Article ID: 2688238 - View products that this article applies to.
Consider the following scenario:
In this scenario, when the Group Policy settings are applied, the Microsoft Network Inspection service is stopped, and the start of the service is set to Disabled. When the Configuration Manager client evaluates Client Health and determines that the service is disabled, it remediates the problem by setting the start of the service to Automatic and starts the service again. However, the service soon stops again because the service is stopped by the Active Directory Group Policy.
This behavior is by design. Group Policy settings to disable services should be carefully evaluated together with the Configuration Manager group or the System Center 2012 Endpoint Protection group to make sure that these settings do not disable services that are required for required functionality.