Tamper Protection off for select clients. why?

I have 5 different offices with roughly 475 clients all using the same policy that has Tamper protection set to ON.

For some reason, in only ONE office, tamper protection is disable on about 90/115 clients.

The current version i have (SEPM 12.1.5) and Client (12.1.5337.5000) does not allow me to enable from the manager, but is there a way to just reapply the policy to that client group to turn it on? Or a way to enable it through command prompt? Im looking to avoid going to 90 clients and manually enabling the tamper protection. 

Thanks in advanced.