Symantec Antivirus 10.0 causes PC reboot when accessed via RDP

There is a bug in Symantec Antivirus 10.0 that causes a PC to reboot when accessed via terminal services.  On a SBS network, the Sharepoint "Connect to my computer" causes the remote PC to blue screen and reboot.

The actual cause is Symantec AV.  This is Symantec's current webpage on the bug.  Every  have to patch every affected PC's registry.

This is a terribly confusing bug.  It appears to be either a serious hardware issue, or a Group Policy failure.  The bug isn't documented very well on the net, so it's difficult to find.

Here's the short version, pasted from the page above.

WARNING: We strongly recommend that you back up the registry before making any changes. Incorrect changes to the registry could result in permanent data loss or damaged files. Modify only the keys that are specified. See the documents How to back up the Windows registry and How to use the Windows Registry editor before proceeding.
 

Adding the KStackMinFree value is a two-step process

1.     Modify the registry by adding the KStackMinFree value.

2.     Stop and then restart the Symantec AntiVirus service for changes to take effect.
If the problem persists, restart the computer. After you restart the computer, confirm that the changes that you made to the KStackMinFree value are still present.

To modify the registry by adding the KStackMinFree value in Symantec AntiVirus 9.x or later

1.     In the Registry Editor, go to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\Storages\Filesystem\RealTimeScan
 

2.     Right-click the RealTimeScan key, and then click New > DWORD Value.

3.     Type KStackMinFree for the name of the new value.

4.     Right-click the KStackMinFree value, and then click Modify.

5.     Set the Base to Hexadecimal, and then type 2200 in the Value field.

6.     Click OK.

7.     Restart the Symantec AntiVirus service.
If the problem persists, restart the computer. After you restart the computer, confirm that the changes that you made to the KStackMinFree value are still present.

Windows 2003/XP/2000 users can automatically create the KStackMinFree value at 2200 by downloading and importing the attached SAVCE9_KStackMinFree.reg file.