One Comment on “What file is processed at the end of a Windows XP boot …”

1. linofsl says:

   November 22, 2018 at 4:49 pm

   The logon phase begins at the conclusion of the kernel initialization phase. The Win32
   subsystem automatically starts WINLOGON.EXE, which in turn starts the Local Security
   Authority (LSASS.EXE) and displays the Logon dialog box