Even though there is not exit button on the application itself, Users are able to shutdown the application via task manager via shutting down the proceess.
This is correct, as for any other services that run on that machine, and it's doable only if the user has administrative rights. A normal user shouldn't be able to stop this service. However they can kill the EPSecNotifier process even without administrative rights, but the EPSecNotifier is not required to enforce device access policies. If you kill that process you won't see the pretty balloon messages anymore, but the agent will still be doing it's job.
This is correct, as for any other services that run on that machine, and it's doable only if the user has administrative rights. A normal user shouldn't be able to stop this service. However they can kill the EPSecNotifier process even without administrative rights, but the EPSecNotifier is not required to enforce device access policies. If you kill that process you won't see the pretty balloon messages anymore, but the agent will still be doing it's job.