Windows Start Menu hangs with Endpoint Protection installed

Products

• Endpoint Protection
• Endpoint Security

Issue/Introduction

After a reboot, Windows Explorer will sometimes hang after clicking on the Start Menu.  This happens when Endpoint Protection (SEP) or Endpoint Security (SES) are installed with the Application and Device Control feature. 

Cause

A deadlock can occur in the SearchHost.exe process if sysfer is injected into it. Sysfer is part of Application Control.

Resolution

Create an Application Control exclusion for the SearchHost.exe process which will prevent sysfer from injecting into it. 

See the following documentation for creating an exclusion: 

How to create an Application Control exception or stop sysfer.dll injection into a process with Endpoint Protection

Additional Information

CRE-16648