Startup locations on Windows

After connecting to a Windows session, the Winlogon.exe process starts the programs listed in the following locations:

• Windows registry:
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  • HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load
  • HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
  • HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
• File System
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\
  • %USERPROFILE%\Start Menu\Programs\Startup\