possible computer monitoring software

[jimgunderson]

I am starting to think there is "monitoring software" on my computer. We have an ADS network and I usually stay logged in, just lock my screen when I leave. I have dual monitors, and on occasion I will come back to my computer, I have been "logged off" where it asks me for username AND password. After doing so, my desktop comes up with all the apps I had open but they are all on the second monitor. I have looked at the security logs and it shows logoffs / logons such as this:

Special privileges assigned to new logon.

Subject:
Security ID: SYSTEM
Account Name: computername
Account Domain: XXXXXXXX
Logon ID: 0x50435DD

Privileges: SeSecurityPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege
SeDebugPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege

Any ideas?

 

[kanewolf]

The login behavior sounds like someone is using your computer via remote desktop or is doing a switch user. Either of those will cause you to be back at the full login screen rather than the lock screen.

 

[jimgunderson]

The login behavior sounds like someone is using your computer via remote desktop or is doing a switch user. Either of those will cause you to be back at the full login screen rather than the lock screen.

If that was the case, then a new user would show up under c:\users\%profiles% but there isn't?. That is what leads me to believe there is monitoring software that is allowing someone to do this discreetly. Is there software (or another way) that I can install to check for monitoring software?