Any Mcafee staff care to comment on this?
I would say, that if you disallow protection of McAfee services by Access Protection, then it is not a question of VirusScan, but some other thing, if you are able to start and stop these services under a non-admin account.
If you enable protection of McAfee services by Access Protection, then it is only some VirusScan processes (or McAfee process) that are allowed to sotp and start them.
I have found the same issues. Why are the permissions on the McShield Service so open. Non-admin users also have the rights to delete the account, which is, I think unacceptable.
The workround is to block the stopping of McAfee services through ePo, but we use the ability of admins being able to disable them when installing known and safe software packages as it massivly improves installation times.