During a Windows post-exploitation phase, a penetration tester has obtained a standard user shell on a workstation and wants to ensure their beacon relaunches automatically whenever the compromised user logs in, without requiring administrative privileges. Which persistence technique best meets this requirement?