🚀 go-pugleaf

I'll try to make a long story short.

We have a service running on a server.  It runs under the LOCALSYSTEM 
acount.  It periodically looks in a DB table for work to do.  The work 
entails starting a process along with some input parameters.  It uses 
CreateProcess() to start the new process.  This all works fine.  The new 
process can be seen running under the SYSTEM account in Task Manager.

Now, a user logs into the server and runs our client software (on the 
server).  They cause an entry to be made in the DB table.  Our service finds 
the entry starts the appropriate process.  The user then logs off and the 
process is killed.

We're using SetConsoleControlHandler() to set up handling in the new 
process.  It gets called with a CTRL_LOGOFF_EVENT and we make a log entry. 
That's how we know what's happening.

I had assumed that this would only happen if the user starting the process 
logged off.  Am I wrong?

- Arnie