Windows中的标准方法是编写一个程序包(一个 dll )，该程序包订阅

The standard way in Windows is to write a package (a dll) that subscribes to Winlogon notification events.

我不知道有什么工具可以提供一种简便的方法来挂接这些事件，但是如果您确实需要将动作包含在某个特定位置中，则可以使您的程序包从某个特定位置启动脚本.

I don't know of any tool that provides an easy way to hook into those events, but you could make your package launch a script from some specific place if you really need your actions to be inside one.