After installing Symantec Endpoint Protection (SEP) 14.0 RU1, Random hanging occurs on Lync server.
Multiple Lync production servers had encountered hangs. The analyses by Microsoft indicate that the issue is caused by SEP driver.
SEP version: 14.0.3752.1000
OS: Windows Server 2012 R2 Standard Edition
The DUMP logs and Symdiag logs collected. After analysis, it is confirmed that the hang caused by SEP driver.
This issue will be resolved in SEP 14.2 RU1 MP1.
Workaround:
Exclude the following directory, including all subdirectories, from being scanned: The path depends on your version of SEP: "C:\ProgramData\Symantec\Symantec Endpoint Protection\<version>\Data\Definitions".
Example for SEP 14.0 RU1: C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.3752.1000.105\Data\Definitions
Note: These paths may vary depending on product build, or if the ProgramData or Windows directories have been moved to another drive.