Some Symantec Endpoint Protection (SEP) clients switch automatically from "Computer mode" to "User mode"