Hi All

I recently tried to log in to my Windows 8.1 laptop (Sony VAIO) and when I hit return, it said there was an active remote desktop session and that the users would be kicked off.

I disabled all RDP long ago and do not have any software for RDP.

I have ESET and Malware Bytes and have done full scans that found nothing, but I am concerned someone now has access to my laptop.

Can anyone advise why this might happen and how I check to see if someone has hacked me

.

Hi,

You could check all active session on system by the following command:

1. Open Command Prompt (Admin).

2. Type query session, press Enter.

There you will see the session name, user name and state.

Alternative, you also could check the RDP log file located in Event Viewer:

Applications and Services Logs\Microsoft\Windows\TerminalServices-LocalSessionManager

Hello OrangeGoblin1973,

Did you see anyone else listed after performing the query session at the Command Prompt?

You could also check to see if someone is connected to your computer by opening Task Manager, select the Users tab, and verify who is currently or possibly was connected to your computer. If you see someone else listed, right-click on the name and select Disconnect. 

The next step would be to change your passwords for additional protection.

Bruce Wooding

Windows Outreach Team- IT Pro

Windows for IT Pros on TechNet