something newish popping up for me. I have seen this process running on our server 2025 builds "DesktopWindowXMLsource". I think its preventing clean logoffs but i cannot tell how its being initiated to start with. These are published apps being used.

i've seen this as well with explorer...you doing any onedrive pub app stuff?

no, but we do publish explorer

not seen that process before. I would stick it in the logoffchecksysmodules reg key and see if fixes the log off issues

@Shane Swacus I only ever had trouble with published explorer. I switched to 3rd party explorer and was way more happy with that.