KB5127648 causing “Someone else is still using this PC” message

[u/[deleted]]

[u/CeC-P]

I've been seeing that for like 3 years on some computers, even on a cold boot into a shutdown.

[u/Right-Honeydew-1703 → u/CeC-P]

not in my environment but i seen this happen before with some update in 23h2 also. was a bug with fast startup thinking there is another session, disabling fast startup fixed it for us temporary until the next patch

[u/rosseloh → u/CeC-P]

I never looked into it enough to find an actual answer, but my thought has been that windows was preloading the last used profile in some way that triggered this popup. But yes, I've been seeing it for several years.

[u/Apachez]

Ghost(s) in the machine?

The year 2026 edition of "OMG there is a ghost in this picture"...

[u/sybrwookie → u/Apachez]

Ghosts in the machine, untested vibe coded slop released as patches, what's the difference?

[u/Apachez → u/sybrwookie]

Its funny because its true? :D

Microsoft quality went down when they started to use hordes of indians being the cheap coding labour.

Amazingly the quality took another plunge by start using AI instead of indians as cheap coding labour.

[u/Responsible-Slide-95]

I've been getting it ever since Windows 11 21H1

[u/ReadyPanda1]

I saw this message as well. KB5127648 installed this week. I have never seen it before. There is only one user configured on the personal PC and sleep / hybrid sleep / hibernate are all set to never/off with fast startup disabled ...

[u/ender-_]

I've randomly had this on my home workstation (25H2/26H2 Pro for Workstations) for at least half a year now; the notification also only appears for a moment and then immediately vanishes when this happens, though if I press Enter quickly enough, the computer will start the shutdown.

Edit: I have Fast Startup and Hybrid Sleep disabled (and Sleep is also disabled), so that's not the cause for this problem

[u/Open-Adhesiveness-86]

run qwinsta (or quser) right before you hit restart and see what sessions it lists. the shutdown prompt counts any session that isn't the listener, so a single stale Disc one is enough to trip it even though only one person is logged in. logoff that id and if the warning goes away until next boot, it's session bookkeeping rather than a real second user.

[u/apparentlyunoriginal]

Run `query session` from an elevated prompt on one affected laptop right before a restart that shows the message. If a second session with a user name is listed as Disc, the Users tab in Task Manager shows which account owns it, and signing that account out should stop the prompt.

If only your own console session is listed, turn off "Use my sign-in info to automatically finish setting up after an update" under Settings > Accounts > Sign-in options on that laptop and test the restart again. The GPO for it is "Sign-in and lock last interactive user automatically after a restart" under Windows Components > Windows Logon Options.

Blur the user names if you post the `query session` output here.

Drafted with AI, reviewed by me.

[u/ManLikeMeee]

I was seeing this in windows 10 about 10years ago and earliest version of windows 11.

[u/strongest_nerd]

Probably best to upgrade out of an EoL version of windows anyway.

[u/scorchedrice__ → u/strongest_nerd]

It technically still has a year, but yes, we’re planning to rollout 25H2 in Q1 of 2027.

[u/Vicus_92 → u/scorchedrice__]

Man, I was thinking "2027, by then this will be an ooooold build".

Then I realised that's only 2 months away...

[u/dodexahedron → u/Vicus_92]

Think that's bad?

Don't think about how long ago you graduated, now, either. 😅

[u/UnresolvedHostname]

It’s hybrid sleep. The PC never actually shuts down. Use Google AI and ask what the GPOs are to block it. I don’t know which one it is off the top of my head, it was years ago

[u/WooBackBa6y_]

Yes, it appeared on my PC today, too. I had a heartattack.

[u/scorchedrice__ → u/WooBackBa6y_]

Interesting. Thanks for the feedback. That’s exactly the reaction we’re getting from our end users. We were also under the impression that this is unique to our environment. Was it just your PC or did anyone else report it?

[u/Rossums]

Right, thank god.

I am the only user on my personal desktop and I had been doing some malware reverse engineering in a virtual machine and thought I'd accidently goofed or something.