The challenge is that servers have a 600 second default delay whenever a PowerShell script is detected in the shutdown script setting in GPO (Computer Configuration/Polices/Windows Settings/Scripts). The idea is that if the server crashes, the script shouldn't launch, so we'll see heartbeat alerts for crashes but (unless the server is patching and taking a really long time), we shouldn't see alerts for controlled reboots.
We are attempting to run a very simple Powershell script at shutdown to put a server into maintenance mode whenever a controlled shutdown or reboot occurs. Not sure if this would be a PowerShell question or a Group Policy question, but I'm guessing this has to have affected at least a few of you.