Windows启动的顺序是什么? [英] What's the order of Windows startup?

问题描述

我很想知道用户登录期间Windows启动的顺序.有人知道吗? 基本上，我的应用程序是由GPO调用的登录脚本调用的.在调用第三方EXE时，它无法启动.

I'm curious to know the order of Windows startup during a user login. Does anyone know? Basically, my application was being invoked by login script that a GPO calls. While 3rd party EXE was being invoked, it was failing to start.

然后，通过反复试验，我发现HKCU ... \ RunOnce键在登录脚本之后执行.结果相同，正在调用EXE，但无法启动.

Then, through trial and error, I found that HKCU...\RunOnce keys execute after the login script. Same result, the EXE was being called, but failing to start.

有效的方法:更新了登录脚本，在用户的Startup文件夹中创建了一个快捷方式.现在，EXE将按预期方式启动.

What worked: updated the login script create a shortcut in the user's Startup folder. Now the EXE starts up as expected.

我知道自动运行可以告诉我所有放置启动项的位置，有人知道整体的执行顺序吗?我能够发现Run和RunOnce键被异步调用.我可以继续测试自动运行"指出的每个启动项目，但这可能需要几天的时间.

I know that AutoRuns can tell me all the locations where startup items can be placed, does anyone know the execution order as a whole? I was able to find that Run and RunOnce keys get called asynchronously. I can keep testing each startup item that AutoRuns states, but this could take days.

我对Windows 2003 Server登录启动流程最感兴趣，但是我怀疑它与当今使用的其他Windows风格非常相似.

I'm mostly interested in Windows 2003 Server login startup flow, but I would suspect its very similar to other Windows flavors in use today.

推荐答案

来源:

Windows 7的正常启动顺序为:

The normal startup sequence for Windows 7 is:

1. 开机自检(POST)阶段
2. 初始启动阶段
3. Windows启动管理器阶段
4. Windows引导加载程序阶段
5. 内核加载阶段
6. 登录阶段

1. Power-on self test (POST) phase
2. Initial startup phase
3. Windows Boot Manager phase
4. Windows Boot Loader phase
5. Kernel loading phase
6. Logon phase

内核加载阶段 Windows引导加载程序负责将Windows内核(Ntoskrnl.exe)和HAL加载到内存中. 内核和HAL一起初始化一组软件 Windows执行程序的功能. Windows执行程序 处理存储在注册表中的配置信息 HKLM\SYSTEM\CurrentControlSet并启动服务和驱动程序.这 以下各节提供了有关内核加载阶段的更多详细信息.

Kernel Loading Phase The Windows Boot Loader is responsible for loading the Windows kernel (Ntoskrnl.exe) and the HAL into memory. Together, the kernel and the HAL initialize a group of software features that are called the Windows executive. The Windows executive processes the configuration information stored in the registry in HKLM\SYSTEM\CurrentControlSet and starts services and drivers. The following sections provide more detail about the kernel loading phase.

登录阶段

Windows子系统启动Winlogon.exe，这是一项系统服务， 使您可以登录和注销. Winlogon.exe然后执行 以下:

The Windows subsystem starts Winlogon.exe, a system service that enables you to log on and log off. Winlogon.exe then does the following:

• 启动服务子系统(Services.exe)，也称为SCM. SCM初始化注册表项启动的服务 在注册表子项中指定为自动加载" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Servicename.
• 启动本地安全机构(LSA)进程(Lsass.exe).
• 在开始登录"提示下分析 Ctrl + Alt + Delete 组合键(如果计算机是 AD DS域).

• Starts the Services subsystem (Services.exe), also known as the SCM. The SCM initializes services that the registry entry Start designates as Autoload in the registry subkey HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Servicename.
• Starts the Local Security Authority (LSA) process (Lsass.exe).
• Parses the Ctrl+Alt+Delete key combination at the Begin Logon prompt (if the computer is part of an AD DS domain).

登录用户界面(LogonUI)功能和凭据提供程序 (可以是标准凭据提供者或第三方 凭据提供程序)收集用户名和密码(或其他 凭据)，并将此信息安全地传递给LSA，以进行 验证.如果用户提供了有效的凭据，则访问权限为 通过使用默认的Kerberos V 5身份验证来授予 协议或Windows NT LAN Manager(NTLM).

The logon user interface (LogonUI) feature and the credential provider (which can be the standard credential provider or a third-party credential provider) collect the user name and password (or other credentials) and pass this information securely to the LSA for authentication. If the user supplied valid credentials, access is granted by using either the default Kerberos V 5 authentication protocol or Windows NT LAN Manager (NTLM).

Winlogon在PnP初始化安全性和身份验证功能 初始化自动加载服务和驱动程序.用户登录后， 注册表项LastKnownGood引用的控件集 (位于HKLM\SYSTEM\Select中)被更新为 CurrentControlSet子项.默认情况下，Winlogon然后启动 Userinit.exe和Windows资源管理器外壳.然后可以启动Userinit 其他过程，包括:

Winlogon initializes security and authentication features while PnP initializes auto-load services and drivers. After the user logs on, the control set referenced by the registry entry LastKnownGood (located in HKLM\SYSTEM\Select) is updated with the contents in the CurrentControlSet subkey. By default, Winlogon then starts Userinit.exe and the Windows Explorer shell. Userinit may then start other processes, including:

• 组策略设置生效适用于用户和计算机的组策略设置生效.

• 启动运行的程序如果未被组策略设置覆盖，Windows将启动登录脚本，启动程序和服务. 在以下注册表子项和文件系统文件夹中引用:

• Group Policy settings take effect Group Policy settings that apply to the user and computer take effect.

• Startup programs run When not overridden by Group Policy settings, Windows starts logon scripts, startup programs, and services referenced in the following registry subkeys and file system folders:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
SystemDrive\Documents and Settings\All Users\Start Menu\Programs\Startup
SystemDrive\Documents and Settings\username\Start Menu\Programs\Startup

在您执行以下操作后，可能会将多个应用程序配置为默认启动 安装Windows，包括Windows Defender.电脑制造商或 IT部门可能会配置其他启动应用程序.

Several applications might be configured to start by default after you install Windows, including Windows Defender. Computer manufacturers or IT departments might configure other startup applications.

在用户成功登录到Windows之前，Windows启动尚未完成. 电脑.如果在登录阶段启动失败，则您有一个 配置为启动的服务或应用程序的问题 自动.

Windows startup is not complete until a user successfully logs on to the computer. If startup fails during the logon phase, you have a problem with a service or application configured to start automatically.

如果您想了解更多信息，请查看源链接.

这篇关于Windows启动的顺序是什么?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！