Wayne in your case, where the Launcher loads successfully but the 1st task off the Launcher results in that error, it clearly means the Windows Firewall on the Sage server is the culprit. I know the KB article is all over the place and that's because so many factors can be at play. But in your case it's specific and there are only 2 ways to consider dealing with it (feel free to avoid reading the Tech Factoids):
-------------------------------
1) Enable Spawn Task in User Maintenance for all users. It's true that box is not checked by default for new users so if possible setup a K-Sync alerts to monitor the Sy_User table for AppServerSpawn <> Y to send an email. (BOI trick available too.)
2) Configure the Windows Firewall for an Inbound Rule to allow (pvxwin32.exe and pvxiosvr.exe) and since v2016 for an outbound rule as well (Launch32.exe, Launcher.old.exe, Launcher.2016.exe)
_Tech Factoid A:_ When the box is not checked the App Server uses a program called _server (in \home\lib) to listen for requests. This program was created for v4.10 but uses older 3.x ""technology"" (similar to the old Host.exe) when listening for connections. It's a bit faster to load tasks from Launcher but requires the high ports to be open (which really means configure the Windows Firewall for Inbound and Outbound rules - see below) and doesn't support a feature called NAT (Network Address Translation - more on that if you want).
_Tech Factoid B:_ When box is checked, it uses a program called 'server' in \home\lib\_Appserv. This is the native listening program that comes with the Providex App Server (when Mike King's team developed it way back when). It doesn't need Windows Firewall enabled and interacts better / stabler with the client (meaning the task you ran off the Launcher). However it loads tasks a little bit slower. But if you have any kind of imperfect connectivity on your network (like @SteveIwanowski mentioned with VMs but not limited to that), then check the Spawn Task box. In your case, because of the 1st task error, it's a slam dunk to check the box.