We are in the process of replacing McAfee with Symantec on several thousand machines but our desktop engineers who have been pushing out the install to the non-servers are saying they are seeing some inconsistencies in testing. In looking at the machines the only difference I am seeing is that with a domain admin account I can access the change settings (though all the settings are greyed out) whereas with a user account I cannot even access that menu. Not a big deal but I figured that while I am waiting on them to let me know what inconsistencies in policy they are seeing I'd ask if there is any influence from the AD policies. We do have AD sync enabled but only really use it for a few groups and for the administrators. (though I do maintain a local admin account just in case.) The desktop engineers are not amongst the SEP admins.
We are running version 12.1.4 managed by two 2012 R2 Standard machines. The clients are mostly Windows 7 though there are a few XP machines still kicking around.