Check HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon