I'm having the same issues on all my server 2008r2 servers. I found that the event ID for the alert is 26 and only happens when logging in/out or on reboots. I reboot 1 of the servers daily and was able to narrow down that the issue first appeared on 5/11. There were no windows updates installed on that date however I did update the screenconnect agent to 24.1.7.8892. I was able to confirm that the connectwise screenconnect agent is causing the problem by uninstalling the agent and reboot, issue goes away. If I reinstall the agent the problem comes back. I opened a ticket with connectwise and they said they are working on releasing a fix soon. As server 2008 and 2008r2 are affected I would bet win 7 machines are too. Hope this helps as it was driving me nuts as well.
