After experiencing some Workspace.exe crashes (DeltaV Operate) I happened to poke around the Windows Event log and saw numerous red lights / errors spawned by McAfee Endpoint protection.
Upon looking at the installed (standalone / unmanaged) McAfee app (version 10.6) these same "errors" appear there. The majority are flagged as "Threat Prevention: Access Protection / Would Block / Critical".
The offender is NT AUTHORITY\SYSTEM ran SYSTEM:REMOTE, which accessed blah blah . . . usually items in the GRAPHICS-IFIX directory, or DVDATA\TGDFILES.
I searched KBA's but couldn't find any guidance for 10.6. Any thoughts? This can't be good for performance, and it appears to be happening on all nodes.
Mordac, preventer of information services: "In a perfect world, no one would be able to use anything".