Application trying to open each time administrator logs in

I have a new client that is running a 2008 R2 server.  Everytime the administrator account logs in, the profile wants to open some form of an application or file.
I have checked the startup folder-nothing there.  I have checked these areas in the registry and that are no unknown applications set to run.

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

Where am I missing?
rbarwigAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Sam Simon NasserIT Support ProfessionalCommented:
did you checked MSCONFIG?
also, open the application (that starts with admin account), and in its options, check where it mentioned open at startup or something like this, and disable it / remove the tick.
0
HackooCommented:
You have to check those keys :
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run"
"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows"
"HKCU\Software\Microsoft\Internet Explorer\Main"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options"

Open in new window

And also your Startup Folders :
"%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup"
"%UserProfile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup"

Open in new window

You can scan your startup items with this batch file : Scan_Registry_Run_Keys.bat
0
JohnBusiness Consultant (Owner)Commented:
Get Autoruns (Microsoft Sys Internals), run it, look for the start up causing the issue and uncheck (disable) the entry or delete it.
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JohnBusiness Consultant (Owner)Commented:
Thank you and I hope all is well now.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.