Using "svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc" as trigger, this "trigger" happens when computer is locked.
ZwWaitForSingleObject just wait for svchost gets CPU time. The embedded reverses shell is C# classes and can be replaced with your own code.
This works in normal user context, no admin is required.