1

Greetings to the well of knowledge…

Windows Server 2016 VM. Serves as a terminal server for our accounting department’s Dynamics Great Plains installation.

Recently, Windows Defender’s real-time malware scan has been sucking up 50 to 80% of the CPU when it is active, causing the CPU to run sustained at 95 to 100%… Turning off real-time protection opens the gates and GP transaction processing continues unabated.

I decided to run the server with real-time protection off for a few days, however something happens that causes it to be turned back on when I go back into Settings.

Defender.png
Defender.png800×627 86.5 KB

Has anyone else seen this behavior?

Thanks,

Ken

7 Spice ups
2

You could use GPOs to turn off Real Time Protection. You can find it here: Windows Components/Microsoft Defender Antivirus/Real-time Protection.
But better would be to add GP, either as File, Folder, Process, as an exclusion. Especially if user have Internet access on this Term Server.

1 Spice up
3

i did see that happen once in January. The next Windows update fixed it.

4

Sometimes it just happens to Windows Defender. You can track down what files and folders are being scanned and exclude them as GDaddy suggests. One more option is to temporarily add more vCPU to the virtual machine to compensate for the increased load or implement some Hyper-V performance tweaks to make things faster https://www.hyper-v.io/several-tips-hints-full-throttle-hyper-v-performance/ . Migrating to Windows Server 2019 VM is also a possible resolution.

1 Spice up