Endpoint Protection Suite Plus, 75 licenses, subscription active, Active Directory environment, blah, blah....
Randomly, SOA report File System Shield as inactive on some workstations. On client, expired protection/license is reported.
Simply, restarting the Avast Net Client Service seems to resolve problems, but only administrators can do it.
Regular user remain unprotected for an uncertain period. Strangely for me, client version is Server Business Protection Plus.
Client was installed from SOA via unattended deployment.