Upon logging in to the session, the users get a warning message that Shutdown.exe is blocked

Version 2

    Forced reboot of server invoked Shutdown Event Tracker

     

    Since the servcer was restarted with force, the Shutdown Event Tracker was invoked. The process for the Shutdown Event Tracker is "shutdown.exe" and this was blocked.

     

    To correct this issue, a GPO can be created to disable the Shutdown Event Tracker