Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To quickly list programs configured to run when a user logs on to Windows, open PowerShell and run:

Get-CimInstance -ClassName Win32_StartupCommand |
    Select-Object Name, Command, Location, User

This built-in query shows each entry’s name, launch command, startup location, and associated user. For a broader inventory of auto-start locations, use Microsoft Sysinternals Autorunsc.

List startup programs with PowerShell

Win32_StartupCommand is a Windows management class for commands that run automatically when a user logs on. The Get-CimInstance command is the concise, modern PowerShell way to query it:

Get-CimInstance -ClassName Win32_StartupCommand |
    Select-Object Name, Command, Location, User

The selected fields make the output easier to interpret:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
  • Name identifies the startup entry.
  • Command shows the executable or command configured to run.
  • Location indicates where the startup information is stored.
  • User identifies the user associated with the entry.

Microsoft documents the class and these properties in its Win32_StartupCommand reference. If a user identity is unresolved or ambiguous, include UserSID to help distinguish accounts:

Get-CimInstance -ClassName Win32_StartupCommand |
    Select-Object Name, Command, Location, User, UserSID

Use the older WMI command-line style

Microsoft’s WMI task guide shows the legacy Get-WmiObject cmdlet. It is an alternative example, not a requirement for listing startup commands:

Rank #2
Dell Latitude 3190 11.6" HD 2-in-1 Touchscreen Laptop Intel N5030 1.1Ghz 4GB Ram 128GB SSD Windows 11 Professional (Renewed)
  • 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
  • 4GB DDR4 System Memory; 128GB Solid State Drive
  • 11.6" HD (1366 x 768) Multi-Touch Display
  • Combo headphone/microphone jack - Noble Wedge Lock slot - HDMI; 2 USB 3.1 Gen 1
  • Windows 11 Pro
Get-WmiObject -Class Win32_StartupCommand |
    Select-Object Name, Command, Location, User

The guide also demonstrates enumerating the class and printing its properties. For new PowerShell commands, use Get-CimInstance. See Microsoft’s WMI tasks: Computer software for the legacy example and related context.

Get a broader startup inventory with Autorunsc

The CIM query is useful for a quick list, but it is not a guarantee that every possible Windows auto-start mechanism will appear. Microsoft Sysinternals Autoruns covers additional locations, including Explorer add-ons, services, scheduled tasks, and WMI entries. Its command-line counterpart, Autorunsc, can output CSV and select all documented categories:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
  • 256 GB SSD of storage.
  • Multitasking is easy with 16GB of RAM
  • Equipped with a blazing fast Core i5 2.00 GHz processor.
autorunsc.exe -a * -c

Download Autoruns from Microsoft’s Autoruns page. The page lists version 14.3, published June 17, 2026. Autoruns also supports viewing other user accounts.

Method Coverage Availability and output
PowerShell: Win32_StartupCommand Recognized startup commands, including documented Run/RunOnce registry and Startup-folder locations; not every possible auto-start mechanism. Built into Windows management tooling; returns PowerShell objects that can be selected for display.
Sysinternals Autorunsc Broader set of startup-related locations, including services, scheduled tasks, Explorer add-ons, and WMI entries. Separate Microsoft Sysinternals download; -c requests CSV output and -a * selects all documented categories.

To save Autorunsc output to a file, use shell redirection with the CSV option, for example:

Rank #4
15.6 Inch Laptop Computer, N4020, 4GB DDR4 RAM, 128GB eMMC,with Windows 11
  • EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
  • 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
  • RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
  • ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
  • LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
autorunsc.exe -a * -c > startup.csv

The documented switch produces CSV output; the command above redirects that output to a file. Microsoft’s WMI guide similarly demonstrates redirecting command-line script output to a file.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Understand what the list does—and does not—show

Microsoft describes Win32_StartupCommand as a way to enumerate autostart programs regardless of where the information is stored. Its documented locations include Run and RunOnce keys under HKLM and HKCU, user-related Run entries, and common and per-user Startup folders. That purpose should not be mistaken for an exhaustive listing of every boot, service, scheduled-task, extension, or logon trigger. Use Autorunsc when you need wider location coverage.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
15.6 Inch Win 11 Laptop Computer, N4020, 4GB DDR4 RAM, 128GB Storage
  • WINDOWS 11 | STABLE PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 system, this laptop delivers stable performance for everyday computing tasks. It supports web browsing, online learning, document editing, email communication, and basic office work with optimized power efficiency, providing a practical and reliable experience for essential daily use for daily use.
  • 15.6” FHD IPS DISPLAY: Features a 15.6-inch Full HD IPS display with narrow bezels, offering wider viewing angles and clearer image details compared to standard panels. The improved screen-to-body ratio enhances visual experience for study, reading, document work, and video playback, making it suitable for both productivity and entertainment use.
  • 4GB DDR4 + 128GB eMMC STORAGE: Equipped with 4GB DDR4 memory and 128GB eMMC storage for everyday basics such as browsing, documents, email, and online learning platforms. The built-in TF card slot supports storage expansion up to 1TB, giving you more flexibility for files, photos, videos, and daily documents. TF card not included.
  • CONNECTIVITY & PORTS: Includes 1× TF card slot, 2× USB 3.2 Gen1 ports, and 2× full-featured Type-C ports (USB 3.2 Gen1). The Type-C ports support data transfer, charging, and video output, enabling flexible connection with external devices such as monitors, storage, and peripherals for daily work and study use.
  • LIGHTWEIGHT DESIGN | ONLINE COMMUNICATION: Designed with a slim, portable profile, this laptop is easy to carry for school, commuting, and travel. A built-in 1MP front camera supports online classes, video meetings, remote communication, and everyday conferencing. The 3300mAh battery works with the low-power system design to support practical daily use, while thermal optimization helps maintain quieter operation during extended tasks.

The class reference states that the calling process needs the SE_RESTORE_NAME privilege on the computer whose registry is queried. This is a specific documented privilege requirement; it does not establish that every local query always requires opening PowerShell as Administrator. If a query returns access denied—particularly when querying another computer or account—check whether the calling process has the required privilege and permissions.

Quick Recap

Bestseller No. 1
HP 14' HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
HP 14" HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
$249.99
Bestseller No. 2
Dell Latitude 3190 11.6' HD 2-in-1 Touchscreen Laptop Intel N5030 1.1Ghz 4GB Ram 128GB SSD Windows 11 Professional (Renewed)
Dell Latitude 3190 11.6" HD 2-in-1 Touchscreen Laptop Intel N5030 1.1Ghz 4GB Ram 128GB SSD Windows 11 Professional (Renewed)
1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core; 4GB DDR4 System Memory; 128GB Solid State Drive
Bestseller No. 3
Dell Latitude 5420 14' FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
256 GB SSD of storage.; Multitasking is easy with 16GB of RAM; Equipped with a blazing fast Core i5 2.00 GHz processor.
$299.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.