LiveUpdates, is there a command I could run that would help?

Thanks in advance

You need to click on the link to take you one step further to see exactly which component is disabled. It's misleading in that it seems to indicate SEP is "disabled" but it's likely not. It's just one of the components.