Servers hosted on Azure randomly stop accepting RDP connections, or are observed hanging. Symantec Endpoint Protection (SEP) 14.0.x is installed. This issue can occur even when only the "Basic Protection for Servers" Client Install Feature Set is installed.
Deadlock conflict with filesystem activity by MSSenseS.exe (Windows Defender Advanced Threat Protection Service Executable).
In order to avoid the conflict with SEP, the process must be trusted in the SEP client's assigned Virus and Spyware Protection policy. To make this change from the Symantec Endpoint Protection Manager (SEPM), please do the following: