Hi, where do you see the 'not managed by administrator'?
We need to configure antimalware policy, we still need to enable SCCM to manage the endpoint protection client. We can configure this setting in client settings - Endpoint Protection:


Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com.