After installing the SEP (Symantec Endpoint Protection) 14.0 client on Windows Server 2016, Windows Defender is still turned on and may interfere with SEP's ability to protect the system.
SEP 14.0 or later installed on Windows Server 2016.
Windows Server 2016 does not offer a Security Center that SEP has historically used to properly disable Windows Defender. This is why SEP 14.0 disables Windows Defender by introducing the following registry value (32-bit REG_DWORD) and setting it to "1".
For reasons unknown at this time the above value does not always persist and Windows Defender may be turned on again.
Symantec will update this document if additional information becomes available.
Please disable Windows Defender manually by either making the registry changes described above, or managing Windows Defender via a GPO. For more information, please see the following Microsoft documents: