I have setup an alert using Monitoring to notifiy me if Process TeamViewer.exe is not running.   TV emails the alert but in fact it must be running because I can remotely connect to the endpoint.  Once the user, or I login on the endpoint the Alert is recovered.  The same thing is happening with System Updates.  When logged into the endpoint, all appears well.  A short time later, an alert is generated that there are system updates available.  If I log in, this alert goes away.  I am using Win 10 on all devices with a custom install module with a policy as well as monitoring policies.