When Winlogon can’t load a GINA, the server reboots. I run all my tests in virtual machines attached to a remote kernel debugger. I had set up a rule to ignore this first hardcoded breakpoint. In a regular environment, Winlogon did the only sensible thing to do when it received that unhandled exception : terminate.
That triggered the reboot process.