It would be useful to add an option to the Enterprise Portal that re-starts the ITSM Service on an endpoint so that the endpoint can pickup a new profile or pickup new whitelisting rules straightaway, rather than waiting for the next polled check in (10-15 minutes). This could potentially be achieved with a powershell script (restart-service ITSMService) instead of using "net start ITSMService" as this would disconnect the device to make it impossible to then use "net start ITSMService".