> Then the *other* piece of software running on the computer wouldn't be 
> able to log audit events under the correct username.

Why not?  If it can log them under the correct username when nobody is 
logged on, why shouldn't it be able to do it when someone else is logged on?

> Under Windows, any processes started by a user ordinarily get terminated 
> when that user logs off. Unless they do something special to prevent 
> this...

Like what? Do most programs cope OK with running when nobody is logged on? 
I would have thought some get a bit screwed up what with there being no 
desktop or whatever.

Post a reply to this message