I've run a
careful test for the following 10 run points.
The first two run points have been executed in safe mode.
The rest of run points have been executed after rebooting in normal mode.
The table maintains the order they have been executed.
:===========:=============:
:-CMD from--:--SAFE MODE--:
:===========:=============:
:-1-LM-ROEX-:-----YES-----:
:-----------:-------------:
:-2-CU-ROEX-:-----YES-----:
:-----------:-------------:
:-3-LM-RO---:-----NO------:
:-----------:-------------:
:-4-LM-POL--:-----NO------:
:-----------:-------------:
:-5-LM-RUN--:-----NO------:
:-----------:-------------:
:-6-CU-POL--:-----NO------:
:-----------:-------------:
:-7-CU-RUN--:-----NO------:
:-----------:-------------:
:-8-STRTP-A-:-----NO------:
:-----------:-------------:
:-9-STRTP-U-:-----NO------:
:-----------:-------------:
:10-CU-RO---:-----NO------:
:-----------:-------------:
Abbreviations:
LM-ROEX=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
CU-ROEX=HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEX
LM-RO=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
LM-POL=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
LM-RUN=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CU-POL=HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
CU-RUN=HKCU\Software\Microsoft\Windows\CurrentVersion\Run
STRTP-A="%AllUsersProfile%\Start Menu\Programs\Startup"
STRTP-U="%UserProfile%\Start Menu\Programs\Startup"
CU-RO=HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce