Internet traffic blocked by policy violation

[yeowkm99]

Our internet users encounter issue whereby Internet services like office 365, access to google etc is blocked suddenly by policy violation.

the way to bypass it is to launch browser using administrator rights 

[seadave]

Long shot, but you might check to see if your DCs were updated last night.  This week's updates caused some DC auth issues.

https://www.bleepingcomputer.com/news/microsoft/windows-kerberos-authentication-breaks-due-to-securi...

If you have FSSO in place, perhaps it isn't able to properly communicate with your DCs and that is why only Administrator is working?  That kind of makes sense if you are launching the browser with Domain Admin rights (actually this is a nightmare, never do this!), but if you are speaking about local administrator rights then perhaps a dead end.  You can copy your policy that uses authentication and remove that feature, place it above your current policy and disable the one that isn't working until you are able to better review your Fortigate and or FSSO logs.  I'd open a case with the TAC, they should be able to help.