Windows NT Startup Process

I while back I wrote about the fact that I didn’t really know how Windows startup works. As with many things wikipedia clears it all up. It looks like this is what I should have examined in the registry:

1) HKLM\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder\List
2) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
3) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
4) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
5) HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run
6) HKCU\Software\Microsoft\Windows\CurrentVersion\Run
7) HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
8) All Users ProfilePath\Start Menu\Programs\Startup\

Now I know.