If you go into monitoring and the System center 2012 endpoint protection you should be able to click on the client at risk to see more info about why they are.
Also you can look at this log on some of the client :EndpointProtectionAgent.log.
If you just did the upgrade it could be because they don't have the latest update yet or they have yet to report once everything was updated. I have also found that sometime a reboot is require for the client to complete it's upgrade/remove of other AV
Are they all up to date?
When was the last time the communication was done ?
Did you look at the Client Check Detail tab when you select a client ?
This is how lots of my clients look
Defs on clients are up to date,
SCCM console
Not showing anything for Def last version column
Client Check Detail was run and is ok
Days since last communication 0
This is how lots of my clients look
Defs on clients are up to date,
SCCM console
Not showing anything for Def last version column
Client Check Detail was run and is ok
Days since last communication 0
Hi,
What is the PC status on the client? Protected?