terminal services may 'alter' the session information... as this method returns the user logged onto the local machine.

terminal services may be able to wmi'd in a different method... dunno, I don't have one to test against.
_________________________
How to ask questions the smart way <-----------> Before you ask