It would be a great help to have an option to create a Windows restore point when installing or updating a client release of Endpoint Protection (or really for any other application).
For SEP server push installs, the Administrator would be able to preselect the answer and/or let the user decide with a lock option.