Every morning at 3:00:26 AM on the dot our Access Control Server Services are issued a stop command by NT Authority\System. I don't know why or how these services are being told to stop, but they prevent our Access Control Server from functioning.
We have put this machine in an exclusion list from any and all domain GPO pushes and the services still stop.
One morning at 2:58 we unplugged the network cable, and the services stayed running--they were never issued a stop command.
Where can I go to determine what is telling NT Authority\System to stop services at 3:00AM.