High performance issues on Remote Desktop Session Host after running a local scan

Issue 

A Remote Desktop Session (RDS) Host experiences a significant performance impact after a local scan is run.

Symptom 

Users on the RDS Host notice slow response times and elevated CPU usage during or shortly after a local scan, affecting all concurrent sessions on the host. 

Cause 

On an RDS Host, the Endpoint Agent tray icon is rendered separately for every active user session. When a local scan runs, each session's tray icon updates independently, and this rendering compounds across concurrent sessions, adding unnecessary load and degrading performance for all users on the host. 

Resolution 

1. Navigate to Configure > Policies.
2. Select the policy that the RDS Host is assigned.
3. Click the Endpoint Agent tab.
4. Toggle off Show the ThreatDown icon in the notification area.
5. Click Save.

This stops the tray icon from rendering per session, eliminating the added load during scans.