Any process using a way too much memory or cpu ?
If so, which one ? Does it occurs during the login of the user ? When tunring off the machine ? End the user session ? Short time after the user is logged on his machine ?
If no SEP process are using abnormal memory quantity or CPU use, uninstall SEP. If it's better, check environment settings on the machine even the GPO set on the machines cause it has been noticed sometimes that GPO missconfigured or corrupt could make struggle the AV engine/AV drivers of a lot of security softwares including SEP and slowness noticed without noticing high cpu or memory used on the machines.
Do not hesitate to use ProcMon and set filters with the guilty process and the rest of the process of expected process running on the machine.
Kind Regards,
A. Wesker