Disabled Auto-Protect Without Authentication

We noticed that we can right click on the windows bottom left SEP tray icon and select "Disable Symantec Endpoint Protection" and it appears to work. The icon turns from having a green dot to having a red crossed out circle. The client also has a log that auto-protect has been disabled. Why is it that I can bypass the password protection we have setup by simply clicking on it?