How to resolve the issue in System Center Configuration Manager 2012 under the Endpoint Protection Status Screen, under Endpoint Protection Policy Application State a client shows "failed":
- Browse to C:\Windows\System32\GroupPolicy\Machine\ on the client affected
- Delete Registry.pol
- Restart the SMS Agent Host service
Or write a script to deploy to the clients affected containing the following:
del C:\windows\system32\grouppolicy\machine\registry.pol /q
net stop ccmexec
timeout /t 20
net start ccmexec