other user logged on msg when not the case

[Guest]

My brother got the msg other users logged on - are u sure u want to shut
down, when he had only logged on via his limited user account. Is it
possible for a remote user to have hijacked his pc on a limited user account?
Is there any way of checking if this is the case or is it likely he was
mistaken?

 

[Guest]

You may also see this message if you have mapped network shares that are
active.

 

[Guest]

Thanks markm, but not that I'm aware of. How can I check? Thanks for your help