Uplevel security with Endpoint Privilege Management + Windows LAPS

Hi Terry - we've built EPM on new policy delivery / device check-in tech that's still being actively innovated on. You should never need to ask an end user to manually kick-off a sync. It is the case that for current Private Preview customers, it may take up to 4 hours for the new policy to be delivered, but by the time we GA we expect the policy-updated-so-notify-and-sync-now mechanism to be fully operational. We do have a background-processing delay that means the approval itself can take 15 minutes to be processed, but after it is processed we expect it to flow to the device and the user to receive the pop-up notification within seconds. And we'll be working on reducing that 15 minute background-processing delay, too.