is it the case?
Symantec Endpoint Protection client fails to report reboot status to Symantec Endpoint Protection Manager after upgrade to 12.1.2
Fix ID: 2871345/3069464
Symptom: The Symantec Endpoint Protection Manager console shows "Restarted Required" as "No" for clients that have not restarted after the upgrade to 12.1 RU2. The deployment status in the Symantec Endpoint Protection Manager console displays the message, "To provide complete protection Symantec Endpoint Protection requires this computer to restart." The Symantec Endpoint Protection user interface on the client also shows that a restart is needed.
Solution: Modified the upgrade process to send the latest opstate data to the Symantec Endpoint Protection Manager server.
can you test one of the affectde machine to RU3.