Surely the User will need to have to be in the process of authenticating (i.e. logging on) for any programs to activate .... in other words you can only run a program for a user during the logon process, NOT before.
Suggest that you use a Group Policy Object ... under User Config ... Administrative templates ..... System .... Logon/Logoff .... then the "Run these programs at user logon" parameter. This does require ADS.
Alternatively, set up a group policy for the MACHINE where the user actually logs on, rather than for the user. This will run a program when the machine starts, BEFORE the user logs on. Hope this all makes sense ??????