Our Win32 (service) process was starting too late, sometimes even after explorer.exe. We had to find a way to start the process sooner. Winlogon notifies are no longer supported and AppInit_DLLs is not a good solution. Here is the result ("http://apihooks.com/EliCZ/infos/w32asap.zip").


https://www.openrce.org/blog/view/1063/Running_Win32_program_ASAP_after_Nt_boot