Here is the startup sequence of the major registry keys, starting immediately after
bootmgr has been read and ending with the program shortcut entries in the two Startup folders.
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\BootExecute. This can include instructions to schedule the running of chkdsk but not user programs.
Servicesstart next, followed by the
RunServicesregistry keys (if present)
User then logs on to the system
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit. This points to the program
C:\WINDOWS\system32\userinit.exeand the entry ends with a comma. Other programs can be started from this key by appending them and separating them with a comma.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell. This should contain just one entry,
Program entries in these 2 registry keys for ALL USERS start next:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and \RunOnce
Program entries in these 2 registry keys for CURRENT USER start next:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run and \RunOnce
Programs in the Startup Folders of All Users and Current User are started last of all.
Important programs like antivirus and firewall start early in the sequence as Services. The icons that appear in the Notification Area (bottom right of the screen) are just their user interfaces, i.e. options and preferences.
Note that the additional location for 32-bit software in a 64-bit computer is