Patch management solution SMP 7.5 restart process

Hello everyone,

Would you please advise which Altiris process call the shutdown (auto restart) of the windows 2003/2008 servers when patching and a specific patch requires restart?

I often see AeXNSAgent.exe and sometimes see winlogon.exe. I know for sure that AeXNSAgent.exe call the restart when a patch requires restart, but NOT QUITE SURE if WINLOGON.EXE has anything to do with Altiris Patching?

Please advise.

Thank you,

Charlie Tran