two users rdp into same server one users opens a program that says the other other user opened how???

sniper7777777

Honorable
Sep 22, 2014
98
3
10,645
ok so O.S. is windows server 2012 R2 Server
two users user A & B RDP into the server at the same time
user A opens say internet explorer
in task manager it says user B opened it how is this possible any info would help me,
to be clear this is for a specific program but I just need some infomation on how this would be possible *note there is no runas command shortcuts or anything crazy just standard stuff
 

asoroka

Distinguished
Apr 19, 2009
1,200
1
19,660
Are you sure that you are looking at the same explorer instance.

Every time you open a file explorer window, you start an explorer process (same process name). I suspect that you will be able to find an explorer process or two for user A.

Try opening a distinct program eg notepad etc
 

sniper7777777

Honorable
Sep 22, 2014
98
3
10,645


I did I opened power shell from user A and it said that user B opened in in "username" under details in task manager
 

asoroka

Distinguished
Apr 19, 2009
1,200
1
19,660
so it sounds like you are using the default administration mode (2 user max) so all users share the same process and permission space).
So given that A is always logged in, B is always the last one to log in (top of thelisT0 and will show as the owner of all tasks until he logs out.

Terminal server would give you full separation, but that is a licensed product.

That's my guess, its been a while since I studied the ins and outs of Windows.
 

sniper7777777

Honorable
Sep 22, 2014
98
3
10,645


well also just to be clear I ran iexplorer.exe as user A and the process still opened as user B opened it
 

sniper7777777

Honorable
Sep 22, 2014
98
3
10,645
MERGED QUESTION
Question from sniper7777777 : "ran a program as user B but the process opens as user A opened it How???"

server 2012 R2 O.S. two users rdp'ing in and out of the server and

ran a program as user B but the process opens as user A opened it How???

how is this possible it is affecting a sequence of events that I need to fix on this server can someone help me