OK,
When a user logs in they set a variable (use vba onopen, they don't even know they are doing it) , check for this and if its not set it was the task manager that opened it.