unprompted Red Screen: WARNING: Detected user session change!

[micimh]

Student seemingly randomly got a Red Screen, in the logfile this was logged:

2024-10-26 09:45:16.350 [01] - INFO: [SystemMonitor] User session change detected: SessionUnlock.
2024-10-26 09:45:16.352 [31] - WARNING: Detected user session change!
2024-10-26 09:45:16.352 [31] - INFO: Lock screen is already active.

What does "User session change" and "SessionUnlock" mean?

• OS: Windows 11
• SEB-Version: 3.7.1

2024-10-26_09h46m51s_Client(1).log****

[dbuechel]

That means that your student attempted to resp. did either lock their device or then switch to another user account. The exact course of events can be traced in the client log file, as you've correctly quoted above.

[strau0106]

The logs do not show any sign of user switches(so cheating), but just suspend/lock... The only events that are logged are SessionLock and Unlock, no ConsoleConnect/ConsoleDisconnect.

Further confirmed by the ~5 second delay from SessionLock to SessionUnlock. Cheating in 5 seconds by switching users is pretty difficult imho.

Take a look at PR #1028 it intends to fix this exact issue