We currently have approximately 200 desktop machines running SEP in Computer Mode that we are in the process of switching to User Mode.
We're doing this mainly to satisfy the issues with device control. Permissions will travel with a user and it will stop those without permission from logging into machines with USB access open!
We've always used the Unmanaged Detectors to let us know if SEP is not installed on one of the desktop machines. It's quite rare but sometimes helpdesk staff can forget to install it when building PCs so having an extra level or checks is never a bad thing.
I know that User Mode clients cannot run as Unmanaged Detectors.
Is there any way that we can be automatically notified if one of our desktop machines doesn't have SEP installed when the whole subnet is running in User Mode?