Event Id: 4005 and 36 on RDS 2016 Server

I am continuously getting event id: 4005 on RDS server.  

Server OS: Microsoft Windows Server 2016 Standard Version 1607 Build 14393.3443.

The Winlogon process terminates unexpectedly and prevents new logins from processing.  However, the only way to get login process work after the power cycle the server.

Webroot antivirus agent 9.26.61 is installed on the server.

The following events are usually logged when this issue occurs:
Event Logs : Microsoft-Windows-TerminalServices-LocalSessionManager/Operational
Event Source: Microsoft-Windows-TerminalServices-LocalSessionManager
ID: 36
Description: An error occurred when transitioning from CsrConnected in response to EvCsrInitialized. (ErrorCode 0x80004005)

Event Logs: Application
Event Source: Microsoft-Windows-Winlogon
ID: 4005
Description: The Windows logon process has unexpectedly terminated.

Doing some googling on this over the past day or two shows that this is an issue with other versions of Windows Server (2012 r2 for instance), and that the issue is caused by specific Windows Updates....

Here

and

Here

Only thing is...these updates don't exist in 2016 from what I can tell. In fact, I'm led to believe this is an outstanding issue with Server 2016.

I got January 14, 2020—KB4534271 (OS Build 14393.3443) installed.

Date modified on rdpcorets.dll is 26/11/2019.  Version is 10.0.14393.3383.