Good morning,
We have a set of Remoted Desktop Session hosts that seem to have their CPU pegged while ccSvcHst is running at very random times. It appears random but I could also be missing somehting in the configs. Sometimes the Defwatch Quickscan takes minutes, sometimes hours and it is always at random times during the day. No time is the same for the past month. There could also be numerous scans during the same day.
Is there a way to tone back some of these scans to only do it at night? Am i to assume that any time someone logs in, it will to a quick scan or some iteration of a quick scan?
We have a v14 server backend but these clients are still running v12. I plan on upgrading the clients this weekend due to the need for uptime but this behavior was happening when we had v12 installed.
Thoughts as to why this seems random and possible fixes that I have overlooked in the policy configs?
thanks!