Trusted updater policies causing clients to show at risk status with a "policy not current" message related to application control.
SES console and clients later than 14.3 RU3.
Trusted Updater does not work on versions after 14.3 RU3. The feature is planned to be deprecated soon.
If you are running SES versions later than 14.3 RU3 remove the policy from groups where it is assigned and delete it.