For several months now, every time any of our 3 Windows Server 2012 R2 domain controllers reboot, they're unreachable for an hour according to our network monitoring software (PRTG).
I can see from the event logs that the Security Accounts Manager service does not start properly with event ID 7044 (The following service is taking more than 16 minutes to start and may have stopped responding: Security Accounts Manager).
Then nearly an hour later, I see event ID 7043 (The Windows Modules Installer service did not shut down properly after receiving a preshutdown control.)
We've got plenty of other 2012 R2 member servers all installing Windows Updates in a timely fashion - it's only those servers with the Active Directory and DHCP roles installed that take an hour to reboot.
I've Googled this on several occasions and haven't come across anyone else experiencing the same.
Created an account just to share my experience with this issue today.
Virtual 2012r2 DC/File Share/Print Mgmt server was being extremely slow. Shutdown/restart buttons did nothing, and running a shutdown via Hyper-V caused a blue screen that stuck around for long than I wanted to wait for (work hours, production server).
Hard-shutdown the VM process and started it back up. Windows updates were pending, unknown to me, and after arriving at the "Shutting down service: Windows Module Installer", the server took a full hour (like yours, almost exactly 1 hour) before successfully rebooting.
Every post I read said to be patient, and that was indeed the case. A look at the event viewer after the reboot showed two 7043 ID entries - One for the Windows Module Installer service, and one for the Group Policy Client service. "The Windows Module Installer service did not shut down properly after receiving a preshutdown control."
Best suggestion I've found for a potential fix is to "reset" the SoftwareDistribution folder:
Hope this helps someone in the future! (and let me know if this solution helps you out! I'm curious to hear other experiences/suggestions)