Auth Connector with IPSec maps internal IP address to Active Directory usernames. Whenever a new logon event is detected, it remaps the IP address to the new user. This is an expected behavior when using Auth Connector when two or more users log into the same computer.
Resolution
The previous user needs to fully logout/kill the previous session so that the usernames gets the correct IP address.