I have terminal servers that load mulitple instances of ccSvcHst.exe and the solution seems to be in this document however i'm unable to make the registry change.
http://www.symantec.com/docs/TECH91070
SmcGui must be disabled by adding the following DWORD registry value on the Terminal Server:
HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\LaunchSmcGui = 0
I get an error "Cannot edit LaunchSMCGui: Error writing the value's new contents." When attempting this change. Any tips? Running client version 12.1.2015.2015 on 2008 R2 fully patched. I almost think that SEP is preventing the registry change but even disabling SEP via the GUI still does not allow the registry edit. I checked my Application and Device Control policies but I don't have anything active that would block registry changes. I am logged in with domain admin rights.