crazyscot: A large red sphere with many small coloured spheres orbiting it (planet weird)
Add MemoryShare This Entry
(I need a new icon for this post. My current "weird" icon isn't weird enough. I wouldn't have believed this if I hadn't seen it myself.)

So there I was at work, just after 5pm, starting to think about going home. I'm using the WinXP machine on my desktop, accessing the company email (google-hosted via the standard web interface). All of a sudden, as I'm archiving off some old emails, the machine looks like it's shutting down. Uncommanded.

What?

No, it has locked itself. And only (some other user I've never met) or an administrator can unlock it.

Bwuh?????

My incredulous exclamations attracted my neighbour and my boss, who were both as utterly boggled as I was.

I picked up the phone to the helpdesk, who had gone home for the day. The duty chap took the details - was as surprised at the description as we were! - and asked if it was urgent. Thankfully I had already completed the urgent task that required me to run the in-house Windows software, so he took details and said they'd investigate in the morning. Fair enough.

In the meantime my boss went directly to one of the senior IT bods, with whom he has a good working relationship. He was sufficiently intrigued to decide that he would put delay his departure for the day and come and investigate. He has admin access and was able to unlock the machine (which, in the usual Windows way, forcibly ends the logged-in user's locked session); he proceeded to log in and start poring through the machine's logs; he's very intrigued and wants to get to the bottom of this.

But. I mean. What. I don't even know where to start. It was as if my Windows machine - a full first-class PC, not a thin client, nor a Remote Desktop server - had routed its keyboard, mouse and monitor to some other random machine somewhere on the network. This one takes the biscuit, the cake, the 1000lb weight, and the feather duster.

Um. So. While our IT people try and puzzle it out, any ideas, dear f'list?
There are 3 comments on this entry. (Reply.)
 
posted by (anonymous) at 07:56am on 19/04/2012
If remote desktop is enabled on Windows XP, any administrative user can log in remotely. This has the side effect of forcibly logging out the current user. It's possible someone was trying to log in to their own machine, and got the wrong address...

(It's better in Windows 7, where it behaves in the same way as switching user, so it just locks your session)
crazyscot: Selfie, with C, in front of an alpine lake (Default)
posted by [personal profile] crazyscot at 07:57am on 19/04/2012
Interesting. But the user in question, whilst a Remote Desktop user, is not (to my knowledge) an administrator...
Edited Date: 2012-04-19 07:58 am (UTC)
 
posted by [identity profile] mdavison.livejournal.com at 08:15am on 19/04/2012
(That first one was me)

Hmmm,

I think there's a setting somewhere in the guts of security policy that says who can disconnect other users, but I currently fail at remembering where this is.

The default behavior is described at http://support.microsoft.com/kb/280828 if you are interested...

November

SunMonTueWedThuFriSat
          1
 
2
 
3 4
 
5
 
6
 
7
 
8
 
9
 
10
 
11
 
12
 
13
 
14
 
15
 
16
 
17
 
18
 
19
 
20
 
21
 
22
 
23
 
24
 
25
 
26
 
27
 
28
 
29
 
30