It appears that there is a bug in Windows Server 2003 with Service Pack 2 - session_OnEnd events no longer fire in Classic ASP applications. A hotfix and KB to come soon.

EDIT: Hotfix is now available here (KB934903)