What version of LDMS are you using?
We saw in some situations the install of 9.6 with AV potentially taking several reboots. How many times have you rebooted? What does the reboot look like (can help identify what is driving the reboot)? Is it just one users device, or all users?
If you keep getting reboot prompts, you might have stuck pending file rename keys set that are getting read whenever vulscan runs and it triggers a reboot prompt.
Thanks for the link, that is some good information. It is only happening on a hand full of computers and i have been deploying the AV to hundreds of desktops.
I noticed in my Reboot settings that I had set "Act as if reboot is always needed" so i'm thinking that might of caused it. I changed it to "Detect if reboot is needed"
I'm going to see how that plays out