When I check the scan logs on some machines, I am seeing defwatch scan in addition to the scheduled scans. Also this appears on some machines despite the fact that all machines have the same policies applied to them.
When the defwatch scan kicks in, it brings down the machine to its knees and users complain that they cannot do anything during that time. How do I stop/remove the defwatch scan? Why does it appear on some machines, not all?
I would apprciate any help.