A policy I created to disable nearly everything wants to ininstall MBEP?

[JoesCat]

I have two policies I've created to disable everything, and nearly disable everything (real time protection, updates, Etc.) for troubleshooting purposes. When I'm working on an endpoint with problems, I want my AV solutions out of the way in case they're interfering somehow. But whenever I move an endpoint to one of these policies, it seems upon the next refresh a red ominous alert appears at the lower right indicating a restart is required to uninstall. The option to postpone is there, but . . . I DO NOT want to uninstall!

In fact, I'd like the opposite - an option in the console to intentionally install MBEP at will should an endpoint be knowingly retiring (separate but related item).

[djacobson]

In accordance with your policy, some parts of the protection plugin may be uninstalled to honor your policy. The agent will still be present and will reinstall whatever is needed once the machine is moved back to a policy where realtime items are enabled. This also happens when switching from IR to EP, and vice versa.

[JoesCat]

Ok good enough then!