You may need to run down the reason behind "Process MFEVTPS ... was blocked from accessing create ... via the rule Sanitize MFEVTP Service Process"
mfevtps.exe: Provides trust validation for all McAfee processes.
Process description and load order for VirusScan Enterprise and McAfee Agent Technical Articles ID: KB65784 Last Modified: 11/3/2016
At first blush, it looks like there is an access protection policy causing that error. I don't want to red herring that error, though.
If I go in to services.msc, I see the service, it's set to manual, and it is not running. I haven't done anything to see if I could trigger the service, but I am unable to stop or disable the service. I'm genuinely flummoxed on this one -- I thought I had figured out a lot of the ePO quirks, but then they throw this one at me :/
For giggles, what is Cryptographic Services set to?