Евгений Дикевич

$Event = [microsoft.win32.systemevents]
Register-ObjectEvent -InputObject $Event -EventName "SessionEnding" -Action { Stop-process или Taskkill}
Register-ObjectEvent -InputObject $Event -EventName "SessionEnded" -Action { Stop-process или Taskkill }