A regular user logs out leaving some applications running. Then an administrator enters the system, and is able to terminate the former's processes.
But could he use said applications including their GUIs?
Given sufficient privileges (specifically SeTcbPrivilege which only
If the system supports multiple sessions ("Fast user switching" and the like), the administrator can log in to their own account, then run
(I have tested this on XP Pro, but I'm not sure if it works on Vista/7 which handle sessions slightly differently.)
To leave the user's session, just lock the screen again by using Win+L, or run
The simple answer is no, admins can see the processes being run, but not the applications themselves.
However, an admin could change your password and log in as you. Then they could see what you were doing. This of course would become apparent when you tried to log in and your password was changed.