We are also running Sophos Endpoint Protection in our environment. We may be on to something here.
However, all of my users are running it, but not all of the users are experiencing the issue, which is why I kind of wrote the AV off throughout the troubleshooting process. Additionally, the problem ebbs and flows with no real consistency.
On a side note, I appreciate everyone commenting and giving this issue some traction. With more eyes on it, I'm confident we can figure this thing out.
Thank you.