Endpoint Encryption

We are rolling out whole disk encryption with SEE 11.1.3. We have had some users complain of slowness during the encryption process. These users are mostly on spinning disks. Some performance hit is expected but these PCs become unusable. Are there any process we should be excluding in our AV software? I looked through best practices and didn't find anything. 

There are no known AV exclusions necessary, from my search around the KBs.

To try to address performance issues during initial encryption, I'd recommend the following:

• Minimise the amount of data on the drive
• Make sure it is healthy (no bad blocks, etc.)
• Defragment the drive
• If possible, untick the "Encrypt unused disk space" option (only recommended for brand new drives that have never seen any data of any sort, and have just been installed with a fresh build)