<Benchmark xmlns="http://checklists.nist.gov/xccdf/1.1" xmlns:cpe="http://cpe.mitre.org/XMLSchema/cpe/1.0" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cdf="http://checklists.nist.gov/xccdf/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dc="http://purl.org/dc/elements/1.1/" id="WindowsCOBITBenchmark" resolved="false" xml:lang="en">
  <status date="2017-11-16">accepted</status>
  <title xml:lang="en">Windows COBIT Benchmark</title>
  <reference>
    <dc:source>compliance.mcafee.com</dc:source>
  </reference>
  <platform idref="cpe:/o:microsoft:windows" />
  <platform idref="cpe:/o:microsoft:windows_2000" />
  <platform idref="cpe:/o:microsoft:windows_xp" />
  <platform idref="cpe:/o:microsoft:windows_xp:::x86" />
  <platform idref="cpe:/o:microsoft:windows_xp:-:sp2:x64" />
  <platform idref="cpe:/o:microsoft:windows_2003_server" />
  <platform idref="cpe:/o:microsoft:windows_2003_server:::x86" />
  <platform idref="cpe:/o:microsoft:windows_server_2003:::x64" />
  <platform idref="cpe:/o:microsoft:windows_vista" />
  <platform idref="cpe:/o:microsoft:windows_vista:::x86" />
  <platform idref="cpe:/o:microsoft:windows_vista:::x64" />
  <platform idref="cpe:/o:microsoft:windows_server_2008" />
  <platform idref="cpe:/o:microsoft:windows_server_2008:::x86" />
  <platform idref="cpe:/o:microsoft:windows_server_2008:::x64" />
  <platform idref="cpe:/o:microsoft:windows_7" />
  <platform idref="cpe:/o:microsoft:windows_7:::x86" />
  <platform idref="cpe:/o:microsoft:windows_7:::x64" />
  <platform idref="cpe:/o:microsoft:windows_server_2008:r2" />
  <platform idref="cpe:/o:microsoft:windows_8" />
  <platform idref="cpe:/o:microsoft:windows_8:-:-:x64" />
  <platform idref="cpe:/o:microsoft:windows_8:-:-:x86" />
  <platform idref="cpe:/o:microsoft:windows_8.1::x64" />
  <platform idref="cpe:/o:microsoft:windows_8.1::x86" />
  <platform idref="cpe:/o:microsoft:windows_server_2012:-" />
  <platform idref="cpe:/o:microsoft:windows_server_2012:r2" />
  <platform idref="cpe:/o:microsoft:windows_10::x86" />
  <platform idref="cpe:/o:microsoft:windows_10::x64" />
  <platform idref="cpe:/o:microsoft:windows_server_2016:-" />
  <version>1.0</version>
  <model system="urn:xcscoring:flat" />
  <Profile id="Windows2000" abstract="false">
    <title xml:lang="en">Windows 2000</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_2000" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="AuditPolicy_AuditAccountLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditAccountManagement" selected="true" />
    <select idref="AuditPolicy_AuditLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditObjectAccess" selected="true" />
    <select idref="AuditPolicy_AuditPolicyChange" selected="true" />
    <select idref="AuditPolicy_AuditPrivilegeUse" selected="true" />
    <select idref="AuditPolicy_AuditSystemEvents" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="EventLog_MaximumApplicationLogSize" selected="true" />
    <select idref="EventLog_MaximumSecurityLogSize" selected="true" />
    <select idref="EventLog_MaximumSystemLogSize" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheApplicationLog" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheSecurityLog" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheSystemLog" selected="true" />
    <select idref="EventLog_RetentionMethodForTheApplicationLog" selected="true" />
    <select idref="EventLog_RetentionMethodForTheSecurityLog" selected="true" />
    <select idref="EventLog_RetentionMethodForTheSystemLog" selected="true" />
    <select idref="AdditionalRestrictionsForAnonymousConnections" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders" selected="true" />
    <select idref="Devices_RestrictCD-ROMAccessToLocallyLogged-onUserOnly" selected="true" />
    <select idref="Devices_RestrictFloppyAccessToLocallyLogged-onUserOnly" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="Devices_UnsignedDriverInstallationBehavior" selected="true" />
    <select idref="Devices_UnsignedNon-driverInstallationBehavior" selected="true" />
    <select idref="RegistrySetting_AEDebugAuto" selected="true" />
    <select idref="RegistrySetting_CreateCrashDump" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_NoDriveTypeAutorun" selected="true" />
    <select idref="MSS_AutoReboot" selected="true" />
    <select idref="RegistrySetting_CD_DVDDeviceAutorun" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_EnableDeadGatewayDetection" selected="true" />
    <select idref="MSS_EnableICMPRedirects" selected="true" />
    <select idref="RegistrySetting_EnablePMTUDiscovery" selected="true" />
    <select idref="MSS_KeepAliveTime" selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
    <select idref="MSS_PerformRouterDiscovery" selected="true" />
    <select idref="MSS_SYNAttackProtectionLevel" selected="true" />
    <select idref="RegistrySetting_TCPMaxHalfOpen" selected="true" />
    <select idref="RegistrySetting_TCPMaxHalfOpenRetried" selected="true" />
    <select idref="MSS_HideComputerFromTheBrowseList" selected="true" />
    <select idref="MSS_NoDefaultExempt" selected="true" />
    <select idref="Service_AlerterService_Alerter_StartupType" selected="true" />
    <select idref="Service_ClipBookService_ClipSrv_StartupType" selected="true" />
    <select idref="Service_ComputerBrowserService_Browser_StartupType" selected="true" />
    <select idref="Service_FTPPublishingService_MSFTPSVC_StartupType" selected="true" />
    <select idref="Service_IISAdminService_IISADMIN_StartupType" selected="true" />
    <select idref="Service_InternetConnectionSharing_ICS_Service_SharedAccess_StartupType" selected="true" />
    <select idref="Service_MessengerService_Messenger_StartupType" selected="true" />
    <select idref="Service_NetMeetingRemoteDesktopSharingService_Mnmsrvc_StartupType" selected="true" />
    <select idref="Service_RemoteRegistryService_RemoteRegistry_StartupType" selected="true" />
    <select idref="Service_RoutingAndRemoteAccessService_RemoteAccess_StartupType" selected="true" />
    <select idref="Service_SimpleMailTransferProtocol_SMTP_Service_SMTPSVC_StartupType" selected="true" />
    <select idref="Service_SNMPService_SNMP_StartupType" selected="true" />
    <select idref="Service_FaxService_Fax_StartupType" selected="true" />
    <select idref="Service_SNMPTrapService_SNMPTRAP_StartupType" selected="true" />
    <select idref="Service_TelnetService_TlntSvr_StartupType" selected="true" />
    <select idref="Service_WorldWideWebPublishingService_W3SVC_StartupType" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob" selected="true" />
    <select idref="UserRight_DenyLogOnAsAService" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_LogOnAsAService" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="RegistrySetting_ProtectAgainstComputerBrowserSpoofing-RefuseReset" selected="true" />
    <select idref="MSS_EnableAdministrativeShares-Workstations" selected="true" />
    <select idref="WindowsFolderPermissions__Systemdrive_-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFilePermissions__Systemdrive__autoexec.bat-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemdrive__boot.ini-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemdrive__config.sys-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemdrive__io.sys-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemdrive__msdos.sys-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemdrive__ntbootdd.sys-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemdrive__ntdetect.com-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemdrive__ntldr-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Programfiles_-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Programfiles__ResourceKit-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Programfiles__ResourceProKit-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemdrive__DocumentsAndSettings-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemdrive__DocumentsAndSettings_Administrator-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemdrive__DocumentsAndSettings_AllUsers-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemdrive__DocumentsAndSettings_DefaultUser-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot_-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot___NtServicePackUninstall_-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__CSC-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__Debug-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__Registration-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__Security-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__regedit.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_at.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_ntbackup.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rcp.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_regedt32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rexec.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rsh.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_secedit.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_Appmgmt-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_Config-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_Dllcache-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_DTCLog-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_GroupPolicy-Administrators_SYSTEM_AuthenticatedUsers" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_Ias-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_NTMSData-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_ReinstallBackups-Administrators_SYSTEM_PowerUsers" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_Setup-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__System32_Spool_Printers-Administrators_SYSTEM_Users" selected="true" />
    <select idref="WindowsFolderPermissions__Systemroot__Repair-Administrators_SYSTEM" selected="true" />
    <select idref="NetworkSecurity_ForceLogoffWhenLogonHoursExpire" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="AuditPolicyChange_var0" selector="AuditPolicyChange_var0-selector" operator="equals" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector" operator="equals" />
    <refine-value idref="SelectARestrictionLevelBelow_var" selector="SelectARestrictionLevelBelow_var-selector" operator="equals" />
    <refine-value idref="AmountOfIdleTime_inMinutes_RequiredBeforeSusendingSession_var" selector="AmountOfIdleTime_inMinutes_RequiredBeforeSusendingSession_var-selector" operator="equals" />
    <refine-value idref="FaxService_Fax_StartupType_var" selector="FaxService_Fax_StartupType_var-selector" operator="equals" />
  </Profile>
  <Profile id="WindowsXP" abstract="false">
    <title xml:lang="en">Windows XP</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_xp" />
    <platform idref="cpe:/o:microsoft:windows_xp:-:sp2:x64" />
    <platform idref="cpe:/o:microsoft:windows_xp:::x86" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="AuditPolicy_AuditAccountLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditAccountManagement" selected="true" />
    <select idref="AuditPolicy_AuditLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditObjectAccess" selected="true" />
    <select idref="AuditPolicy_AuditPrivilegeUse" selected="true" />
    <select idref="AuditPolicy_AuditPolicyChange" selected="true" />
    <select idref="AuditPolicy_AuditSystemEvents" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="EventLog_MaximumSecurityLogSize" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheApplicationLog" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheSecurityLog" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheSystemLog" selected="true" />
    <select idref="EventLog_RetentionMethodForTheApplicationLog" selected="true" />
    <select idref="EventLog_RetentionMethodForTheSecurityLog" selected="true" />
    <select idref="EventLog_RetentionMethodForTheSystemLog" selected="true" />
    <select idref="EventLog_MaximumApplicationLogSize" selected="true" />
    <select idref="EventLog_MaximumSystemLogSize" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_UnsignedDriverInstallationBehavior" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="NetworkAccess_DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_NamedPipesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_ForceLogoffWhenLogonHoursExpire" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="SystemObjects_DefaultOwnerForObjectsCreatedByMembersOfTheAdministratorsGroup" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="MSS_NoDriveTypeAutorun" selected="true" />
    <select idref="RegistrySetting_CD_DVDDeviceAutorun" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_NoDefaultExempt" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="RegistrySetting_DisableWebDAVBasicAuthentication" selected="true" />
    <select idref="Service_AlerterService_Alerter_StartupType" selected="true" />
    <select idref="Service_ClipBookService_ClipSrv_StartupType" selected="true" />
    <select idref="Service_FTPPublishingService_MSFTPSVC_StartupType" selected="true" />
    <select idref="Service_IISAdminService_IISADMIN_StartupType" selected="true" />
    <select idref="Service_MessengerService_Messenger_StartupType" selected="true" />
    <select idref="Service_NetMeetingRemoteDesktopSharingService_Mnmsrvc_StartupType" selected="true" />
    <select idref="Service_RoutingAndRemoteAccessService_RemoteAccess_StartupType" selected="true" />
    <select idref="Service_SimpleMailTransferProtocol_SMTP_Service_SMTPSVC_StartupType" selected="true" />
    <select idref="Service_SNMPService_SNMP_StartupType" selected="true" />
    <select idref="Service_SNMPTrapService_SNMPTRAP_StartupType" selected="true" />
    <select idref="Service_TelnetService_TlntSvr_StartupType" selected="true" />
    <select idref="Service_UniversalPlugAndPlayDeviceHostService_Upnphost_StartupType" selected="true" />
    <select idref="Service_WorldWideWebPublishingService_W3SVC_StartupType" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="WindowsFirewall_ProhibitUnicastResponseToMulticastOrBroadcastRequests-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowInboundFileAndPrinterSharingException-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowInboundRemoteAdministrationException-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowInboundRemoteDesktopExceptions-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowInboundUPnPFrameworkExceptions-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowLocalPortExceptions-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowLocalProgramExceptions-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_DefineInboundPortExceptions-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_DoNotAllowExceptions-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_Logging-LogDroppedPackets-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_Logging-LogfilePathAndName-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_Logging-LogfileSizeLimit-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitUnicastResponseToMulticastOrBroadcastRequests-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowRedirect-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowInboundFileAndPrinterSharingException-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowInboundRemoteAdministrationException-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowInboundRemoteDesktopExceptions-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowInboundUPnPFrameworkExceptions-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowLocalPortExceptions-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowLocalProgramExceptions-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_DefineInboundPortExceptions-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_DoNotAllowExceptions-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_Logging-LogDroppedPackets-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_Logging-LogfilePathAndName-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_Logging-LogfileSizeLimit-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-StandardProfile" selected="true" />
    <select idref="Service_DataExecutionPrevention" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__regedit.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_at.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_attrib.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_cacls.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_debug.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_drwatson.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_drwtsn32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_edlin.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_eventcreate.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_eventtriggers.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_ftp.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_net.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_net1.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_netsh.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rcp.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_reg.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_regedt32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_regsvr32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rexec.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rsh.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_runas.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_sc.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_subst.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_telnet.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_tftp.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_tlntsvr.exe-Administrators_SYSTEM" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="AuditPolicyChange_var0" selector="AuditPolicyChange_var0-selector-1" operator="equals" />
    <refine-value idref="AuditSystemEvents_var0" selector="AuditSystemEvents_var0-selector-0" operator="equals" />
    <refine-value idref="ApplicationLogSize_inBytes__var" selector="ApplicationLogSize_inBytes__var-selector-1" operator="equals" />
    <refine-value idref="SystemLogSize_inBytes__var" selector="SystemLogSize_inBytes__var-selector-1" operator="equals" />
    <refine-value idref="AllowedToFormatAndEjectRemovableMedia_var" selector="AllowedToFormatAndEjectRemovableMedia_var-selector-0" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-1" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-0" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_english" selector="DenyAccessToThisComputerFromTheNetwork_english-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_italian" selector="DenyAccessToThisComputerFromTheNetwork_italian-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_spanish" selector="DenyAccessToThisComputerFromTheNetwork_spanish-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_chinese" selector="DenyAccessToThisComputerFromTheNetwork_chinese-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_japanese" selector="DenyAccessToThisComputerFromTheNetwork_japanese-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_french" selector="DenyAccessToThisComputerFromTheNetwork_french-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_german" selector="DenyAccessToThisComputerFromTheNetwork_german-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_polish" selector="DenyAccessToThisComputerFromTheNetwork_polish-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_portuguese" selector="DenyAccessToThisComputerFromTheNetwork_portuguese-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_swedish" selector="DenyAccessToThisComputerFromTheNetwork_swedish-selector-0" operator="equals" />
    <refine-value idref="DenyAccessToThisComputerFromTheNetwork_turkish" selector="DenyAccessToThisComputerFromTheNetwork_turkish-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-0" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-0" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-0" operator="equals" />
  </Profile>
  <Profile id="WindowsServer2003-MemeberServer" abstract="false">
    <title xml:lang="en">Windows Server 2003 - Member Server</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2003:::x64" />
    <platform idref="cpe:/o:microsoft:windows_2003_server:::x86" />
    <platform idref="cpe:/o:microsoft:windows_2003_server" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="AuditPolicy_AuditAccountLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditAccountManagement" selected="true" />
    <select idref="AuditPolicy_AuditLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditObjectAccess" selected="true" />
    <select idref="AuditPolicy_AuditPolicyChange" selected="true" />
    <select idref="AuditPolicy_AuditSystemEvents" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="EventLog_MaximumSecurityLogSize" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheApplicationLog" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheSecurityLog" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheSystemLog" selected="true" />
    <select idref="EventLog_MaximumApplicationLogSize" selected="true" />
    <select idref="EventLog_MaximumSystemLogSize" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="Devices_UnsignedDriverInstallationBehavior" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="NetworkAccess_DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
    <select idref="NetworkAccess_NamedPipesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="SystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" selected="true" />
    <select idref="SystemObjects_DefaultOwnerForObjectsCreatedByMembersOfTheAdministratorsGroup" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemSettings_OptionalSubsystems" selected="true" />
    <select idref="MSS_AFD-DynamicBacklogGrowthDelta" selected="true" />
    <select idref="MSS_AFD-EnableDynamicBacklog" selected="true" />
    <select idref="MSS_AFD-MaximumDynamicBacklog" selected="true" />
    <select idref="MSS_AFD-MinimumDynamicBacklog" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_EnableDeadGatewayDetection" selected="true" />
    <select idref="MSS_EnableICMPRedirects" selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
    <select idref="MSS_PerformRouterDiscovery" selected="true" />
    <select idref="MSS_SYNAttackProtectionLevel" selected="true" />
    <select idref="MSS_TCPMaxConnectResponseRetransmissions" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissions" selected="true" />
    <select idref="RegistrySetting_TCPMaxPortsExhausted" selected="true" />
    <select idref="MSS_KeepAliveTime" selected="true" />
    <select idref="MSS_NoDriveTypeAutorun" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="Service_AlerterService_Alerter_StartupType" selected="true" />
    <select idref="Service_ClientServiceForNetWareService_NWCWorkstation_StartupType" selected="true" />
    <select idref="Service_ClipBookService_ClipSrv_StartupType" selected="true" />
    <select idref="Service_FileReplicationService_NtFrs_StartupType" selected="true" />
    <select idref="Service_FileServerForMacintoshService_MacFile_StartupType" selected="true" />
    <select idref="Service_FTPPublishingService_MSFTPSVC_StartupType" selected="true" />
    <select idref="Service_HelpAndSupportService_Helpsvc_StartupType" selected="true" />
    <select idref="Service_HTTPSSLService_HTTPFilter_StartupType" selected="true" />
    <select idref="Service_IISAdminService_IISADMIN_StartupType" selected="true" />
    <select idref="Service_IndexingService_CISVC_StartupType" selected="true" />
    <select idref="Service_LicenseLoggingService_LicenseService_StartupType" selected="true" />
    <select idref="Service_FaxService_Fax_StartupType" selected="true" />
    <select idref="Service_MessengerService_Messenger_StartupType" selected="true" />
    <select idref="Service_MicrosoftPOP3Service_Pop3Svc_StartupType" selected="true" />
    <select idref="Service_NetMeetingRemoteDesktopSharingService_Mnmsrvc_StartupType" selected="true" />
    <select idref="Service_NetworkConnectionsService_Netman_StartupType" selected="true" />
    <select idref="Service_NetworkNewsTransferProtocol_NNTP_Service_NntpSvc_StartupType" selected="true" />
    <select idref="Service_PrintServerForMacintoshService_MacPrint_StartupType" selected="true" />
    <select idref="Service_RemoteAccessAutoConnectionManagerService_RasAuto_StartupType" selected="true" />
    <select idref="Service_RemoteAccessConnectionManagerService_RasMan_StartupType" selected="true" />
    <select idref="Service_RemoteAdministrationService_Srvcsurg_StartupType" selected="true" />
    <select idref="Service_RemoteDesktopHelpSessionManagerService_RDSessMgr_StartupType" selected="true" />
    <select idref="Service_RemoteProcedureCall_RPC_LocatorService_RpcLocator_StartupType" selected="true" />
    <select idref="Service_RemoteServerManagerService_Appmgr_StartupType" selected="true" />
    <select idref="Service_SimpleMailTransferProtocol_SMTP_Service_SMTPSVC_StartupType" selected="true" />
    <select idref="Service_SNMPService_SNMP_StartupType" selected="true" />
    <select idref="Service_SNMPTrapService_SNMPTRAP_StartupType" selected="true" />
    <select idref="Service_TelephonyService_TapiSrv_StartupType" selected="true" />
    <select idref="Service_TelnetService_TlntSvr_StartupType" selected="true" />
    <select idref="Service_TrivialFTPDaemonService_TFTPD_StartupType" selected="true" />
    <select idref="Service_VolumeShadowCopyService_VSS_StartupType" selected="true" />
    <select idref="Service_WirelessZeroConfigurationService_WZCSVC_StartupType" selected="true" />
    <select idref="Service_WorldWideWebPublishingService_W3SVC_StartupType" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="Service_DataExecutionPrevention" selected="true" />
    <select idref="Service_RemoteInstallation_WindowsDeploymentService_BINLSVC_WDSServer_StartupType" selected="true" />
    <select idref="Service_RemoteStorageNotificationService_Remote_Storage_User_Link_StartupType" selected="true" />
    <select idref="Service_RemoteStorageServerService_Remote_Storage_Server_StartupType" selected="true" />
    <select idref="Service_WindowsMediaServicesService_WMServer_StartupType" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__regedit.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_at.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_attrib.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_cacls.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_debug.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_drwatson.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_drwtsn32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_edlin.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_eventcreate.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_eventtriggers.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_ftp.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_net.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_net1.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_netsh.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rcp.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_reg.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_regedt32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_regsvr32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rexec.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rsh.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_runas.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_sc.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_subst.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_telnet.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_tftp.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_tlntsvr.exe-Administrators_SYSTEM" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="MaxPwdAgeInSeconds_864001Day__var" selector="MaxPwdAgeInSeconds_864001Day__var-selector-0" operator="equals" />
    <refine-value idref="AuditObjectAccess_var1" selector="AuditObjectAccess_var1-selector-1" operator="equals" />
    <refine-value idref="AuditPolicyChange_var0" selector="AuditPolicyChange_var0-selector-5" operator="equals" />
    <refine-value idref="AuditSystemEvents_var0" selector="AuditSystemEvents_var0-selector-4" operator="equals" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-3" operator="equals" />
    <refine-value idref="ApplicationLogSize_inBytes__var" selector="ApplicationLogSize_inBytes__var-selector-4" operator="equals" />
    <refine-value idref="SystemLogSize_inBytes__var" selector="SystemLogSize_inBytes__var-selector-4" operator="equals" />
    <refine-value idref="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var" selector="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var-selector-0" operator="equals" />
    <refine-value idref="PipeDelimitedListOfShares_exShare1share2share3__var" selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-0" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-2" operator="equals" />
    <refine-value idref="FaxService_Fax_StartupType_var" selector="FaxService_Fax_StartupType_var-selector-3" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-0" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-1" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-4" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-0" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-0" operator="equals" />
  </Profile>
  <Profile id="WindowsServer2003-DomainController" abstract="false">
    <title xml:lang="en">Windows Server 2003 - Domain Controller</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2003:::x64" />
    <platform idref="cpe:/o:microsoft:windows_2003_server:::x86" />
    <platform idref="cpe:/o:microsoft:windows_2003_server" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="AuditPolicy_AuditAccountLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditAccountManagement" selected="true" />
    <select idref="AuditPolicy_AuditLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditObjectAccess" selected="true" />
    <select idref="AuditPolicy_AuditPolicyChange" selected="true" />
    <select idref="AuditPolicy_AuditSystemEvents" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="EventLog_MaximumSecurityLogSize" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheApplicationLog" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheSecurityLog" selected="true" />
    <select idref="EventLog_RestrictGuestAccessToTheSystemLog" selected="true" />
    <select idref="EventLog_MaximumApplicationLogSize" selected="true" />
    <select idref="EventLog_MaximumSystemLogSize" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="Devices_UnsignedDriverInstallationBehavior" selected="true" />
    <select idref="DomainController_AllowServerOperatorsToScheduleTasks" selected="true" />
    <select idref="DomainController_RefuseMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="NetworkAccess_DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
    <select idref="NetworkAccess_NamedPipesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="SystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" selected="true" />
    <select idref="SystemObjects_DefaultOwnerForObjectsCreatedByMembersOfTheAdministratorsGroup" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemSettings_OptionalSubsystems" selected="true" />
    <select idref="MSS_AFD-DynamicBacklogGrowthDelta" selected="true" />
    <select idref="MSS_AFD-EnableDynamicBacklog" selected="true" />
    <select idref="MSS_AFD-MaximumDynamicBacklog" selected="true" />
    <select idref="MSS_AFD-MinimumDynamicBacklog" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_EnableDeadGatewayDetection" selected="true" />
    <select idref="MSS_EnableICMPRedirects" selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
    <select idref="MSS_PerformRouterDiscovery" selected="true" />
    <select idref="MSS_SYNAttackProtectionLevel" selected="true" />
    <select idref="MSS_TCPMaxConnectResponseRetransmissions" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissions" selected="true" />
    <select idref="RegistrySetting_TCPMaxPortsExhausted" selected="true" />
    <select idref="MSS_KeepAliveTime" selected="true" />
    <select idref="MSS_NoDriveTypeAutorun" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="Service_AlerterService_Alerter_StartupType" selected="true" />
    <select idref="Service_ClientServiceForNetWareService_NWCWorkstation_StartupType" selected="true" />
    <select idref="Service_ClipBookService_ClipSrv_StartupType" selected="true" />
    <select idref="Service_FileReplicationService_NtFrs_StartupType" selected="true" />
    <select idref="Service_FileServerForMacintoshService_MacFile_StartupType" selected="true" />
    <select idref="Service_FTPPublishingService_MSFTPSVC_StartupType" selected="true" />
    <select idref="Service_HelpAndSupportService_Helpsvc_StartupType" selected="true" />
    <select idref="Service_HTTPSSLService_HTTPFilter_StartupType" selected="true" />
    <select idref="Service_IISAdminService_IISADMIN_StartupType" selected="true" />
    <select idref="Service_IndexingService_CISVC_StartupType" selected="true" />
    <select idref="Service_LicenseLoggingService_LicenseService_StartupType" selected="true" />
    <select idref="Service_FaxService_Fax_StartupType" selected="true" />
    <select idref="Service_MessengerService_Messenger_StartupType" selected="true" />
    <select idref="Service_MicrosoftPOP3Service_Pop3Svc_StartupType" selected="true" />
    <select idref="Service_NetMeetingRemoteDesktopSharingService_Mnmsrvc_StartupType" selected="true" />
    <select idref="Service_NetworkConnectionsService_Netman_StartupType" selected="true" />
    <select idref="Service_NetworkNewsTransferProtocol_NNTP_Service_NntpSvc_StartupType" selected="true" />
    <select idref="Service_PrintServerForMacintoshService_MacPrint_StartupType" selected="true" />
    <select idref="Service_RemoteAccessAutoConnectionManagerService_RasAuto_StartupType" selected="true" />
    <select idref="Service_RemoteAccessConnectionManagerService_RasMan_StartupType" selected="true" />
    <select idref="Service_RemoteAdministrationService_Srvcsurg_StartupType" selected="true" />
    <select idref="Service_RemoteDesktopHelpSessionManagerService_RDSessMgr_StartupType" selected="true" />
    <select idref="Service_RemoteProcedureCall_RPC_LocatorService_RpcLocator_StartupType" selected="true" />
    <select idref="Service_RemoteServerManagerService_Appmgr_StartupType" selected="true" />
    <select idref="Service_SimpleMailTransferProtocol_SMTP_Service_SMTPSVC_StartupType" selected="true" />
    <select idref="Service_SNMPService_SNMP_StartupType" selected="true" />
    <select idref="Service_SNMPTrapService_SNMPTRAP_StartupType" selected="true" />
    <select idref="Service_TelephonyService_TapiSrv_StartupType" selected="true" />
    <select idref="Service_TelnetService_TlntSvr_StartupType" selected="true" />
    <select idref="Service_TrivialFTPDaemonService_TFTPD_StartupType" selected="true" />
    <select idref="Service_VolumeShadowCopyService_VSS_StartupType" selected="true" />
    <select idref="Service_WirelessZeroConfigurationService_WZCSVC_StartupType" selected="true" />
    <select idref="Service_WorldWideWebPublishingService_W3SVC_StartupType" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="Service_DataExecutionPrevention" selected="true" />
    <select idref="Service_RemoteInstallation_WindowsDeploymentService_BINLSVC_WDSServer_StartupType" selected="true" />
    <select idref="Service_RemoteStorageNotificationService_Remote_Storage_User_Link_StartupType" selected="true" />
    <select idref="Service_RemoteStorageServerService_Remote_Storage_Server_StartupType" selected="true" />
    <select idref="Service_WindowsMediaServicesService_WMServer_StartupType" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__regedit.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_at.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_attrib.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_cacls.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_debug.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_drwatson.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_drwtsn32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_edlin.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_eventcreate.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_eventtriggers.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_ftp.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_net.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_net1.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_netsh.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rcp.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_reg.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_regedt32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_regsvr32.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rexec.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_rsh.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_runas.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_sc.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_subst.exe-Administrators_SYSTEM" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_telnet.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_tftp.exe-Administrators_SYSTEM_INTERACTIVE" selected="true" />
    <select idref="WindowsFilePermissions__Systemroot__system32_tlntsvr.exe-Administrators_SYSTEM" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="MaxPwdAgeInSeconds_864001Day__var" selector="MaxPwdAgeInSeconds_864001Day__var-selector-3" operator="equals" />
    <refine-value idref="AuditObjectAccess_var1" selector="AuditObjectAccess_var1-selector-4" operator="equals" />
    <refine-value idref="AuditPolicyChange_var0" selector="AuditPolicyChange_var0-selector-8" operator="equals" />
    <refine-value idref="AuditSystemEvents_var0" selector="AuditSystemEvents_var0-selector-7" operator="equals" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-6" operator="equals" />
    <refine-value idref="ApplicationLogSize_inBytes__var" selector="ApplicationLogSize_inBytes__var-selector-7" operator="equals" />
    <refine-value idref="SystemLogSize_inBytes__var" selector="SystemLogSize_inBytes__var-selector-7" operator="equals" />
    <refine-value idref="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var" selector="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var-selector-3" operator="equals" />
    <refine-value idref="PipeDelimitedListOfShares_exShare1share2share3__var" selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-3" operator="equals" />
    <refine-value idref="FaxService_Fax_StartupType_var" selector="FaxService_Fax_StartupType_var-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-4" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-4" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-2" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-2" operator="equals" />
  </Profile>
  <Profile id="WindowsVista" abstract="false">
    <title xml:lang="en">Windows Vista</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_vista" />
    <platform idref="cpe:/o:microsoft:windows_vista:::x64" />
    <platform idref="cpe:/o:microsoft:windows_vista:::x86" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="AuditPolicy_AuditDirectoryServiceAccess" selected="true" />
    <select idref="AuditPolicy_AuditProcessTracking" selected="true" />
    <select idref="AuditPolicy_AuditAccountLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditAccountManagement" selected="true" />
    <select idref="AuditPolicy_AuditLogonEvents" selected="true" />
    <select idref="AuditPolicy_AuditObjectAccess" selected="true" />
    <select idref="AuditPolicy_AuditPolicyChange" selected="true" />
    <select idref="AuditPolicy_AuditPrivilegeUse" selected="true" />
    <select idref="AuditPolicy_AuditSystemEvents" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Audit_AuditTheAccessOfGlobalSystemObjects" selected="true" />
    <select idref="Audit_AuditTheUseOfBackupAndRestorePrivilege" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="Devices_RestrictCD-ROMAccessToLocallyLogged-onUserOnly" selected="true" />
    <select idref="Devices_RestrictFloppyAccessToLocallyLogged-onUserOnly" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_EnableDeadGatewayDetection" selected="true" />
    <select idref="MSS_EnableICMPRedirects" selected="true" />
    <select idref="MSS_KeepAliveTime" selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
    <select idref="MSS_PerformRouterDiscovery" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_SYNAttackProtectionLevel" selected="true" />
    <select idref="MSS_TCPMaxConnectResponseRetransmissions" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissions" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="MSS_Disable8.3NameCreation" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkAccess_NamedPipesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
    <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemCryptography_UseFIPSCompliantAlgorithmsForEncryption_HashingAndSigning" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="Service_WLANAutoConfigService_Wlansvc_StartupType" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreateGlobalObjects" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob" selected="true" />
    <select idref="UserRight_DenyLogOnAsAService" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_DenyLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_IncreaseAProcessWorkingSet" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_LogOnAsAService" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="Network-LinkLayerTopology_TurnOnMapperI_O_LLTDIO_Driver" selected="true" />
    <select idref="Network-LinkLayerTopology_TurnOnResponder_RSPNDR_Driver" selected="true" />
    <select idref="Network-WindowsConnectNow_ConfigurationOfWirelessSettingsUsingWindowsConnectNow" selected="true" />
    <select idref="Network-WindowsConnectNow_ProhibitAccessOfTheWindowsConnectNowWizards" selected="true" />
    <select idref="System-DeviceInstallation_AllowRemoteAccessToThePnPInterface" selected="true" />
    <select idref="System-DeviceInstallation_DoNotCreateSystemRestorePointWhenNewDeviceDriverInstalled" selected="true" />
    <select idref="System-DeviceInstallation_DoNotSendAWindowsErrorReportWhenAGenericDriverIsInstalled" selected="true" />
    <select idref="System-DriverInstallation_TurnOffWindowsUpdateDeviceDriverSearchPrompt" selected="true" />
    <select idref="GroupPolicy_RegistryPolicyProcessing" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffAutomaticRootCertificatesUpdate" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffEventViews_Events.asp_Links" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffHandwritingRecognitionErrorReporting" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetFileAssociationService" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_OrderPrints_PictureTask" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsErrorReporting" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsMovieMakerAutomaticCodecDownloads" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsMovieMakerOnlineWebLinks" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsMovieMakerSavingToOnlineVideoHostingProvide" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsUpdateDeviceDriverSearching" selected="true" />
    <select idref="System-Logon_AlwaysUseClassicLogon" selected="true" />
    <select idref="System-Logon_DoNotDisplayTheGettingStartedWelcomeScreenAtLogon" selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_OnBattery_" selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_PluggedIn_" selected="true" />
    <select idref="RemoteAssistance_OfferRemoteAssistance" selected="true" />
    <select idref="RemoteAssistance_SolicitedRemoteAssistance" selected="true" />
    <select idref="RemoteAssistance_TurnOnSessionLogging" selected="true" />
    <select idref="RemoteProcedureCall_RPCEndpointMapperClient" selected="true" />
    <select idref="RemoteProcedureCall_RestrictionsForUnauthenticatedRPCClients" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" selected="true" />
    <select idref="WindowsComponents-DigitalLocker_DoNotAllowDigitalLockerToRun" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Setup_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-GameExplorer_TurnOffDownloadingOfGameInformation" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-InternetInformationServices_PreventIISInstallation" selected="true" />
    <select idref="WindowsComponents-Netmeeting_DisableRemoteDesktopSharing" selected="true" />
    <select idref="WindowsComponents-OnlineAssistance_TurnOffUntrustedContent" selected="true" />
    <select idref="WindowsComponents-Search_AllowIndexingOfEncryptedFiles" selected="true" />
    <select idref="WindowsComponents-Search_EnableIndexingUncachedExchangeFolders" selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection" selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection" selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved" selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel" selected="true" />
    <select idref="TerminalServices_SetATimeLimitForDisconnectedSessions" selected="true" />
    <select idref="TerminalServices_SetTimeLimitForActiveButIdleRemoteDesktopServicesSessions" selected="true" />
    <select idref="WindowsComponents-WindowsDefender_ConfigureMicrosoftSpyNetReporting" selected="true" />
    <select idref="WindowsComponents-WindowsErrorReporting_DisableLogging" selected="true" />
    <select idref="WindowsComponents-WindowsErrorReporting_DisableWindowsErrorReporting" selected="true" />
    <select idref="WindowsComponents-WindowsErrorReporting_DisplayErrorNotification" selected="true" />
    <select idref="WindowsComponents-WindowsErrorReporting_DoNotSendAdditionalData" selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffHeapTerminationOnCorruption" selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffShellProtocolProtectedMode" selected="true" />
    <select idref="WindowsComponents-WindowsInstaller_DisableIESecurityPromptForWindowsInstallerScripts" selected="true" />
    <select idref="WindowsComponents-WindowsInstaller_EnableUserControlOverInstalls" selected="true" />
    <select idref="WindowsComponents-WindowsMail_TurnOffTheCommunitiesFeatures" selected="true" />
    <select idref="WindowsComponents-WindowsMail_TurnOffWindowsMailApplication" selected="true" />
    <select idref="WindowsComponents-WindowsMediaPlayer_DoNotShowFirstUseDialogBoxes" selected="true" />
    <select idref="WindowsComponents-WindowsMediaPlayer_PreventAutomaticUpdates" selected="true" />
    <select idref="WindowsComponents-WindowsMeetingSpace_TurnOffWindowsMeetingSpace" selected="true" />
    <select idref="WindowsComponents-WindowsMessenger_DoNotAllowWindowsMessengerToBeRun" selected="true" />
    <select idref="WindowsComponents-WindowsMessenger_DoNotAutomaticallyStartWindowsMessengerInitially" selected="true" />
    <select idref="WindowsComponents-WindowsSidebar_OverrideTheMoreGadgetsLink" selected="true" />
    <select idref="WindowsComponents-WindowsSidebar_TurnOffUserInstalledWindowsSidebarGadgets" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceAccess" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges" selected="true" />
    <select idref="AuditSubcategory_DistributionGroupManagement" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_ApplicationGenerated" selected="true" />
    <select idref="AuditSubcategory_ApplicationGroupManagement" selected="true" />
    <select idref="AuditSubcategory_AuditAccountLockout" selected="true" />
    <select idref="AuditSubcategory_AuthorizationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_CertificationServices" selected="true" />
    <select idref="AuditSubcategory_DetailedDirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_DPAPIActivity" selected="true" />
    <select idref="AuditSubcategory_FileShare" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformConnection" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPacketDrop" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPolicyChange" selected="true" />
    <select idref="AuditSubcategory_HandleManipulation" selected="true" />
    <select idref="AuditSubcategory_IPsecExtendedMode" selected="true" />
    <select idref="AuditSubcategory_IPsecMainMode" selected="true" />
    <select idref="AuditSubcategory_IPsecQuickMode" selected="true" />
    <select idref="AuditSubcategory_KernelObject" selected="true" />
    <select idref="AuditSubcategory_MPSSVCRule-LevelPolicyChange" selected="true" />
    <select idref="AuditSubcategory_NonSensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_OtherLogon_LogoffEvents" selected="true" />
    <select idref="AuditSubcategory_OtherObjectAccessEvents" selected="true" />
    <select idref="AuditSubcategory_OtherPolicyChangeEvents" selected="true" />
    <select idref="AuditSubcategory_OtherPrivilegeUseEvents" selected="true" />
    <select idref="AuditSubcategory_OtherSystemEvents" selected="true" />
    <select idref="AuditSubcategory_ProcessTermination" selected="true" />
    <select idref="AuditSubcategory_RPCEvents" selected="true" />
    <select idref="AuditSubcategory_SAM" selected="true" />
    <select idref="MSS_NoDefaultExempt" selected="true" />
    <select idref="MSS_NoDriveTypeAutorun" selected="true" />
    <select idref="Network-MicrosoftPeer-to-PeerNetworkingServices_TurnOffMicrosoftPeer-to-PeerNetworkingServices" selected="true" />
    <select idref="Network-NetworkConnections_ProhibitInstallationAndConfigurationOfNetworkBridgeOnYourDNSDomainNetwork" selected="true" />
    <select idref="Network-NetworkConnections_ProhibitUseOfInternetConnectionFirewallOnYourDNSDomainNetwork" selected="true" />
    <select idref="Network-NetworkConnections_ProhibitUseOfInternetConnectionSharingOnYourDNSDomainNetwork" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetConnectionWizardIfURLConnectionIsReferringToMicrosoft.com" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffRegistrationIfURLConnectionIsReferringToMicrosoft.com" selected="true" />
    <select idref="WindowsComponents-WindowsInstaller_ProhibitNon-administratorsFromApplyingVendorSignedUpdates" selected="true" />
    <select idref="WindowsComponents-WindowsLogonOptions_ReportWhenLogonServerWasNotAvailableDuringUserLogon" selected="true" />
    <select idref="WindowsComponents-WindowsMediaDigitalRightsManagement_PreventWindowsMediaDRMInternetAccess" selected="true" />
    <select idref="WindowsComponents-WindowsSidebar_DisableUnpackingAndInstallationOfGadgetsThatAreNotDigitallySigned" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="NetworkSecurity_ForceLogoffWhenLogonHoursExpire" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-18" operator="equals" />
    <refine-value idref="MaxPwdAgeInSeconds_864001Day__var" selector="MaxPwdAgeInSeconds_864001Day__var-selector-5" operator="equals" />
    <refine-value idref="MinimumPasswordLength_var" selector="MinimumPasswordLength_var-selector-8" operator="equals" />
    <refine-value idref="AuditAccountLogonEvents_var0" selector="AuditAccountLogonEvents_var0-selector-1" operator="equals" />
    <refine-value idref="AuditAccountManagement_var0" selector="AuditAccountManagement_var0-selector-1" operator="equals" />
    <refine-value idref="AuditLogonEvents_var0" selector="AuditLogonEvents_var0-selector-1" operator="equals" />
    <refine-value idref="AuditObjectAccess_var1" selector="AuditObjectAccess_var1-selector-8" operator="equals" />
    <refine-value idref="AuditPolicyChange_var0" selector="AuditPolicyChange_var0-selector-12" operator="equals" />
    <refine-value idref="AuditPrivilegeUse_var0" selector="AuditPrivilegeUse_var0-selector-1" operator="equals" />
    <refine-value idref="AuditSystemEvents_var0" selector="AuditSystemEvents_var0-selector-11" operator="equals" />
    <refine-value idref="AllowedToFormatAndEjectRemovableMedia_var" selector="AllowedToFormatAndEjectRemovableMedia_var-selector-4" operator="equals" />
    <refine-value idref="PreventUsersFromInstallingPrinterDrivers_var1" selector="PreventUsersFromInstallingPrinterDrivers_var1-selector" operator="equals" />
    <refine-value idref="RestrictAccessToCDROMDriveToLocallyLoggedonUsers_var1" selector="RestrictAccessToCDROMDriveToLocallyLoggedonUsers_var1-selector-0" operator="equals" />
    <refine-value idref="RestrictAccessToFloppyDriveToLocallyLoggedonUsers_var1" selector="RestrictAccessToFloppyDriveToLocallyLoggedonUsers_var1-selector-0" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-18" operator="equals" />
    <refine-value idref="DomainControllerRequiredToUnlock_var" selector="DomainControllerRequiredToUnlock_var-selector-3" operator="equals" />
    <refine-value idref="EnableTheComputerToStopGenerating8.3StyleFilenames_var" selector="EnableTheComputerToStopGenerating8.3StyleFilenames_var-selector" operator="equals" />
    <refine-value idref="ScreenSaverGracePeriod_inSeconds__var" selector="ScreenSaverGracePeriod_inSeconds__var-selector" operator="equals" />
    <refine-value idref="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var" selector="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var-selector-11" operator="equals" />
    <refine-value idref="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var" selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-5" operator="equals" />
    <refine-value idref="PipeDelimitedListOfShares_exShare1share2share3__var" selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-15" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-16" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-11" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-11" operator="equals" />
    <refine-value idref="ShutDownWithoutLogon_var" selector="ShutDownWithoutLogon_var-selector" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-7" operator="equals" />
    <refine-value idref="UseFIPSCompliantAlgorithms_var" selector="UseFIPSCompliantAlgorithms_var-selector-1" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForAdministrators_var" selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-3" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForStandardUsers_var" selector="BehaviorOfTheElevationPromptForStandardUsers_var-selector" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_chinese" selector="AccessThisComputerFromTheNetwork_chinese-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_italian" selector="AccessThisComputerFromTheNetwork_italian-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_german" selector="AccessThisComputerFromTheNetwork_german-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_swedish" selector="AccessThisComputerFromTheNetwork_swedish-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_french" selector="AccessThisComputerFromTheNetwork_french-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_spanish" selector="AccessThisComputerFromTheNetwork_spanish-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_japanese" selector="AccessThisComputerFromTheNetwork_japanese-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_english" selector="AccessThisComputerFromTheNetwork_english-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_polish" selector="AccessThisComputerFromTheNetwork_polish-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_portuguese" selector="AccessThisComputerFromTheNetwork_portuguese-selector-9" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_turkish" selector="AccessThisComputerFromTheNetwork_turkish-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_italian" selector="AdjustMemoryQuotasForAProcess_italian-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_french" selector="AdjustMemoryQuotasForAProcess_french-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_swedish" selector="AdjustMemoryQuotasForAProcess_swedish-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_polish" selector="AdjustMemoryQuotasForAProcess_polish-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_spanish" selector="AdjustMemoryQuotasForAProcess_spanish-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_portuguese" selector="AdjustMemoryQuotasForAProcess_portuguese-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_english" selector="AdjustMemoryQuotasForAProcess_english-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_chinese" selector="AdjustMemoryQuotasForAProcess_chinese-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_japanese" selector="AdjustMemoryQuotasForAProcess_japanese-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_german" selector="AdjustMemoryQuotasForAProcess_german-selector-8" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_turkish" selector="AdjustMemoryQuotasForAProcess_turkish-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-14" operator="equals" />
    <refine-value idref="BypassTraverseChecking_english" selector="BypassTraverseChecking_english-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_german" selector="BypassTraverseChecking_german-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_french" selector="BypassTraverseChecking_french-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_portuguese" selector="BypassTraverseChecking_portuguese-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_italian" selector="BypassTraverseChecking_italian-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_polish" selector="BypassTraverseChecking_polish-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_japanese" selector="BypassTraverseChecking_japanese-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_chinese" selector="BypassTraverseChecking_chinese-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_swedish" selector="BypassTraverseChecking_swedish-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_spanish" selector="BypassTraverseChecking_spanish-selector-8" operator="equals" />
    <refine-value idref="BypassTraverseChecking_turkish" selector="BypassTraverseChecking_turkish-selector-8" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_portuguese" selector="AllowedToChangeTheTimeZone_portuguese-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_italian" selector="AllowedToChangeTheTimeZone_italian-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_german" selector="AllowedToChangeTheTimeZone_german-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_chinese" selector="AllowedToChangeTheTimeZone_chinese-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_swedish" selector="AllowedToChangeTheTimeZone_swedish-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_spanish" selector="AllowedToChangeTheTimeZone_spanish-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_french" selector="AllowedToChangeTheTimeZone_french-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_polish" selector="AllowedToChangeTheTimeZone_polish-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_japanese" selector="AllowedToChangeTheTimeZone_japanese-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_english" selector="AllowedToChangeTheTimeZone_english-selector" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_turkish" selector="AllowedToChangeTheTimeZone_turkish-selector" operator="equals" />
    <refine-value idref="CreateGlobalObjects_german" selector="CreateGlobalObjects_german-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_english" selector="CreateGlobalObjects_english-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_italian" selector="CreateGlobalObjects_italian-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_chinese" selector="CreateGlobalObjects_chinese-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_french" selector="CreateGlobalObjects_french-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_swedish" selector="CreateGlobalObjects_swedish-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_portuguese" selector="CreateGlobalObjects_portuguese-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_polish" selector="CreateGlobalObjects_polish-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_spanish" selector="CreateGlobalObjects_spanish-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_japanese" selector="CreateGlobalObjects_japanese-selector-6" operator="equals" />
    <refine-value idref="CreateGlobalObjects_turkish" selector="CreateGlobalObjects_turkish-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_swedish" selector="DenyLogOnAsABatchJob_swedish-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_german" selector="DenyLogOnAsABatchJob_german-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_spanish" selector="DenyLogOnAsABatchJob_spanish-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_english" selector="DenyLogOnAsABatchJob_english-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_french" selector="DenyLogOnAsABatchJob_french-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_japanese" selector="DenyLogOnAsABatchJob_japanese-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_chinese" selector="DenyLogOnAsABatchJob_chinese-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_polish" selector="DenyLogOnAsABatchJob_polish-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_portuguese" selector="DenyLogOnAsABatchJob_portuguese-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_italian" selector="DenyLogOnAsABatchJob_italian-selector" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_turkish" selector="DenyLogOnAsABatchJob_turkish-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-11" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_polish" selector="DenyLogOnThroughTerminalServices_polish-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_swedish" selector="DenyLogOnThroughTerminalServices_swedish-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_spanish" selector="DenyLogOnThroughTerminalServices_spanish-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_english" selector="DenyLogOnThroughTerminalServices_english-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_chinese" selector="DenyLogOnThroughTerminalServices_chinese-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_japanese" selector="DenyLogOnThroughTerminalServices_japanese-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_german" selector="DenyLogOnThroughTerminalServices_german-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_italian" selector="DenyLogOnThroughTerminalServices_italian-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_portuguese" selector="DenyLogOnThroughTerminalServices_portuguese-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_french" selector="DenyLogOnThroughTerminalServices_french-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_turkish" selector="DenyLogOnThroughTerminalServices_turkish-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-15" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-15" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-11" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-11" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-21" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-21" operator="equals" />
    <refine-value idref="RestrictionsForUnauthenticatedRPCClients_var0" selector="RestrictionsForUnauthenticatedRPCClients_var0-selector-7" operator="equals" />
    <refine-value idref="FileSystemAuditSubcategory._var" selector="FileSystemAuditSubcategory._var-selector-5" operator="equals" />
    <refine-value idref="RegistryAuditSubcategory._var" selector="RegistryAuditSubcategory._var-selector-5" operator="equals" />
    <refine-value idref="SensitivePrivilegeUseAuditSubcategory._var" selector="SensitivePrivilegeUseAuditSubcategory._var-selector-5" operator="equals" />
    <refine-value idref="DisplayANotification-PublicProfile_var" selector="DisplayANotification-PublicProfile_var-selector" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-DomainProfile_var" selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-5" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PrivateProfile_var" selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-5" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-DomainProfile_var" selector="ApplyLocalFirewallRules-DomainProfile_var-selector-5" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PrivateProfile_var" selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-5" operator="equals" />
  </Profile>
  <Profile id="WindowsServer2008" abstract="false">
    <title xml:lang="en">Windows Server 2008 - Member Server</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2008" />
    <platform idref="cpe:/o:microsoft:windows_server_2008:::x86" />
    <platform idref="cpe:/o:microsoft:windows_server_2008:::x64" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceAccess" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowRedirect-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowRedirect-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-StandardProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-StandardProfile" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_ConfigureAutomaticUpdates" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_DoNotDisplay_InstallUpdatesAndShutDown_OptionInTheShutDownWindowsDialogBox" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_RescheduleAutomaticUpdatesScheduledInstallations" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_DenyLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" selected="true" />
    <select idref="SystemSettings_OptionalSubsystems" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_EnableICMPRedirects" selected="true" />
    <select idref="MSS_NoDefaultExempt" selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
    <select idref="MSS_Disable8.3NameCreation" selected="true" />
    <select idref="MSS_PerformRouterDiscovery" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissions" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissionsIPv6" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection" selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved" selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel" selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" selected="true" />
    <select idref="System-Logon_DoNotProcessTheLegacyRunList" selected="true" />
    <select idref="System-Logon_DoNotProcessTheRunOnceList" selected="true" />
    <select idref="GroupPolicy_RegistryPolicyProcessing" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_RequireTrustedPathForCredentialEntry" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" selected="true" />
    <select idref="WindowsComponents-Netmeeting_DisableRemoteDesktopSharing" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-13" operator="equals" />
    <refine-value idref="LogonAuditSubcategory._var" selector="LogonAuditSubcategory._var-selector-1" operator="equals" />
    <refine-value idref="ComputerAccountManagementAuditSubcategory._var" selector="ComputerAccountManagementAuditSubcategory._var-selector-1" operator="equals" />
    <refine-value idref="OtherAccountManagementEventsAuditSubcategory._var" selector="OtherAccountManagementEventsAuditSubcategory._var-selector-2" operator="equals" />
    <refine-value idref="SecurityGroupManagementAuditSubcategory._var" selector="SecurityGroupManagementAuditSubcategory._var-selector-1" operator="equals" />
    <refine-value idref="UserAccountManagementAuditSubcategory._var" selector="UserAccountManagementAuditSubcategory._var-selector-2" operator="equals" />
    <refine-value idref="CredentialValidationAuditSubcategory._var" selector="CredentialValidationAuditSubcategory._var-selector-2" operator="equals" />
    <refine-value idref="ICMPAllowInboundEchoRequest_var0" selector="ICMPAllowInboundEchoRequest_var0-selector-0" operator="equals" />
    <refine-value idref="ICMPAllowOutboundPacketTooBig_var0" selector="ICMPAllowOutboundPacketTooBig_var0-selector-0" operator="equals" />
    <refine-value idref="ICMPAllowOutboundSourceQuench_var0" selector="ICMPAllowOutboundSourceQuench_var0-selector-0" operator="equals" />
    <refine-value idref="DisplayANotification-DomainProfile_var" selector="DisplayANotification-DomainProfile_var-selector-1" operator="equals" />
    <refine-value idref="DisplayANotification-PrivateProfile_var" selector="DisplayANotification-PrivateProfile_var-selector-0" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForAdministrators_var" selector="BehaviorOfTheElevationPromptForAdministrators_var-selector" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_japanese" selector="AccessThisComputerFromTheNetwork_japanese-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_chinese" selector="AccessThisComputerFromTheNetwork_chinese-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_italian" selector="AccessThisComputerFromTheNetwork_italian-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_english" selector="AccessThisComputerFromTheNetwork_english-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_spanish" selector="AccessThisComputerFromTheNetwork_spanish-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_french" selector="AccessThisComputerFromTheNetwork_french-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_german" selector="AccessThisComputerFromTheNetwork_german-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_polish" selector="AccessThisComputerFromTheNetwork_polish-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_portuguese" selector="AccessThisComputerFromTheNetwork_portuguese-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_swedish" selector="AccessThisComputerFromTheNetwork_swedish-selector-4" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_turkish" selector="AccessThisComputerFromTheNetwork_turkish-selector-4" operator="equals" />
    <refine-value idref="BypassTraverseChecking_english" selector="BypassTraverseChecking_english-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_german" selector="BypassTraverseChecking_german-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_french" selector="BypassTraverseChecking_french-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_portuguese" selector="BypassTraverseChecking_portuguese-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_italian" selector="BypassTraverseChecking_italian-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_polish" selector="BypassTraverseChecking_polish-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_chinese" selector="BypassTraverseChecking_chinese-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_japanese" selector="BypassTraverseChecking_japanese-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_swedish" selector="BypassTraverseChecking_swedish-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_spanish" selector="BypassTraverseChecking_spanish-selector-2" operator="equals" />
    <refine-value idref="BypassTraverseChecking_turkish" selector="BypassTraverseChecking_turkish-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-4" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-4" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_spanish" selector="RemoveComputerFromADockingStation_spanish-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_french" selector="RemoveComputerFromADockingStation_french-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_portuguese" selector="RemoveComputerFromADockingStation_portuguese-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_polish" selector="RemoveComputerFromADockingStation_polish-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_swedish" selector="RemoveComputerFromADockingStation_swedish-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_english" selector="RemoveComputerFromADockingStation_english-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_italian" selector="RemoveComputerFromADockingStation_italian-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_japanese" selector="RemoveComputerFromADockingStation_japanese-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_german" selector="RemoveComputerFromADockingStation_german-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_chinese" selector="RemoveComputerFromADockingStation_chinese-selector-2" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_turkish" selector="RemoveComputerFromADockingStation_turkish-selector-2" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-13" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-13" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-7" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-9" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-6" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_polish" selector="DenyLogOnThroughTerminalServices_polish-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_swedish" selector="DenyLogOnThroughTerminalServices_swedish-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_spanish" selector="DenyLogOnThroughTerminalServices_spanish-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_english" selector="DenyLogOnThroughTerminalServices_english-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_chinese" selector="DenyLogOnThroughTerminalServices_chinese-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_japanese" selector="DenyLogOnThroughTerminalServices_japanese-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_german" selector="DenyLogOnThroughTerminalServices_german-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_italian" selector="DenyLogOnThroughTerminalServices_italian-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_portuguese" selector="DenyLogOnThroughTerminalServices_portuguese-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_french" selector="DenyLogOnThroughTerminalServices_french-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_turkish" selector="DenyLogOnThroughTerminalServices_turkish-selector-4" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-9" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_italian" selector="RestoreFilesAndDirectories_italian-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_german" selector="RestoreFilesAndDirectories_german-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_chinese" selector="RestoreFilesAndDirectories_chinese-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_swedish" selector="RestoreFilesAndDirectories_swedish-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_spanish" selector="RestoreFilesAndDirectories_spanish-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_french" selector="RestoreFilesAndDirectories_french-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_english" selector="RestoreFilesAndDirectories_english-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_polish" selector="RestoreFilesAndDirectories_polish-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_portuguese" selector="RestoreFilesAndDirectories_portuguese-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_japanese" selector="RestoreFilesAndDirectories_japanese-selector-1" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_turkish" selector="RestoreFilesAndDirectories_turkish-selector-1" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-10" operator="equals" />
    <refine-value idref="PipeDelimitedListOfShares_exShare1share2share3__var" selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-10" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-8" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-2" operator="equals" />
    <refine-value idref="ForceKeyProtection_var" selector="ForceKeyProtection_var-selector-2" operator="equals" />
    <refine-value idref="IPSecExemptions_var" selector="IPSecExemptions_var-selector-2" operator="equals" />
    <refine-value idref="DoNotAllowDriveRedirection_var" selector="DoNotAllowDriveRedirection_var-selector-2" operator="equals" />
    <refine-value idref="DoNotProcessTheLegacyRunList_var" selector="DoNotProcessTheLegacyRunList_var-selector-2" operator="equals" />
    <refine-value idref="DoNotProcessTheRunOnceList_var" selector="DoNotProcessTheRunOnceList_var-selector-2" operator="equals" />
    <refine-value idref="EnumerateAdministratorAccountsOnElevation_var" selector="EnumerateAdministratorAccountsOnElevation_var-selector-2" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-3" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-3" operator="equals" />
  </Profile>
  <Profile id="WindowsServer2008_DC" abstract="false">
    <title xml:lang="en">Windows Server 2008 - Domain Controller</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2008" />
    <platform idref="cpe:/o:microsoft:windows_server_2008:::x86" />
    <platform idref="cpe:/o:microsoft:windows_server_2008:::x64" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceAccess" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowRedirect-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowRedirect-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-StandardProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-StandardProfile" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_ConfigureAutomaticUpdates" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_DoNotDisplay_InstallUpdatesAndShutDown_OptionInTheShutDownWindowsDialogBox" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_RescheduleAutomaticUpdatesScheduledInstallations" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_AddWorkstationsToDomain" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_DenyLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="DomainController_AllowServerOperatorsToScheduleTasks" selected="true" />
    <select idref="DomainController_RefuseMachineAccountPasswordChanges" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" selected="true" />
    <select idref="SystemSettings_OptionalSubsystems" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_EnableICMPRedirects" selected="true" />
    <select idref="MSS_NoDefaultExempt" selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
    <select idref="MSS_Disable8.3NameCreation" selected="true" />
    <select idref="MSS_PerformRouterDiscovery" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissions" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissionsIPv6" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection" selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved" selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel" selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" selected="true" />
    <select idref="System-Logon_DoNotProcessTheLegacyRunList" selected="true" />
    <select idref="System-Logon_DoNotProcessTheRunOnceList" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_RequireTrustedPathForCredentialEntry" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" selected="true" />
    <select idref="WindowsComponents-Netmeeting_DisableRemoteDesktopSharing" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-12" operator="equals" />
    <refine-value idref="LogonAuditSubcategory._var" selector="LogonAuditSubcategory._var-selector-2" operator="equals" />
    <refine-value idref="ComputerAccountManagementAuditSubcategory._var" selector="ComputerAccountManagementAuditSubcategory._var-selector-2" operator="equals" />
    <refine-value idref="OtherAccountManagementEventsAuditSubcategory._var" selector="OtherAccountManagementEventsAuditSubcategory._var-selector-1" operator="equals" />
    <refine-value idref="SecurityGroupManagementAuditSubcategory._var" selector="SecurityGroupManagementAuditSubcategory._var-selector-2" operator="equals" />
    <refine-value idref="UserAccountManagementAuditSubcategory._var" selector="UserAccountManagementAuditSubcategory._var-selector-1" operator="equals" />
    <refine-value idref="DirectoryServiceAccessAuditSubcategory._var" selector="DirectoryServiceAccessAuditSubcategory._var-selector" operator="equals" />
    <refine-value idref="DirectoryServiceChangesAuditSubcategory._var" selector="DirectoryServiceChangesAuditSubcategory._var-selector" operator="equals" />
    <refine-value idref="CredentialValidationAuditSubcategory._var" selector="CredentialValidationAuditSubcategory._var-selector-1" operator="equals" />
    <refine-value idref="ICMPAllowOutboundSourceQuench_var0" selector="ICMPAllowOutboundSourceQuench_var0-selector-1" operator="equals" />
    <refine-value idref="ICMPAllowOutboundPacketTooBig_var0" selector="ICMPAllowOutboundPacketTooBig_var0-selector-1" operator="equals" />
    <refine-value idref="ICMPAllowInboundEchoRequest_var0" selector="ICMPAllowInboundEchoRequest_var0-selector-1" operator="equals" />
    <refine-value idref="DisplayANotification-DomainProfile_var" selector="DisplayANotification-DomainProfile_var-selector-2" operator="equals" />
    <refine-value idref="DisplayANotification-PrivateProfile_var" selector="DisplayANotification-PrivateProfile_var-selector-1" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForAdministrators_var" selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-0" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_chinese" selector="AccessThisComputerFromTheNetwork_chinese-selector-3" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_italian" selector="AccessThisComputerFromTheNetwork_italian-selector-3" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_japanese" selector="AccessThisComputerFromTheNetwork_japanese-selector-3" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_english" selector="AccessThisComputerFromTheNetwork_english-selector-3" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_spanish" selector="AccessThisComputerFromTheNetwork_spanish-selector-2" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_french" selector="AccessThisComputerFromTheNetwork_french-selector-2" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_german" selector="AccessThisComputerFromTheNetwork_german-selector-2" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_polish" selector="AccessThisComputerFromTheNetwork_polish-selector-2" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_portuguese" selector="AccessThisComputerFromTheNetwork_portuguese-selector-2" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_swedish" selector="AccessThisComputerFromTheNetwork_swedish-selector-2" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_turkish" selector="AccessThisComputerFromTheNetwork_turkish-selector-3" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-5" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-5" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_spanish" selector="RemoveComputerFromADockingStation_spanish-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_french" selector="RemoveComputerFromADockingStation_french-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_portuguese" selector="RemoveComputerFromADockingStation_portuguese-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_polish" selector="RemoveComputerFromADockingStation_polish-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_swedish" selector="RemoveComputerFromADockingStation_swedish-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_english" selector="RemoveComputerFromADockingStation_english-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_italian" selector="RemoveComputerFromADockingStation_italian-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_japanese" selector="RemoveComputerFromADockingStation_japanese-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_german" selector="RemoveComputerFromADockingStation_german-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_chinese" selector="RemoveComputerFromADockingStation_chinese-selector-3" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_turkish" selector="RemoveComputerFromADockingStation_turkish-selector-3" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-14" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-14" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-6" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-6" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_german" selector="AddWorkstationsToDomain_german-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_swedish" selector="AddWorkstationsToDomain_swedish-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_japanese" selector="AddWorkstationsToDomain_japanese-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_spanish" selector="AddWorkstationsToDomain_spanish-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_english" selector="AddWorkstationsToDomain_english-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_italian" selector="AddWorkstationsToDomain_italian-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_french" selector="AddWorkstationsToDomain_french-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_polish" selector="AddWorkstationsToDomain_polish-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_chinese" selector="AddWorkstationsToDomain_chinese-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_portuguese" selector="AddWorkstationsToDomain_portuguese-selector" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_turkish" selector="AddWorkstationsToDomain_turkish-selector" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-7" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-7" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_polish" selector="DenyLogOnThroughTerminalServices_polish-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_swedish" selector="DenyLogOnThroughTerminalServices_swedish-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_spanish" selector="DenyLogOnThroughTerminalServices_spanish-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_english" selector="DenyLogOnThroughTerminalServices_english-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_chinese" selector="DenyLogOnThroughTerminalServices_chinese-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_japanese" selector="DenyLogOnThroughTerminalServices_japanese-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_german" selector="DenyLogOnThroughTerminalServices_german-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_italian" selector="DenyLogOnThroughTerminalServices_italian-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_portuguese" selector="DenyLogOnThroughTerminalServices_portuguese-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_french" selector="DenyLogOnThroughTerminalServices_french-selector-3" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_turkish" selector="DenyLogOnThroughTerminalServices_turkish-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_italian" selector="RestoreFilesAndDirectories_italian-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_german" selector="RestoreFilesAndDirectories_german-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_chinese" selector="RestoreFilesAndDirectories_chinese-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_swedish" selector="RestoreFilesAndDirectories_swedish-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_spanish" selector="RestoreFilesAndDirectories_spanish-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_french" selector="RestoreFilesAndDirectories_french-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_english" selector="RestoreFilesAndDirectories_english-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_polish" selector="RestoreFilesAndDirectories_polish-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_portuguese" selector="RestoreFilesAndDirectories_portuguese-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_japanese" selector="RestoreFilesAndDirectories_japanese-selector-0" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_turkish" selector="RestoreFilesAndDirectories_turkish-selector-0" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-11" operator="equals" />
    <refine-value idref="PipeDelimitedListOfShares_exShare1share2share3__var" selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-9" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-9" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-1" operator="equals" />
    <refine-value idref="ForceKeyProtection_var" selector="ForceKeyProtection_var-selector-3" operator="equals" />
    <refine-value idref="IPSecExemptions_var" selector="IPSecExemptions_var-selector-1" operator="equals" />
    <refine-value idref="DoNotAllowDriveRedirection_var" selector="DoNotAllowDriveRedirection_var-selector-1" operator="equals" />
    <refine-value idref="DoNotProcessTheLegacyRunList_var" selector="DoNotProcessTheLegacyRunList_var-selector-1" operator="equals" />
    <refine-value idref="DoNotProcessTheRunOnceList_var" selector="DoNotProcessTheRunOnceList_var-selector-1" operator="equals" />
    <refine-value idref="EnumerateAdministratorAccountsOnElevation_var" selector="EnumerateAdministratorAccountsOnElevation_var-selector-1" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-4" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-4" operator="equals" />
  </Profile>
  <Profile id="Windows7" abstract="false">
    <title xml:lang="en">Windows 7</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_7" />
    <platform idref="cpe:/o:microsoft:windows_7:::x86" />
    <platform idref="cpe:/o:microsoft:windows_7:::x64" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_DistributionGroupManagement" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_ConfigureAutomaticUpdates" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_DoNotDisplay_InstallUpdatesAndShutDown_OptionInTheShutDownWindowsDialogBox" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_NoAuto-restartForScheduledAutomaticUpdatesInstallations" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_RescheduleAutomaticUpdatesScheduledInstallations" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel" selected="true" />
    <select idref="UserRight_CreateSymbolicLinks" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_NoDefaultExempt" selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" selected="true" />
    <select idref="NetworkSecurity_AllowPKU2UAuthenticationRequestsToThisComputerToUseOnlineIdentities" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection" selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved" selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel" selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection" selected="true" />
    <select idref="TerminalServices_AllowUsersToConnectRemotelyUsingTerminalServices" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_OnBattery_" selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_PluggedIn_" selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffDataExecutionPreventionForExplorer" selected="true" />
    <select idref="System-Logon_DoNotProcessTheLegacyRunList" selected="true" />
    <select idref="System-Logon_DoNotProcessTheRunOnceList" selected="true" />
    <select idref="GroupPolicy_RegistryPolicyProcessing" selected="true" />
    <select idref="RemoteProcedureCall_RestrictionsForUnauthenticatedRPCClients" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_RequireTrustedPathForCredentialEntry" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="LogonAuditSubcategory._var" selector="LogonAuditSubcategory._var-selector" operator="equals" />
    <refine-value idref="ComputerAccountManagementAuditSubcategory._var" selector="ComputerAccountManagementAuditSubcategory._var-selector" operator="equals" />
    <refine-value idref="OtherAccountManagementEventsAuditSubcategory._var" selector="OtherAccountManagementEventsAuditSubcategory._var-selector" operator="equals" />
    <refine-value idref="SecurityGroupManagementAuditSubcategory._var" selector="SecurityGroupManagementAuditSubcategory._var-selector" operator="equals" />
    <refine-value idref="UserAccountManagementAuditSubcategory._var" selector="UserAccountManagementAuditSubcategory._var-selector" operator="equals" />
    <refine-value idref="CredentialValidationAuditSubcategory._var" selector="CredentialValidationAuditSubcategory._var-selector" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-2" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-2" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-6" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-6" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_english" selector="ProfileSystemPerformance_english-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_chinese" selector="ProfileSystemPerformance_chinese-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_japanese" selector="ProfileSystemPerformance_japanese-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_polish" selector="ProfileSystemPerformance_polish-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_french" selector="ProfileSystemPerformance_french-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_portuguese" selector="ProfileSystemPerformance_portuguese-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_spanish" selector="ProfileSystemPerformance_spanish-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_german" selector="ProfileSystemPerformance_german-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_italian" selector="ProfileSystemPerformance_italian-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_swedish" selector="ProfileSystemPerformance_swedish-selector" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_turkish" selector="ProfileSystemPerformance_turkish-selector" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector" operator="equals" />
    <refine-value idref="AllowedToFormatAndEjectRemovableMedia_var" selector="AllowedToFormatAndEjectRemovableMedia_var-selector-2" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-6" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-4" operator="equals" />
    <refine-value idref="ForceKeyProtection_var" selector="ForceKeyProtection_var-selector-0" operator="equals" />
    <refine-value idref="DoNotAllowDriveRedirection_var" selector="DoNotAllowDriveRedirection_var-selector" operator="equals" />
    <refine-value idref="AllowUsersToConnectRemotelyUsingTerminalServices_var" selector="AllowUsersToConnectRemotelyUsingTerminalServices_var-selector-0" operator="equals" />
    <refine-value idref="DoNotProcessTheLegacyRunList_var" selector="DoNotProcessTheLegacyRunList_var-selector-0" operator="equals" />
    <refine-value idref="DoNotProcessTheRunOnceList_var" selector="DoNotProcessTheRunOnceList_var-selector-0" operator="equals" />
    <refine-value idref="RestrictionsForUnauthenticatedRPCClients_var0" selector="RestrictionsForUnauthenticatedRPCClients_var0-selector" operator="equals" />
    <refine-value idref="EnumerateAdministratorAccountsOnElevation_var" selector="EnumerateAdministratorAccountsOnElevation_var-selector" operator="equals" />
    <refine-value idref="RequireTrustedPathForCredentialEntry_var" selector="RequireTrustedPathForCredentialEntry_var-selector" operator="equals" />
    <refine-value idref="ChangeTheSystemTime_turkish" selector="ChangeTheSystemTime_turkish-selector" operator="equals" />
  </Profile>
  <Profile id="WindowsServer2008R2_MS" abstract="false">
    <title xml:lang="en">Windows Server 2008 R2 - Member Server</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2008:r2" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceAccess" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowRedirect-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowRedirect-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-StandardProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-StandardProfile" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_ConfigureAutomaticUpdates" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_DoNotDisplay_InstallUpdatesAndShutDown_OptionInTheShutDownWindowsDialogBox" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_RescheduleAutomaticUpdatesScheduledInstallations" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_DenyLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" selected="true" />
    <select idref="SystemSettings_OptionalSubsystems" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_EnableICMPRedirects" selected="true" />
    <select idref="MSS_NoDefaultExempt" selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
    <select idref="MSS_Disable8.3NameCreation" selected="true" />
    <select idref="MSS_PerformRouterDiscovery" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissions" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissionsIPv6" selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection" selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel" selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection" selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" selected="true" />
    <select idref="System-Logon_DoNotProcessTheLegacyRunList" selected="true" />
    <select idref="System-Logon_DoNotProcessTheRunOnceList" selected="true" />
    <select idref="GroupPolicy_RegistryPolicyProcessing" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_RequireTrustedPathForCredentialEntry" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" selected="true" />
    <select idref="WindowsComponents-Netmeeting_DisableRemoteDesktopSharing" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-14" operator="equals" />
    <refine-value idref="LogonAuditSubcategory._var" selector="LogonAuditSubcategory._var-selector-4" operator="equals" />
    <refine-value idref="ComputerAccountManagementAuditSubcategory._var" selector="ComputerAccountManagementAuditSubcategory._var-selector-4" operator="equals" />
    <refine-value idref="OtherAccountManagementEventsAuditSubcategory._var" selector="OtherAccountManagementEventsAuditSubcategory._var-selector-3" operator="equals" />
    <refine-value idref="SecurityGroupManagementAuditSubcategory._var" selector="SecurityGroupManagementAuditSubcategory._var-selector-4" operator="equals" />
    <refine-value idref="UserAccountManagementAuditSubcategory._var" selector="UserAccountManagementAuditSubcategory._var-selector-3" operator="equals" />
    <refine-value idref="CredentialValidationAuditSubcategory._var" selector="CredentialValidationAuditSubcategory._var-selector-3" operator="equals" />
    <refine-value idref="ICMPAllowOutboundSourceQuench_var0" selector="ICMPAllowOutboundSourceQuench_var0-selector-7" operator="equals" />
    <refine-value idref="ICMPAllowOutboundPacketTooBig_var0" selector="ICMPAllowOutboundPacketTooBig_var0-selector-7" operator="equals" />
    <refine-value idref="ICMPAllowInboundEchoRequest_var0" selector="ICMPAllowInboundEchoRequest_var0-selector-7" operator="equals" />
    <refine-value idref="DisplayANotification-DomainProfile_var" selector="DisplayANotification-DomainProfile_var-selector-3" operator="equals" />
    <refine-value idref="DisplayANotification-PrivateProfile_var" selector="DisplayANotification-PrivateProfile_var-selector-2" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_polish" selector="AccessThisComputerFromTheNetwork_polish-selector-8" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_german" selector="AccessThisComputerFromTheNetwork_german-selector-5" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_japanese" selector="AccessThisComputerFromTheNetwork_japanese-selector-5" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_chinese" selector="AccessThisComputerFromTheNetwork_chinese-selector-5" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_italian" selector="AccessThisComputerFromTheNetwork_italian-selector-5" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_swedish" selector="AccessThisComputerFromTheNetwork_swedish-selector-5" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_portuguese" selector="AccessThisComputerFromTheNetwork_portuguese-selector-5" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_english" selector="AccessThisComputerFromTheNetwork_english-selector-5" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_french" selector="AccessThisComputerFromTheNetwork_french-selector-5" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_spanish" selector="AccessThisComputerFromTheNetwork_spanish-selector-5" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_turkish" selector="AccessThisComputerFromTheNetwork_turkish-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_english" selector="BypassTraverseChecking_english-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_german" selector="BypassTraverseChecking_german-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_french" selector="BypassTraverseChecking_french-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_portuguese" selector="BypassTraverseChecking_portuguese-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_italian" selector="BypassTraverseChecking_italian-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_polish" selector="BypassTraverseChecking_polish-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_chinese" selector="BypassTraverseChecking_chinese-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_japanese" selector="BypassTraverseChecking_japanese-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_swedish" selector="BypassTraverseChecking_swedish-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_spanish" selector="BypassTraverseChecking_spanish-selector-5" operator="equals" />
    <refine-value idref="BypassTraverseChecking_turkish" selector="BypassTraverseChecking_turkish-selector-5" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-6" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-10" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-10" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_spanish" selector="RemoveComputerFromADockingStation_spanish-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_french" selector="RemoveComputerFromADockingStation_french-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_portuguese" selector="RemoveComputerFromADockingStation_portuguese-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_polish" selector="RemoveComputerFromADockingStation_polish-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_swedish" selector="RemoveComputerFromADockingStation_swedish-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_english" selector="RemoveComputerFromADockingStation_english-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_italian" selector="RemoveComputerFromADockingStation_italian-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_japanese" selector="RemoveComputerFromADockingStation_japanese-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_german" selector="RemoveComputerFromADockingStation_german-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_chinese" selector="RemoveComputerFromADockingStation_chinese-selector-6" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_turkish" selector="RemoveComputerFromADockingStation_turkish-selector-6" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-20" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-20" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-8" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-8" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-13" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_polish" selector="DenyLogOnThroughTerminalServices_polish-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_swedish" selector="DenyLogOnThroughTerminalServices_swedish-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_spanish" selector="DenyLogOnThroughTerminalServices_spanish-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_english" selector="DenyLogOnThroughTerminalServices_english-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_chinese" selector="DenyLogOnThroughTerminalServices_chinese-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_japanese" selector="DenyLogOnThroughTerminalServices_japanese-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_german" selector="DenyLogOnThroughTerminalServices_german-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_italian" selector="DenyLogOnThroughTerminalServices_italian-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_portuguese" selector="DenyLogOnThroughTerminalServices_portuguese-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_french" selector="DenyLogOnThroughTerminalServices_french-selector-5" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_turkish" selector="DenyLogOnThroughTerminalServices_turkish-selector-5" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-14" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-14" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_italian" selector="RestoreFilesAndDirectories_italian-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_german" selector="RestoreFilesAndDirectories_german-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_chinese" selector="RestoreFilesAndDirectories_chinese-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_swedish" selector="RestoreFilesAndDirectories_swedish-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_spanish" selector="RestoreFilesAndDirectories_spanish-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_french" selector="RestoreFilesAndDirectories_french-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_english" selector="RestoreFilesAndDirectories_english-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_polish" selector="RestoreFilesAndDirectories_polish-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_portuguese" selector="RestoreFilesAndDirectories_portuguese-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_japanese" selector="RestoreFilesAndDirectories_japanese-selector-3" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_turkish" selector="RestoreFilesAndDirectories_turkish-selector-3" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-7" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-7" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-17" operator="equals" />
    <refine-value idref="PipeDelimitedListOfShares_exShare1share2share3__var" selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-14" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-15" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-3" operator="equals" />
    <refine-value idref="ForceKeyProtection_var" selector="ForceKeyProtection_var-selector-4" operator="equals" />
    <refine-value idref="IPSecExemptions_var" selector="IPSecExemptions_var-selector-6" operator="equals" />
    <refine-value idref="DoNotAllowDriveRedirection_var" selector="DoNotAllowDriveRedirection_var-selector-3" operator="equals" />
    <refine-value idref="DoNotProcessTheLegacyRunList_var" selector="DoNotProcessTheLegacyRunList_var-selector-4" operator="equals" />
    <refine-value idref="DoNotProcessTheRunOnceList_var" selector="DoNotProcessTheRunOnceList_var-selector-4" operator="equals" />
    <refine-value idref="EnumerateAdministratorAccountsOnElevation_var" selector="EnumerateAdministratorAccountsOnElevation_var-selector-3" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_turkish" selector="AllowedToChangeTheTimeZone_turkish-selector-0" operator="equals" />
    <refine-value idref="ChangeTheSystemTime_turkish" selector="ChangeTheSystemTime_turkish-selector-3" operator="equals" />
  </Profile>
  <Profile id="WindowsServer2008R2_DC" abstract="false">
    <title xml:lang="en">Windows Server 2008 R2 - Domain Controller</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2008:r2" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceAccess" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowRedirect-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowRedirect-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-StandardProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProhibitNotifications-StandardProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewall_ProtectAllNetworkConnections-StandardProfile" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_ConfigureAutomaticUpdates" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_DoNotDisplay_InstallUpdatesAndShutDown_OptionInTheShutDownWindowsDialogBox" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_RescheduleAutomaticUpdatesScheduledInstallations" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_AddWorkstationsToDomain" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_DenyLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="DomainController_AllowServerOperatorsToScheduleTasks" selected="true" />
    <select idref="DomainController_RefuseMachineAccountPasswordChanges" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" selected="true" />
    <select idref="SystemSettings_OptionalSubsystems" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_EnableICMPRedirects" selected="true" />
    <select idref="MSS_NoDefaultExempt" selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
    <select idref="MSS_Disable8.3NameCreation" selected="true" />
    <select idref="MSS_PerformRouterDiscovery" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissions" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissionsIPv6" selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection" selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel" selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection" selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" selected="true" />
    <select idref="System-Logon_DoNotProcessTheRunOnceList" selected="true" />
    <select idref="System-Logon_DoNotProcessTheLegacyRunList" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_RequireTrustedPathForCredentialEntry" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" selected="true" />
    <select idref="WindowsComponents-Netmeeting_DisableRemoteDesktopSharing" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-15" operator="equals" />
    <refine-value idref="LogonAuditSubcategory._var" selector="LogonAuditSubcategory._var-selector-3" operator="equals" />
    <refine-value idref="ComputerAccountManagementAuditSubcategory._var" selector="ComputerAccountManagementAuditSubcategory._var-selector-3" operator="equals" />
    <refine-value idref="OtherAccountManagementEventsAuditSubcategory._var" selector="OtherAccountManagementEventsAuditSubcategory._var-selector-4" operator="equals" />
    <refine-value idref="SecurityGroupManagementAuditSubcategory._var" selector="SecurityGroupManagementAuditSubcategory._var-selector-3" operator="equals" />
    <refine-value idref="UserAccountManagementAuditSubcategory._var" selector="UserAccountManagementAuditSubcategory._var-selector-4" operator="equals" />
    <refine-value idref="DirectoryServiceAccessAuditSubcategory._var" selector="DirectoryServiceAccessAuditSubcategory._var-selector-1" operator="equals" />
    <refine-value idref="DirectoryServiceChangesAuditSubcategory._var" selector="DirectoryServiceChangesAuditSubcategory._var-selector-2" operator="equals" />
    <refine-value idref="CredentialValidationAuditSubcategory._var" selector="CredentialValidationAuditSubcategory._var-selector-4" operator="equals" />
    <refine-value idref="ICMPAllowOutboundSourceQuench_var0" selector="ICMPAllowOutboundSourceQuench_var0-selector-6" operator="equals" />
    <refine-value idref="ICMPAllowOutboundPacketTooBig_var0" selector="ICMPAllowOutboundPacketTooBig_var0-selector-6" operator="equals" />
    <refine-value idref="ICMPAllowInboundEchoRequest_var0" selector="ICMPAllowInboundEchoRequest_var0-selector-6" operator="equals" />
    <refine-value idref="DisplayANotification-DomainProfile_var" selector="DisplayANotification-DomainProfile_var-selector-4" operator="equals" />
    <refine-value idref="DisplayANotification-PrivateProfile_var" selector="DisplayANotification-PrivateProfile_var-selector-3" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_polish" selector="AccessThisComputerFromTheNetwork_polish-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_german" selector="AccessThisComputerFromTheNetwork_german-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_japanese" selector="AccessThisComputerFromTheNetwork_japanese-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_italian" selector="AccessThisComputerFromTheNetwork_italian-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_chinese" selector="AccessThisComputerFromTheNetwork_chinese-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_swedish" selector="AccessThisComputerFromTheNetwork_swedish-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_portuguese" selector="AccessThisComputerFromTheNetwork_portuguese-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_english" selector="AccessThisComputerFromTheNetwork_english-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_french" selector="AccessThisComputerFromTheNetwork_french-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_spanish" selector="AccessThisComputerFromTheNetwork_spanish-selector-7" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_turkish" selector="AccessThisComputerFromTheNetwork_turkish-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-6" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-7" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-9" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_spanish" selector="RemoveComputerFromADockingStation_spanish-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_french" selector="RemoveComputerFromADockingStation_french-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_portuguese" selector="RemoveComputerFromADockingStation_portuguese-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_polish" selector="RemoveComputerFromADockingStation_polish-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_swedish" selector="RemoveComputerFromADockingStation_swedish-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_english" selector="RemoveComputerFromADockingStation_english-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_italian" selector="RemoveComputerFromADockingStation_italian-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_japanese" selector="RemoveComputerFromADockingStation_japanese-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_german" selector="RemoveComputerFromADockingStation_german-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_chinese" selector="RemoveComputerFromADockingStation_chinese-selector-7" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_turkish" selector="RemoveComputerFromADockingStation_turkish-selector-7" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-19" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-19" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-9" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-9" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_german" selector="AddWorkstationsToDomain_german-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_swedish" selector="AddWorkstationsToDomain_swedish-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_japanese" selector="AddWorkstationsToDomain_japanese-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_spanish" selector="AddWorkstationsToDomain_spanish-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_english" selector="AddWorkstationsToDomain_english-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_italian" selector="AddWorkstationsToDomain_italian-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_french" selector="AddWorkstationsToDomain_french-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_polish" selector="AddWorkstationsToDomain_polish-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_chinese" selector="AddWorkstationsToDomain_chinese-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_portuguese" selector="AddWorkstationsToDomain_portuguese-selector-1" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_turkish" selector="AddWorkstationsToDomain_turkish-selector-1" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-12" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_polish" selector="DenyLogOnThroughTerminalServices_polish-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_swedish" selector="DenyLogOnThroughTerminalServices_swedish-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_spanish" selector="DenyLogOnThroughTerminalServices_spanish-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_english" selector="DenyLogOnThroughTerminalServices_english-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_chinese" selector="DenyLogOnThroughTerminalServices_chinese-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_japanese" selector="DenyLogOnThroughTerminalServices_japanese-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_german" selector="DenyLogOnThroughTerminalServices_german-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_italian" selector="DenyLogOnThroughTerminalServices_italian-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_portuguese" selector="DenyLogOnThroughTerminalServices_portuguese-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_french" selector="DenyLogOnThroughTerminalServices_french-selector-6" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_turkish" selector="DenyLogOnThroughTerminalServices_turkish-selector-6" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_italian" selector="RestoreFilesAndDirectories_italian-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_german" selector="RestoreFilesAndDirectories_german-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_chinese" selector="RestoreFilesAndDirectories_chinese-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_swedish" selector="RestoreFilesAndDirectories_swedish-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_spanish" selector="RestoreFilesAndDirectories_spanish-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_french" selector="RestoreFilesAndDirectories_french-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_english" selector="RestoreFilesAndDirectories_english-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_polish" selector="RestoreFilesAndDirectories_polish-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_portuguese" selector="RestoreFilesAndDirectories_portuguese-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_japanese" selector="RestoreFilesAndDirectories_japanese-selector-2" operator="equals" />
    <refine-value idref="RestoreFilesAndDirectories_turkish" selector="RestoreFilesAndDirectories_turkish-selector-2" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-8" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-8" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-16" operator="equals" />
    <refine-value idref="PipeDelimitedListOfShares_exShare1share2share3__var" selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-13" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-14" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-4" operator="equals" />
    <refine-value idref="ForceKeyProtection_var" selector="ForceKeyProtection_var-selector-5" operator="equals" />
    <refine-value idref="IPSecExemptions_var" selector="IPSecExemptions_var-selector-5" operator="equals" />
    <refine-value idref="DoNotAllowDriveRedirection_var" selector="DoNotAllowDriveRedirection_var-selector-4" operator="equals" />
    <refine-value idref="DoNotProcessTheRunOnceList_var" selector="DoNotProcessTheRunOnceList_var-selector-3" operator="equals" />
    <refine-value idref="DoNotProcessTheLegacyRunList_var" selector="DoNotProcessTheLegacyRunList_var-selector-3" operator="equals" />
    <refine-value idref="EnumerateAdministratorAccountsOnElevation_var" selector="EnumerateAdministratorAccountsOnElevation_var-selector-4" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_turkish" selector="AllowedToChangeTheTimeZone_turkish-selector-1" operator="equals" />
    <refine-value idref="ChangeTheSystemTime_turkish" selector="ChangeTheSystemTime_turkish-selector-4" operator="equals" />
  </Profile>
  <Profile id="Windows8" abstract="false">
    <title xml:lang="en">Windows 8</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_8" />
    <platform idref="cpe:/o:microsoft:windows_8:-:-:x64" />
    <platform idref="cpe:/o:microsoft:windows_8:-:-:x86" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_IPsecQuickMode" selected="true" />
    <select idref="AuditSubcategory_RPCEvents" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceAccess" selected="true" />
    <select idref="AuditSubcategory_MPSSVCRule-LevelPolicyChange" selected="true" />
    <select idref="AuditSubcategory_DistributionGroupManagement" selected="true" />
    <select idref="AuditSubcategory_ProcessTermination" selected="true" />
    <select idref="AuditSubcategory_FileShare" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_DPAPIActivity" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_OtherLogon_LogoffEvents" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_OtherPrivilegeUseEvents" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthorizationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_ApplicationGroupManagement" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges" selected="true" />
    <select idref="AuditSubcategory_KernelObject" selected="true" />
    <select idref="AuditSubcategory_OtherPolicyChangeEvents" selected="true" />
    <select idref="AuditSubcategory_ApplicationGenerated" selected="true" />
    <select idref="AuditSubcategory_AuditAccountLockout" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="AuditSubcategory_OtherSystemEvents" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPacketDrop" selected="true" />
    <select idref="AuditSubcategory_DetailedDirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_OtherObjectAccessEvents" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformConnection" selected="true" />
    <select idref="AuditSubcategory_NonSensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_CertificationServices" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_HandleManipulation" selected="true" />
    <select idref="AuditSubcategory_IPsecMainMode" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_IPsecExtendedMode" selected="true" />
    <select idref="AuditSubcategory_SAM" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuditOtherAccountLogonEvents" selected="true" />
    <select idref="Accounts_BlockMicrosoftAccounts" selected="true" />
    <select idref="Accounts_AdministratorAccountStatus" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="InteractiveLogon_MachineAccountLockoutThreshold" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MachineInactivityLimit" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="MicrosoftNetworkServer_ServerSPNTargetNameValidationLevel" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM" selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemNULLSessionFallback" selected="true" />
    <select idref="NetworkSecurity_AllowPKU2UAuthenticationRequestsToThisComputerToUseOnlineIdentities" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemCryptography_UseFIPSCompliantAlgorithmsForEncryption_HashingAndSigning" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_OnlyElevateExecutablesThatAreSignedAndValidated" selected="true" />
    <select idref="UserRight_DenyLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_CreateGlobalObjects" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_CreateSymbolicLinks" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_IncreaseAProcessWorkingSet" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsUpdateDeviceDriverSearching" selected="true" />
    <select idref="System-Logon_TurnOnPINSign-in" selected="true" />
    <select idref="System-Logon_DoNotEnumerateConnectedUsersOnDomain-joinedComputers" selected="true" />
    <select idref="System-Logon_EnumerateLocalUsersOnDomain-joinedComputers" selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_OnBattery_" selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_PluggedIn_" selected="true" />
    <select idref="RemoteAssistance_OfferRemoteAssistance" selected="true" />
    <select idref="RemoteAssistance_SolicitedRemoteAssistance" selected="true" />
    <select idref="RemoteProcedureCall_RestrictionsForUnauthenticatedRPCClients" selected="true" />
    <select idref="RemoteProcedureCall_RPCEndpointMapperClient" selected="true" />
    <select idref="GroupPolicy_RegistryPolicyProcessing" selected="true" />
    <select idref="System-DeviceInstallation_SpecifyTheSearchServerForDeviceDriverUpdates" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="FixedDataDrives_ConfigureUseOfSmartCardsOnFixedDataDrives" selected="true" />
    <select idref="FixedDataDrives_AllowAccessToBitLocker-protectedFixedDataDrivesFromEarlierVersionsOfWindows" selected="true" />
    <select idref="OperatingSystemDrives_AllowEnhancedPINsForStartup" selected="true" />
    <select idref="OperatingSystemDrives_AllowSecuredBootForIntegrityValidation" selected="true" />
    <select idref="OperatingSystemDrives_ConfigureMinimumPINLengthForStartup" selected="true" />
    <select idref="RemovableDataDrives_ConfigureUseOfSmartCardsOnRemovableDataDrives" selected="true" />
    <select idref="RemovableDataDrives_DenyWriteAccessToRemovableDrivesNotProtectedByBitLocker" selected="true" />
    <select idref="RemovableDataDrives_AllowAccessToBitLocker-protectedRemovableDataDrivesFromEarlierVersionsOfWindows" selected="true" />
    <select idref="ChooseDriveEncryptionMethodAndCipherStrength_Windows8AndNewer_" selected="true" />
    <select idref="SleepSettings_AllowStandbyStates_S1-S3_WhenSleeping_OnBattery_" selected="true" />
    <select idref="SleepSettings_AllowStandbyStates_S1-S3_WhenSleeping_PluggedIn_" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection" selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel" selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection" selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved" selected="true" />
    <select idref="WinRMClient_AllowBasicAuthentication" selected="true" />
    <select idref="WinRMClient_AllowUnencryptedTraffic" selected="true" />
    <select idref="WinRMClient_DisallowDigestAuthentication" selected="true" />
    <select idref="WinRMService_AllowBasicAuthentication" selected="true" />
    <select idref="WinRMService_AllowUnencryptedTraffic" selected="true" />
    <select idref="WinRMService_DisallowWinRMFromStoringRunAsCredentials" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_ConfigureAutomaticUpdates" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_DoNotDisplay_InstallUpdatesAndShutDown_OptionInTheShutDownWindowsDialogBox" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_RescheduleAutomaticUpdatesScheduledInstallations" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_NoAuto-restartForScheduledAutomaticUpdatesInstallations" selected="true" />
    <select idref="WindowsUpdate_DoNotAdjustDefaultOptionTo_InstallUpdatesAndShutDown_InShutDownWindowsDialogBox" selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffDataExecutionPreventionForExplorer" selected="true" />
    <select idref="WindowsInstaller_AlwaysInstallWithElevatedPrivileges" selected="true" />
    <select idref="FileExplorer_ConfigureWindowsSmartScreen" selected="true" />
    <select idref="WindowsComponents-WindowsRemoteShell_AllowRemoteShellAccess" selected="true" />
    <select idref="EarlyLaunchAntimalware_Boot-StartDriverInitializationPolicy" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-19" operator="equals" />
    <refine-value idref="MinimumPasswordLength_var" selector="MinimumPasswordLength_var-selector-9" operator="equals" />
    <refine-value idref="MaxPwdAgeInSeconds_864001Day__var" selector="MaxPwdAgeInSeconds_864001Day__var-selector-6" operator="equals" />
    <refine-value idref="SensitivePrivilegeUseAuditSubcategory._var" selector="SensitivePrivilegeUseAuditSubcategory._var-selector-6" operator="equals" />
    <refine-value idref="ComputerAccountManagementAuditSubcategory._var" selector="ComputerAccountManagementAuditSubcategory._var-selector-5" operator="equals" />
    <refine-value idref="AllowedToFormatAndEjectRemovableMedia_var" selector="AllowedToFormatAndEjectRemovableMedia_var-selector-5" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-19" operator="equals" />
    <refine-value idref="DomainControllerRequiredToUnlock_var" selector="DomainControllerRequiredToUnlock_var-selector-4" operator="equals" />
    <refine-value idref="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var" selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-6" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-12" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-12" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-17" operator="equals" />
    <refine-value idref="ShutDownWithoutLogon_var" selector="ShutDownWithoutLogon_var-selector-0" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-8" operator="equals" />
    <refine-value idref="UseFIPSCompliantAlgorithms_var" selector="UseFIPSCompliantAlgorithms_var-selector-2" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForAdministrators_var" selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_polish" selector="DenyLogOnThroughTerminalServices_polish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_swedish" selector="DenyLogOnThroughTerminalServices_swedish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_spanish" selector="DenyLogOnThroughTerminalServices_spanish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_english" selector="DenyLogOnThroughTerminalServices_english-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_turkish" selector="DenyLogOnThroughTerminalServices_turkish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_chinese" selector="DenyLogOnThroughTerminalServices_chinese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_japanese" selector="DenyLogOnThroughTerminalServices_japanese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_german" selector="DenyLogOnThroughTerminalServices_german-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_italian" selector="DenyLogOnThroughTerminalServices_italian-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_portuguese" selector="DenyLogOnThroughTerminalServices_portuguese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_french" selector="DenyLogOnThroughTerminalServices_french-selector-10" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_portuguese" selector="AllowedToChangeTheTimeZone_portuguese-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_italian" selector="AllowedToChangeTheTimeZone_italian-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_german" selector="AllowedToChangeTheTimeZone_german-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_chinese" selector="AllowedToChangeTheTimeZone_chinese-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_swedish" selector="AllowedToChangeTheTimeZone_swedish-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_spanish" selector="AllowedToChangeTheTimeZone_spanish-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_turkish" selector="AllowedToChangeTheTimeZone_turkish-selector-4" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_french" selector="AllowedToChangeTheTimeZone_french-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_polish" selector="AllowedToChangeTheTimeZone_polish-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_japanese" selector="AllowedToChangeTheTimeZone_japanese-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_english" selector="AllowedToChangeTheTimeZone_english-selector-0" operator="equals" />
    <refine-value idref="CreateGlobalObjects_german" selector="CreateGlobalObjects_german-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_english" selector="CreateGlobalObjects_english-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_italian" selector="CreateGlobalObjects_italian-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_chinese" selector="CreateGlobalObjects_chinese-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_french" selector="CreateGlobalObjects_french-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_swedish" selector="CreateGlobalObjects_swedish-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_portuguese" selector="CreateGlobalObjects_portuguese-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_polish" selector="CreateGlobalObjects_polish-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_spanish" selector="CreateGlobalObjects_spanish-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_turkish" selector="CreateGlobalObjects_turkish-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_japanese" selector="CreateGlobalObjects_japanese-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-8" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-12" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_spanish" selector="ProfileSystemPerformance_spanish-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_french" selector="ProfileSystemPerformance_french-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_english" selector="ProfileSystemPerformance_english-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_polish" selector="ProfileSystemPerformance_polish-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_chinese" selector="ProfileSystemPerformance_chinese-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_japanese" selector="ProfileSystemPerformance_japanese-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_portuguese" selector="ProfileSystemPerformance_portuguese-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_italian" selector="ProfileSystemPerformance_italian-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_turkish" selector="ProfileSystemPerformance_turkish-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_german" selector="ProfileSystemPerformance_german-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_swedish" selector="ProfileSystemPerformance_swedish-selector-3" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-12" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_italian" selector="AdjustMemoryQuotasForAProcess_italian-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_turkish" selector="AdjustMemoryQuotasForAProcess_turkish-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_french" selector="AdjustMemoryQuotasForAProcess_french-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_swedish" selector="AdjustMemoryQuotasForAProcess_swedish-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_polish" selector="AdjustMemoryQuotasForAProcess_polish-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_portuguese" selector="AdjustMemoryQuotasForAProcess_portuguese-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_spanish" selector="AdjustMemoryQuotasForAProcess_spanish-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_english" selector="AdjustMemoryQuotasForAProcess_english-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_chinese" selector="AdjustMemoryQuotasForAProcess_chinese-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_japanese" selector="AdjustMemoryQuotasForAProcess_japanese-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_german" selector="AdjustMemoryQuotasForAProcess_german-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_swedish" selector="DenyLogOnAsABatchJob_swedish-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_german" selector="DenyLogOnAsABatchJob_german-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_spanish" selector="DenyLogOnAsABatchJob_spanish-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_english" selector="DenyLogOnAsABatchJob_english-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_turkish" selector="DenyLogOnAsABatchJob_turkish-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_french" selector="DenyLogOnAsABatchJob_french-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_japanese" selector="DenyLogOnAsABatchJob_japanese-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_chinese" selector="DenyLogOnAsABatchJob_chinese-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_polish" selector="DenyLogOnAsABatchJob_polish-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_portuguese" selector="DenyLogOnAsABatchJob_portuguese-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_italian" selector="DenyLogOnAsABatchJob_italian-selector-0" operator="equals" />
    <refine-value idref="BypassTraverseChecking_english" selector="BypassTraverseChecking_english-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_turkish" selector="BypassTraverseChecking_turkish-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_german" selector="BypassTraverseChecking_german-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_french" selector="BypassTraverseChecking_french-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_portuguese" selector="BypassTraverseChecking_portuguese-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_italian" selector="BypassTraverseChecking_italian-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_polish" selector="BypassTraverseChecking_polish-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_japanese" selector="BypassTraverseChecking_japanese-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_chinese" selector="BypassTraverseChecking_chinese-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_swedish" selector="BypassTraverseChecking_swedish-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_spanish" selector="BypassTraverseChecking_spanish-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-16" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-22" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-DomainProfile_var" selector="ApplyLocalFirewallRules-DomainProfile_var-selector-6" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-DomainProfile_var" selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-6" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PrivateProfile_var" selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-6" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PrivateProfile_var" selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-6" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PublicProfile_var" selector="ApplyLocalFirewallRules-PublicProfile_var-selector" operator="equals" />
    <refine-value idref="RestrictionsForUnauthenticatedRPCClients_var0" selector="RestrictionsForUnauthenticatedRPCClients_var0-selector-8" operator="equals" />
    <refine-value idref="RPCEndpointMapperClientAuthentication_var0" selector="RPCEndpointMapperClientAuthentication_var0-selector" operator="equals" />
    <refine-value idref="RegistryPolicyProcessing_var" selector="RegistryPolicyProcessing_var-selector" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var-selector" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheApplicationLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheApplicationLog_var-selector" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheSystemLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheSystemLog_var-selector" operator="equals" />
    <refine-value idref="AllowRemoteShellAccess_var" selector="AllowRemoteShellAccess_var-selector" operator="equals" />
  </Profile>
  <Profile id="WindowsServer2012-MS" abstract="false">
    <title xml:lang="en">Windows Server 2012 - MS</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2012:-" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="AuditSubcategory_AuditOtherAccountLogonEvents" selected="true" />
    <select idref="AuditSubcategory_ApplicationGroupManagement" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DistributionGroupManagement" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DPAPIActivity" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_ProcessTermination" selected="true" />
    <select idref="AuditSubcategory_RPCEvents" selected="true" />
    <select idref="AuditSubcategory_AuditAccountLockout" selected="true" />
    <select idref="AuditSubcategory_IPsecExtendedMode" selected="true" />
    <select idref="AuditSubcategory_IPsecMainMode" selected="true" />
    <select idref="AuditSubcategory_IPsecQuickMode" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_OtherLogon_LogoffEvents" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_ApplicationGenerated" selected="true" />
    <select idref="AuditSubcategory_CertificationServices" selected="true" />
    <select idref="AuditSubcategory_FileShare" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformConnection" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPacketDrop" selected="true" />
    <select idref="AuditSubcategory_HandleManipulation" selected="true" />
    <select idref="AuditSubcategory_KernelObject" selected="true" />
    <select idref="AuditSubcategory_OtherObjectAccessEvents" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SAM" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthorizationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPolicyChange" selected="true" />
    <select idref="AuditSubcategory_MPSSVCRule-LevelPolicyChange" selected="true" />
    <select idref="AuditSubcategory_OtherPolicyChangeEvents" selected="true" />
    <select idref="AuditSubcategory_NonSensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_OtherPrivilegeUseEvents" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_OtherSystemEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MachineAccountLockoutThreshold" selected="true" />
    <select idref="InteractiveLogon_MachineInactivityLimit" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemCryptography_UseFIPSCompliantAlgorithmsForEncryption_HashingAndSigning" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemSettings_UseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateExecutablesThatAreSignedAndValidated" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreateGlobalObjects" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_CreateSymbolicLinks" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob" selected="true" />
    <select idref="UserRight_DenyLogOnAsAService" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_IncreaseAProcessWorkingSet" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsInstaller_AlwaysInstallWithElevatedPrivileges" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-20" operator="equals" />
    <refine-value idref="MinimumPasswordLength_var" selector="MinimumPasswordLength_var-selector-10" operator="equals" />
    <refine-value idref="MaxPwdAgeInSeconds_864001Day__var" selector="MaxPwdAgeInSeconds_864001Day__var-selector-7" operator="equals" />
    <refine-value idref="ComputerAccountManagementAuditSubcategory._var" selector="ComputerAccountManagementAuditSubcategory._var-selector-6" operator="equals" />
    <refine-value idref="SensitivePrivilegeUseAuditSubcategory._var" selector="SensitivePrivilegeUseAuditSubcategory._var-selector-7" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-20" operator="equals" />
    <refine-value idref="DomainControllerRequiredToUnlock_var" selector="DomainControllerRequiredToUnlock_var-selector-5" operator="equals" />
    <refine-value idref="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var" selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-7" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-18" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-13" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-13" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-9" operator="equals" />
    <refine-value idref="UseFIPSCompliantAlgorithms_var" selector="UseFIPSCompliantAlgorithms_var-selector-3" operator="equals" />
    <refine-value idref="UseCertificateRules_var" selector="UseCertificateRules_var-selector-5" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForAdministrators_var" selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-5" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForStandardUsers_var" selector="BehaviorOfTheElevationPromptForStandardUsers_var-selector-0" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_chinese" selector="AccessThisComputerFromTheNetwork_chinese-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_italian" selector="AccessThisComputerFromTheNetwork_italian-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_german" selector="AccessThisComputerFromTheNetwork_german-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_swedish" selector="AccessThisComputerFromTheNetwork_swedish-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_french" selector="AccessThisComputerFromTheNetwork_french-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_spanish" selector="AccessThisComputerFromTheNetwork_spanish-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_japanese" selector="AccessThisComputerFromTheNetwork_japanese-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_english" selector="AccessThisComputerFromTheNetwork_english-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_turkish" selector="AccessThisComputerFromTheNetwork_turkish-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_polish" selector="AccessThisComputerFromTheNetwork_polish-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_portuguese" selector="AccessThisComputerFromTheNetwork_portuguese-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_italian" selector="AdjustMemoryQuotasForAProcess_italian-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_turkish" selector="AdjustMemoryQuotasForAProcess_turkish-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_french" selector="AdjustMemoryQuotasForAProcess_french-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_swedish" selector="AdjustMemoryQuotasForAProcess_swedish-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_polish" selector="AdjustMemoryQuotasForAProcess_polish-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_spanish" selector="AdjustMemoryQuotasForAProcess_spanish-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_portuguese" selector="AdjustMemoryQuotasForAProcess_portuguese-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_english" selector="AdjustMemoryQuotasForAProcess_english-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_chinese" selector="AdjustMemoryQuotasForAProcess_chinese-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_japanese" selector="AdjustMemoryQuotasForAProcess_japanese-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_german" selector="AdjustMemoryQuotasForAProcess_german-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-15" operator="equals" />
    <refine-value idref="BypassTraverseChecking_english" selector="BypassTraverseChecking_english-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_turkish" selector="BypassTraverseChecking_turkish-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_german" selector="BypassTraverseChecking_german-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_french" selector="BypassTraverseChecking_french-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_portuguese" selector="BypassTraverseChecking_portuguese-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_italian" selector="BypassTraverseChecking_italian-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_polish" selector="BypassTraverseChecking_polish-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_japanese" selector="BypassTraverseChecking_japanese-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_chinese" selector="BypassTraverseChecking_chinese-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_swedish" selector="BypassTraverseChecking_swedish-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_spanish" selector="BypassTraverseChecking_spanish-selector-10" operator="equals" />
    <refine-value idref="CreateGlobalObjects_german" selector="CreateGlobalObjects_german-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_english" selector="CreateGlobalObjects_english-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_italian" selector="CreateGlobalObjects_italian-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_chinese" selector="CreateGlobalObjects_chinese-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_french" selector="CreateGlobalObjects_french-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_swedish" selector="CreateGlobalObjects_swedish-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_portuguese" selector="CreateGlobalObjects_portuguese-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_polish" selector="CreateGlobalObjects_polish-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_spanish" selector="CreateGlobalObjects_spanish-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_turkish" selector="CreateGlobalObjects_turkish-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_japanese" selector="CreateGlobalObjects_japanese-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_swedish" selector="DenyLogOnAsABatchJob_swedish-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_german" selector="DenyLogOnAsABatchJob_german-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_spanish" selector="DenyLogOnAsABatchJob_spanish-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_english" selector="DenyLogOnAsABatchJob_english-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_turkish" selector="DenyLogOnAsABatchJob_turkish-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_french" selector="DenyLogOnAsABatchJob_french-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_japanese" selector="DenyLogOnAsABatchJob_japanese-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_chinese" selector="DenyLogOnAsABatchJob_chinese-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_polish" selector="DenyLogOnAsABatchJob_polish-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_portuguese" selector="DenyLogOnAsABatchJob_portuguese-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_italian" selector="DenyLogOnAsABatchJob_italian-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-13" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-17" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-13" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_spanish" selector="LogOnAsABatchJob_spanish-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_english" selector="LogOnAsABatchJob_english-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_portuguese" selector="LogOnAsABatchJob_portuguese-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_german" selector="LogOnAsABatchJob_german-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_chinese" selector="LogOnAsABatchJob_chinese-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_french" selector="LogOnAsABatchJob_french-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_polish" selector="LogOnAsABatchJob_polish-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_italian" selector="LogOnAsABatchJob_italian-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_turkish" selector="LogOnAsABatchJob_turkish-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_japanese" selector="LogOnAsABatchJob_japanese-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_swedish" selector="LogOnAsABatchJob_swedish-selector-2" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_spanish" selector="ProfileSystemPerformance_spanish-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_french" selector="ProfileSystemPerformance_french-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_english" selector="ProfileSystemPerformance_english-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_polish" selector="ProfileSystemPerformance_polish-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_chinese" selector="ProfileSystemPerformance_chinese-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_japanese" selector="ProfileSystemPerformance_japanese-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_portuguese" selector="ProfileSystemPerformance_portuguese-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_italian" selector="ProfileSystemPerformance_italian-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_turkish" selector="ProfileSystemPerformance_turkish-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_german" selector="ProfileSystemPerformance_german-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_swedish" selector="ProfileSystemPerformance_swedish-selector-4" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_spanish" selector="RemoveComputerFromADockingStation_spanish-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_french" selector="RemoveComputerFromADockingStation_french-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_turkish" selector="RemoveComputerFromADockingStation_turkish-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_portuguese" selector="RemoveComputerFromADockingStation_portuguese-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_polish" selector="RemoveComputerFromADockingStation_polish-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_swedish" selector="RemoveComputerFromADockingStation_swedish-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_english" selector="RemoveComputerFromADockingStation_english-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_italian" selector="RemoveComputerFromADockingStation_italian-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_japanese" selector="RemoveComputerFromADockingStation_japanese-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_german" selector="RemoveComputerFromADockingStation_german-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_chinese" selector="RemoveComputerFromADockingStation_chinese-selector-8" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-23" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-10" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PublicProfile_var" selector="ApplyLocalConnectionSecurityRules-PublicProfile_var-selector" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PublicProfile_var" selector="ApplyLocalFirewallRules-PublicProfile_var-selector-1" operator="equals" />
    <refine-value idref="DisplayANotification-PublicProfile_var" selector="DisplayANotification-PublicProfile_var-selector-0" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PrivateProfile_var" selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-7" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PrivateProfile_var" selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-7" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-DomainProfile_var" selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-7" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-DomainProfile_var" selector="ApplyLocalFirewallRules-DomainProfile_var-selector-7" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var-selector-0" operator="equals" />
      </Profile>
  <Profile id="WindowsServer2012-DC" abstract="false">
    <title xml:lang="en">Windows Server 2012 - DC</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2012:-" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="AuditSubcategory_AuditOtherAccountLogonEvents" selected="true" />
    <select idref="AuditSubcategory_ApplicationGroupManagement" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DistributionGroupManagement" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DPAPIActivity" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_ProcessTermination" selected="true" />
    <select idref="AuditSubcategory_RPCEvents" selected="true" />
    <select idref="AuditSubcategory_DetailedDirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceAccess" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_AuditAccountLockout" selected="true" />
    <select idref="AuditSubcategory_IPsecExtendedMode" selected="true" />
    <select idref="AuditSubcategory_IPsecMainMode" selected="true" />
    <select idref="AuditSubcategory_IPsecQuickMode" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_OtherLogon_LogoffEvents" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_ApplicationGenerated" selected="true" />
    <select idref="AuditSubcategory_CertificationServices" selected="true" />
    <select idref="AuditSubcategory_FileShare" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformConnection" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPacketDrop" selected="true" />
    <select idref="AuditSubcategory_HandleManipulation" selected="true" />
    <select idref="AuditSubcategory_KernelObject" selected="true" />
    <select idref="AuditSubcategory_OtherObjectAccessEvents" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SAM" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthorizationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPolicyChange" selected="true" />
    <select idref="AuditSubcategory_MPSSVCRule-LevelPolicyChange" selected="true" />
    <select idref="AuditSubcategory_OtherPolicyChangeEvents" selected="true" />
    <select idref="AuditSubcategory_NonSensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_OtherPrivilegeUseEvents" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_OtherSystemEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="DomainController_AllowServerOperatorsToScheduleTasks" selected="true" />
    <select idref="DomainController_LDAPServerSigningRequirements" selected="true" />
    <select idref="DomainController_RefuseMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MachineAccountLockoutThreshold" selected="true" />
    <select idref="InteractiveLogon_MachineInactivityLimit" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM" selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemNULLSessionFallback" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemCryptography_UseFIPSCompliantAlgorithmsForEncryption_HashingAndSigning" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemSettings_UseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateExecutablesThatAreSignedAndValidated" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_AddWorkstationsToDomain" selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreateGlobalObjects" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_CreateSymbolicLinks" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob" selected="true" />
    <select idref="UserRight_DenyLogOnAsAService" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_IncreaseAProcessWorkingSet" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsInstaller_AlwaysInstallWithElevatedPrivileges" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-21" operator="equals" />
    <refine-value idref="MaxPwdAgeInSeconds_864001Day__var" selector="MaxPwdAgeInSeconds_864001Day__var-selector-8" operator="equals" />
    <refine-value idref="MinimumPasswordLength_var" selector="MinimumPasswordLength_var-selector-11" operator="equals" />
    <refine-value idref="DirectoryServiceAccessAuditSubcategory._var" selector="DirectoryServiceAccessAuditSubcategory._var-selector-2" operator="equals" />
    <refine-value idref="DirectoryServiceChangesAuditSubcategory._var" selector="DirectoryServiceChangesAuditSubcategory._var-selector-3" operator="equals" />
    <refine-value idref="SensitivePrivilegeUseAuditSubcategory._var" selector="SensitivePrivilegeUseAuditSubcategory._var-selector-8" operator="equals" />
    <refine-value idref="DomainControllerRequiredToUnlock_var" selector="DomainControllerRequiredToUnlock_var-selector-6" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-21" operator="equals" />
    <refine-value idref="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var" selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-8" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-19" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-14" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-14" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-10" operator="equals" />
    <refine-value idref="UseFIPSCompliantAlgorithms_var" selector="UseFIPSCompliantAlgorithms_var-selector-4" operator="equals" />
    <refine-value idref="UseCertificateRules_var" selector="UseCertificateRules_var-selector-6" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForAdministrators_var" selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-6" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForStandardUsers_var" selector="BehaviorOfTheElevationPromptForStandardUsers_var-selector-1" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_chinese" selector="AccessThisComputerFromTheNetwork_chinese-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_italian" selector="AccessThisComputerFromTheNetwork_italian-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_german" selector="AccessThisComputerFromTheNetwork_german-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_swedish" selector="AccessThisComputerFromTheNetwork_swedish-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_french" selector="AccessThisComputerFromTheNetwork_french-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_spanish" selector="AccessThisComputerFromTheNetwork_spanish-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_japanese" selector="AccessThisComputerFromTheNetwork_japanese-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_english" selector="AccessThisComputerFromTheNetwork_english-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_turkish" selector="AccessThisComputerFromTheNetwork_turkish-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_polish" selector="AccessThisComputerFromTheNetwork_polish-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_portuguese" selector="AccessThisComputerFromTheNetwork_portuguese-selector-11" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_german" selector="AddWorkstationsToDomain_german-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_swedish" selector="AddWorkstationsToDomain_swedish-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_japanese" selector="AddWorkstationsToDomain_japanese-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_spanish" selector="AddWorkstationsToDomain_spanish-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_english" selector="AddWorkstationsToDomain_english-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_italian" selector="AddWorkstationsToDomain_italian-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_french" selector="AddWorkstationsToDomain_french-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_chinese" selector="AddWorkstationsToDomain_chinese-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_polish" selector="AddWorkstationsToDomain_polish-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_portuguese" selector="AddWorkstationsToDomain_portuguese-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_turkish" selector="AddWorkstationsToDomain_turkish-selector-2" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_italian" selector="AdjustMemoryQuotasForAProcess_italian-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_turkish" selector="AdjustMemoryQuotasForAProcess_turkish-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_french" selector="AdjustMemoryQuotasForAProcess_french-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_swedish" selector="AdjustMemoryQuotasForAProcess_swedish-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_polish" selector="AdjustMemoryQuotasForAProcess_polish-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_spanish" selector="AdjustMemoryQuotasForAProcess_spanish-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_portuguese" selector="AdjustMemoryQuotasForAProcess_portuguese-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_english" selector="AdjustMemoryQuotasForAProcess_english-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_chinese" selector="AdjustMemoryQuotasForAProcess_chinese-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_japanese" selector="AdjustMemoryQuotasForAProcess_japanese-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_german" selector="AdjustMemoryQuotasForAProcess_german-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-16" operator="equals" />
    <refine-value idref="BypassTraverseChecking_english" selector="BypassTraverseChecking_english-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_turkish" selector="BypassTraverseChecking_turkish-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_german" selector="BypassTraverseChecking_german-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_french" selector="BypassTraverseChecking_french-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_portuguese" selector="BypassTraverseChecking_portuguese-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_italian" selector="BypassTraverseChecking_italian-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_polish" selector="BypassTraverseChecking_polish-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_chinese" selector="BypassTraverseChecking_chinese-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_japanese" selector="BypassTraverseChecking_japanese-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_swedish" selector="BypassTraverseChecking_swedish-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_spanish" selector="BypassTraverseChecking_spanish-selector-11" operator="equals" />
    <refine-value idref="CreateGlobalObjects_german" selector="CreateGlobalObjects_german-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_english" selector="CreateGlobalObjects_english-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_italian" selector="CreateGlobalObjects_italian-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_chinese" selector="CreateGlobalObjects_chinese-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_french" selector="CreateGlobalObjects_french-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_swedish" selector="CreateGlobalObjects_swedish-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_portuguese" selector="CreateGlobalObjects_portuguese-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_polish" selector="CreateGlobalObjects_polish-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_spanish" selector="CreateGlobalObjects_spanish-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_turkish" selector="CreateGlobalObjects_turkish-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_japanese" selector="CreateGlobalObjects_japanese-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_german" selector="DenyLogOnAsABatchJob_german-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_swedish" selector="DenyLogOnAsABatchJob_swedish-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_spanish" selector="DenyLogOnAsABatchJob_spanish-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_english" selector="DenyLogOnAsABatchJob_english-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_turkish" selector="DenyLogOnAsABatchJob_turkish-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_french" selector="DenyLogOnAsABatchJob_french-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_japanese" selector="DenyLogOnAsABatchJob_japanese-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_chinese" selector="DenyLogOnAsABatchJob_chinese-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_polish" selector="DenyLogOnAsABatchJob_polish-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_portuguese" selector="DenyLogOnAsABatchJob_portuguese-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_italian" selector="DenyLogOnAsABatchJob_italian-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-14" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_swedish" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_swedish-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_japanese" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_japanese-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_german" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_german-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_spanish" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_spanish-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_turkish" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_turkish-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_portuguese" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_portuguese-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_french" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_french-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_polish" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_polish-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_english" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_english-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_italian" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_italian-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_chinese" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_chinese-selector" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-18" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-14" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_spanish" selector="LogOnAsABatchJob_spanish-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_english" selector="LogOnAsABatchJob_english-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_portuguese" selector="LogOnAsABatchJob_portuguese-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_german" selector="LogOnAsABatchJob_german-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_chinese" selector="LogOnAsABatchJob_chinese-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_french" selector="LogOnAsABatchJob_french-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_polish" selector="LogOnAsABatchJob_polish-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_italian" selector="LogOnAsABatchJob_italian-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_turkish" selector="LogOnAsABatchJob_turkish-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_japanese" selector="LogOnAsABatchJob_japanese-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_swedish" selector="LogOnAsABatchJob_swedish-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_spanish" selector="ProfileSystemPerformance_spanish-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_french" selector="ProfileSystemPerformance_french-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_english" selector="ProfileSystemPerformance_english-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_polish" selector="ProfileSystemPerformance_polish-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_chinese" selector="ProfileSystemPerformance_chinese-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_japanese" selector="ProfileSystemPerformance_japanese-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_portuguese" selector="ProfileSystemPerformance_portuguese-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_italian" selector="ProfileSystemPerformance_italian-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_turkish" selector="ProfileSystemPerformance_turkish-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_german" selector="ProfileSystemPerformance_german-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_swedish" selector="ProfileSystemPerformance_swedish-selector-5" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_spanish" selector="RemoveComputerFromADockingStation_spanish-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_french" selector="RemoveComputerFromADockingStation_french-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_turkish" selector="RemoveComputerFromADockingStation_turkish-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_portuguese" selector="RemoveComputerFromADockingStation_portuguese-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_polish" selector="RemoveComputerFromADockingStation_polish-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_swedish" selector="RemoveComputerFromADockingStation_swedish-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_english" selector="RemoveComputerFromADockingStation_english-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_italian" selector="RemoveComputerFromADockingStation_italian-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_japanese" selector="RemoveComputerFromADockingStation_japanese-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_german" selector="RemoveComputerFromADockingStation_german-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_chinese" selector="RemoveComputerFromADockingStation_chinese-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-24" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-11" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PublicProfile_var" selector="ApplyLocalConnectionSecurityRules-PublicProfile_var-selector-0" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PublicProfile_var" selector="ApplyLocalFirewallRules-PublicProfile_var-selector-0" operator="equals" />
    <refine-value idref="DisplayANotification-PublicProfile_var" selector="DisplayANotification-PublicProfile_var-selector-1" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PrivateProfile_var" selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-8" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PrivateProfile_var" selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-8" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-DomainProfile_var" selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-8" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-DomainProfile_var" selector="ApplyLocalFirewallRules-DomainProfile_var-selector-8" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var-selector-1" operator="equals" />
  </Profile>
  <Profile id="Windows8.1" abstract="false">
    <title xml:lang="en">Windows 8.1</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_8.1::x64" />
    <platform idref="cpe:/o:microsoft:windows_8.1::x86" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_IPsecQuickMode" selected="true" />
    <select idref="AuditSubcategory_RPCEvents" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceAccess" selected="true" />
    <select idref="AuditSubcategory_MPSSVCRule-LevelPolicyChange" selected="true" />
    <select idref="AuditSubcategory_DistributionGroupManagement" selected="true" />
    <select idref="AuditSubcategory_ProcessTermination" selected="true" />
    <select idref="AuditSubcategory_FileShare" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_DPAPIActivity" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_OtherLogon_LogoffEvents" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_OtherPrivilegeUseEvents" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthorizationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_ApplicationGroupManagement" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges" selected="true" />
    <select idref="AuditSubcategory_KernelObject" selected="true" />
    <select idref="AuditSubcategory_OtherPolicyChangeEvents" selected="true" />
    <select idref="AuditSubcategory_ApplicationGenerated" selected="true" />
    <select idref="AuditSubcategory_AuditAccountLockout" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="AuditSubcategory_OtherSystemEvents" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPacketDrop" selected="true" />
    <select idref="AuditSubcategory_DetailedDirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_OtherObjectAccessEvents" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformConnection" selected="true" />
    <select idref="AuditSubcategory_NonSensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_CertificationServices" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_HandleManipulation" selected="true" />
    <select idref="AuditSubcategory_IPsecMainMode" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_IPsecExtendedMode" selected="true" />
    <select idref="AuditSubcategory_SAM" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuditOtherAccountLogonEvents" selected="true" />
    <select idref="Accounts_BlockMicrosoftAccounts" selected="true" />
    <select idref="Accounts_AdministratorAccountStatus" selected="true" />
    <select idref="Accounts_GuestAccountStatus" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="InteractiveLogon_MachineAccountLockoutThreshold" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MachineInactivityLimit" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="MicrosoftNetworkServer_ServerSPNTargetNameValidationLevel" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM" selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemNULLSessionFallback" selected="true" />
    <select idref="NetworkSecurity_AllowPKU2UAuthenticationRequestsToThisComputerToUseOnlineIdentities" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemCryptography_UseFIPSCompliantAlgorithmsForEncryption_HashingAndSigning" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_OnlyElevateExecutablesThatAreSignedAndValidated" selected="true" />
    <select idref="UserRight_DenyLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_CreateGlobalObjects" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="UserRight_CreateSymbolicLinks" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_IncreaseAProcessWorkingSet" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsUpdateDeviceDriverSearching" selected="true" />
    <select idref="System-Logon_TurnOnPINSign-in" selected="true" />
    <select idref="System-Logon_DoNotEnumerateConnectedUsersOnDomain-joinedComputers" selected="true" />
    <select idref="System-Logon_EnumerateLocalUsersOnDomain-joinedComputers" selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_OnBattery_" selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_PluggedIn_" selected="true" />
    <select idref="RemoteAssistance_OfferRemoteAssistance" selected="true" />
    <select idref="RemoteAssistance_SolicitedRemoteAssistance" selected="true" />
    <select idref="RemoteProcedureCall_RestrictionsForUnauthenticatedRPCClients" selected="true" />
    <select idref="RemoteProcedureCall_RPCEndpointMapperClient" selected="true" />
    <select idref="GroupPolicy_RegistryPolicyProcessing" selected="true" />
    <select idref="System-DeviceInstallation_SpecifyTheSearchServerForDeviceDriverUpdates" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="FixedDataDrives_ConfigureUseOfSmartCardsOnFixedDataDrives" selected="true" />
    <select idref="FixedDataDrives_AllowAccessToBitLocker-protectedFixedDataDrivesFromEarlierVersionsOfWindows" selected="true" />
    <select idref="OperatingSystemDrives_AllowEnhancedPINsForStartup" selected="true" />
    <select idref="OperatingSystemDrives_AllowSecuredBootForIntegrityValidation" selected="true" />
    <select idref="OperatingSystemDrives_ConfigureMinimumPINLengthForStartup" selected="true" />
    <select idref="RemovableDataDrives_ConfigureUseOfSmartCardsOnRemovableDataDrives" selected="true" />
    <select idref="RemovableDataDrives_DenyWriteAccessToRemovableDrivesNotProtectedByBitLocker" selected="true" />
    <select idref="RemovableDataDrives_AllowAccessToBitLocker-protectedRemovableDataDrivesFromEarlierVersionsOfWindows" selected="true" />
    <select idref="ChooseDriveEncryptionMethodAndCipherStrength_Windows8AndNewer_" selected="true" />
    <select idref="SleepSettings_AllowStandbyStates_S1-S3_WhenSleeping_OnBattery_" selected="true" />
    <select idref="SleepSettings_AllowStandbyStates_S1-S3_WhenSleeping_PluggedIn_" selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection" selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel" selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection" selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved" selected="true" />
    <select idref="WinRMClient_AllowBasicAuthentication" selected="true" />
    <select idref="WinRMClient_AllowUnencryptedTraffic" selected="true" />
    <select idref="WinRMClient_DisallowDigestAuthentication" selected="true" />
    <select idref="WinRMService_AllowBasicAuthentication" selected="true" />
    <select idref="WinRMService_AllowUnencryptedTraffic" selected="true" />
    <select idref="WinRMService_DisallowWinRMFromStoringRunAsCredentials" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_ConfigureAutomaticUpdates" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_DoNotDisplay_InstallUpdatesAndShutDown_OptionInTheShutDownWindowsDialogBox" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_RescheduleAutomaticUpdatesScheduledInstallations" selected="true" />
    <select idref="WindowsComponents-WindowsUpdate_NoAuto-restartForScheduledAutomaticUpdatesInstallations" selected="true" />
    <select idref="WindowsUpdate_DoNotAdjustDefaultOptionTo_InstallUpdatesAndShutDown_InShutDownWindowsDialogBox" selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffDataExecutionPreventionForExplorer" selected="true" />
    <select idref="WindowsInstaller_AlwaysInstallWithElevatedPrivileges" selected="true" />
    <select idref="FileExplorer_ConfigureWindowsSmartScreen" selected="true" />
    <select idref="WindowsComponents-WindowsRemoteShell_AllowRemoteShellAccess" selected="true" />
    <select idref="EarlyLaunchAntimalware_Boot-StartDriverInitializationPolicy" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <select idref="WindowsComponents-InternetExplorerAllowMicrosoftServicesToProvideEnhancedSuggestionsAsTheUserTypesInTheAddressBar" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageAllowInternetExplorerToUseTheSPDY3NetworkProtocol" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOffLoadingWebsitesAndContentInTheBackgroundToOptimizePerformance" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOffSendingUTF-8QueryStringsForURLs" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOn64-bitTabProcessesWhenRunningInEnhancedProtectedModeOn64-bitVersionsOfWindows" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-InternetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-IntranetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-LocalMachineZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownInternetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownIntranetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownLocalMachineZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownRestrictedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownTrustedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-RestrictedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-TrustedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetSettings-AdvancedSettings-BrowsingTurnOffPhoneNumberDetection" selected="true" />
    <select idref="WindowsComponents-RemoteDesktopServices-RemoteDesktopSessionHost-RemoteSessionEnvironmentUseAdvancedRemoteFXGraphicsForRemoteApp" selected="true" />
    <select idref="WindowsComponents-SkyDrivePreventSkyDriveFilesFromSyncingOverMeteredConnections" selected="true" />
    <select idref="WindowsComponents-SkyDrivePreventTheUsageOfSkyDriveForFileStorage" selected="true" />
    <select idref="WindowsComponents-SkyDriveSaveDocumentsAndPicturesToTheLocalPCByDefault" selected="true" />
    <select idref="WindowsComponents-StoreTurnOffAutomaticDownloadAndInstallOfUpdates" selected="true" />
    <select idref="WindowsComponents-StoreTurnOffAutomaticDownloadOfUpdatesOnWin8Machines" selected="true" />
    <select idref="WindowsComponents-StoreTurnOffTheOfferToUpdateToTheLatestVersionOfWindows" selected="true" />
    <select idref="WindowsComponents-SyncYourSettingsDoNotSyncApps" selected="true" />
    <select idref="WindowsComponents-SyncYourSettingsDoNotSyncStartSettings" selected="true" />
    <select idref="WindowsComponents-WorkFoldersForceAutomaticSetupForAllUsers" selected="true" />
    <select idref="WindowsComponents-WindowsUpdateAlwaysAutomaticallyRestartAtTheScheduledTime" selected="true" />
    <select idref="WindowsComponents-WindowsUpdateDoNotConnectToAnyWindowsUpdateInternetLocations" selected="true" />
    <select idref="WindowsComponents-WorkplaceJoinAutomaticallyWorkplaceJoinClientComputers" selected="true" />
    <select idref="WindowsComponents-WindowsErrorReportingAutomaticallySendMemoryDumpsForOS-generatedErrorReports" selected="true" />
    <select idref="WindowsComponents-WindowsLogonOptionsSign-inLastInteractiveUserAutomaticallyAfterASystem-initiatedRestart" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowLocallyAttachedStorageAsBackupTarget" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowNetworkAsBackupTarget" selected="true" />
    <select idref="WindowsComponents-Backup-ServerAllowOnlySystemBackup" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowRun-onceBackups" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowOpticalMediaAsBackupTarget" selected="true" />
    <select idref="ControlPanel-PersonalizationForceASpecificStartBackground" selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenCamera" selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenSlideShow" selected="true" />
    <select idref="System-AuditProcessCreationIncludeCommandLineInProcessCreationEvents" selected="true" />
    <select idref="System-CredentialsDelegationRestrictDelegationOfCredentialsToRemoteServers" selected="true" />
    <select idref="System-KDCRequestCompoundAuthentication" selected="true" />
    <select idref="System-KerberosAlwaysSendCompoundAuthenticationFirst" selected="true" />
    <select idref="System-LogonAllowUsersToSelectWhenAPasswordIsRequiredWhenResumingFromConnectedStandby" selected="true" />
    <select idref="System-LogonDoNotDisplayNetworkSelectionUI" selected="true" />
    <select idref="System-NetLogon-DCLocatorDNSRecordsUseDNSNameResolutionWhenASingle-labelDomainNameIsUsedByAppendingDifferentRegisteredDNSSuffixesIfTheAllowSingleLabelDnsDomainSettingIsNotEnabled" selected="true" />
    <select idref="System-GroupPolicyConfigureGroupPolicySlowLinkDetection_ConnectionSpeed_" selected="true" />
    <select idref="System-GroupPolicyConfigureLogonScriptDelay" selected="true" />
    <select idref="System-GroupPolicyEnableGroupPolicyCachingForServers_SlowLinkValue_" selected="true" />
    <select idref="System-GroupPolicyEnableGroupPolicyCachingForServers_TimeoutValue_" selected="true" />
    <select idref="System-GroupPolicyConfigureGroupPolicySlowLinkDetection_WWANConnection_" selected="true" />
    <select idref="System-UserProfilesTurnOffTheAdvertisingID" selected="true" />
    <select idref="Network-HotspotAuthenticationEnableHotspotAuthentication" selected="true" />
    <select idref="WindowsComponents-AppPackageDeploymentAllowDevelopmentOfWindowsStoreAppsWithoutInstallingADeveloperLicense" selected="true" />
    <select idref="WindowsComponents-AppRuntimeAllowMicrosoftAccountsToBeOptional" selected="true" />
    <select idref="WindowsComponents-EdgeUIDisableHelpTips" selected="true" />
    <select idref="WindowsComponents-SearchDoNotAllowLocationsOnRemovableDrivesToBeAddedToLibraries" selected="true" />
    <select idref="WindowsComponents-SearchDontSearchTheWebOrDisplayWebResultsInSearch" selected="true" />
    <select idref="WindowsComponents-SearchDontSearchTheWebOrDisplayWebResultsInSearchOverMeteredConnections" selected="true" />
    <select idref="WindowsComponents-SearchSetTheSafeSearchSettingForSearch" selected="true" />
    <select idref="WindowsComponents-SearchSetWhatInformationIsSharedInSearch" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-19" operator="equals" />
    <refine-value idref="MinimumPasswordLength_var" selector="MinimumPasswordLength_var-selector-9" operator="equals" />
    <refine-value idref="MaxPwdAgeInSeconds_864001Day__var" selector="MaxPwdAgeInSeconds_864001Day__var-selector-6" operator="equals" />
    <refine-value idref="SensitivePrivilegeUseAuditSubcategory._var" selector="SensitivePrivilegeUseAuditSubcategory._var-selector-6" operator="equals" />
    <refine-value idref="ComputerAccountManagementAuditSubcategory._var" selector="ComputerAccountManagementAuditSubcategory._var-selector-5" operator="equals" />
    <refine-value idref="AllowedToFormatAndEjectRemovableMedia_var" selector="AllowedToFormatAndEjectRemovableMedia_var-selector-5" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-19" operator="equals" />
    <refine-value idref="DomainControllerRequiredToUnlock_var" selector="DomainControllerRequiredToUnlock_var-selector-4" operator="equals" />
    <refine-value idref="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var" selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-6" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-12" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-12" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-17" operator="equals" />
    <refine-value idref="ShutDownWithoutLogon_var" selector="ShutDownWithoutLogon_var-selector-0" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-8" operator="equals" />
    <refine-value idref="UseFIPSCompliantAlgorithms_var" selector="UseFIPSCompliantAlgorithms_var-selector-2" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForAdministrators_var" selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-4" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_polish" selector="DenyLogOnThroughTerminalServices_polish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_swedish" selector="DenyLogOnThroughTerminalServices_swedish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_spanish" selector="DenyLogOnThroughTerminalServices_spanish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_english" selector="DenyLogOnThroughTerminalServices_english-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_turkish" selector="DenyLogOnThroughTerminalServices_turkish-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_chinese" selector="DenyLogOnThroughTerminalServices_chinese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_japanese" selector="DenyLogOnThroughTerminalServices_japanese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_german" selector="DenyLogOnThroughTerminalServices_german-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_italian" selector="DenyLogOnThroughTerminalServices_italian-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_portuguese" selector="DenyLogOnThroughTerminalServices_portuguese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnThroughTerminalServices_french" selector="DenyLogOnThroughTerminalServices_french-selector-10" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_portuguese" selector="AllowedToChangeTheTimeZone_portuguese-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_italian" selector="AllowedToChangeTheTimeZone_italian-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_german" selector="AllowedToChangeTheTimeZone_german-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_chinese" selector="AllowedToChangeTheTimeZone_chinese-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_swedish" selector="AllowedToChangeTheTimeZone_swedish-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_spanish" selector="AllowedToChangeTheTimeZone_spanish-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_turkish" selector="AllowedToChangeTheTimeZone_turkish-selector-4" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_french" selector="AllowedToChangeTheTimeZone_french-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_polish" selector="AllowedToChangeTheTimeZone_polish-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_japanese" selector="AllowedToChangeTheTimeZone_japanese-selector-0" operator="equals" />
    <refine-value idref="AllowedToChangeTheTimeZone_english" selector="AllowedToChangeTheTimeZone_english-selector-0" operator="equals" />
    <refine-value idref="CreateGlobalObjects_german" selector="CreateGlobalObjects_german-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_english" selector="CreateGlobalObjects_english-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_italian" selector="CreateGlobalObjects_italian-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_chinese" selector="CreateGlobalObjects_chinese-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_french" selector="CreateGlobalObjects_french-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_swedish" selector="CreateGlobalObjects_swedish-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_portuguese" selector="CreateGlobalObjects_portuguese-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_polish" selector="CreateGlobalObjects_polish-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_spanish" selector="CreateGlobalObjects_spanish-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_turkish" selector="CreateGlobalObjects_turkish-selector-7" operator="equals" />
    <refine-value idref="CreateGlobalObjects_japanese" selector="CreateGlobalObjects_japanese-selector-7" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-8" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-12" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-12" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_spanish" selector="ProfileSystemPerformance_spanish-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_french" selector="ProfileSystemPerformance_french-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_english" selector="ProfileSystemPerformance_english-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_polish" selector="ProfileSystemPerformance_polish-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_chinese" selector="ProfileSystemPerformance_chinese-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_japanese" selector="ProfileSystemPerformance_japanese-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_portuguese" selector="ProfileSystemPerformance_portuguese-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_italian" selector="ProfileSystemPerformance_italian-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_turkish" selector="ProfileSystemPerformance_turkish-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_german" selector="ProfileSystemPerformance_german-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_swedish" selector="ProfileSystemPerformance_swedish-selector-3" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-12" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-12" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_italian" selector="AdjustMemoryQuotasForAProcess_italian-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_turkish" selector="AdjustMemoryQuotasForAProcess_turkish-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_french" selector="AdjustMemoryQuotasForAProcess_french-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_swedish" selector="AdjustMemoryQuotasForAProcess_swedish-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_polish" selector="AdjustMemoryQuotasForAProcess_polish-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_portuguese" selector="AdjustMemoryQuotasForAProcess_portuguese-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_spanish" selector="AdjustMemoryQuotasForAProcess_spanish-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_english" selector="AdjustMemoryQuotasForAProcess_english-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_chinese" selector="AdjustMemoryQuotasForAProcess_chinese-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_japanese" selector="AdjustMemoryQuotasForAProcess_japanese-selector-9" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_german" selector="AdjustMemoryQuotasForAProcess_german-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_swedish" selector="DenyLogOnAsABatchJob_swedish-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_german" selector="DenyLogOnAsABatchJob_german-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_spanish" selector="DenyLogOnAsABatchJob_spanish-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_english" selector="DenyLogOnAsABatchJob_english-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_turkish" selector="DenyLogOnAsABatchJob_turkish-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_french" selector="DenyLogOnAsABatchJob_french-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_japanese" selector="DenyLogOnAsABatchJob_japanese-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_chinese" selector="DenyLogOnAsABatchJob_chinese-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_polish" selector="DenyLogOnAsABatchJob_polish-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_portuguese" selector="DenyLogOnAsABatchJob_portuguese-selector-0" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_italian" selector="DenyLogOnAsABatchJob_italian-selector-0" operator="equals" />
    <refine-value idref="BypassTraverseChecking_english" selector="BypassTraverseChecking_english-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_turkish" selector="BypassTraverseChecking_turkish-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_german" selector="BypassTraverseChecking_german-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_french" selector="BypassTraverseChecking_french-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_portuguese" selector="BypassTraverseChecking_portuguese-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_italian" selector="BypassTraverseChecking_italian-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_polish" selector="BypassTraverseChecking_polish-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_japanese" selector="BypassTraverseChecking_japanese-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_chinese" selector="BypassTraverseChecking_chinese-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_swedish" selector="BypassTraverseChecking_swedish-selector-9" operator="equals" />
    <refine-value idref="BypassTraverseChecking_spanish" selector="BypassTraverseChecking_spanish-selector-9" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-16" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-16" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-22" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-22" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-DomainProfile_var" selector="ApplyLocalFirewallRules-DomainProfile_var-selector-6" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-DomainProfile_var" selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-6" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PrivateProfile_var" selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-6" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PrivateProfile_var" selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-6" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PublicProfile_var" selector="ApplyLocalFirewallRules-PublicProfile_var-selector" operator="equals" />
    <refine-value idref="RestrictionsForUnauthenticatedRPCClients_var0" selector="RestrictionsForUnauthenticatedRPCClients_var0-selector-8" operator="equals" />
    <refine-value idref="RPCEndpointMapperClientAuthentication_var0" selector="RPCEndpointMapperClientAuthentication_var0-selector" operator="equals" />
    <refine-value idref="RegistryPolicyProcessing_var" selector="RegistryPolicyProcessing_var-selector" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var-selector" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheApplicationLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheApplicationLog_var-selector" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheSystemLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheSystemLog_var-selector" operator="equals" />
    <refine-value idref="AllowRemoteShellAccess_var" selector="AllowRemoteShellAccess_var-selector" operator="equals" />
    <refine-value idref="AllowMicrosoftServicesToProvideEnhancedSuggestions_var" selector="AllowMicrosoftServicesToProvideEnhancedSuggestions_var-selector-0" operator="equals" />
    <refine-value idref="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var" selector="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffLoadingWebsitesAndContent_var" selector="TurnOffLoadingWebsitesAndContent_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffSendingUTF-8QueryStringsForURLs_var" selector="TurnOffSendingUTF-8QueryStringsForURLs_var-selector-0" operator="equals" />
    <refine-value idref="TurnOn64-bitTabProcesses_var" selector="TurnOn64-bitTabProcesses_var-selector-0" operator="equals" />
    <refine-value idref="InternetZoneDoNotRunAntimalwarePrograms_var" selector="InternetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="IntranetZoneDoNotRunAntimalwarePrograms_var" selector="IntranetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="LocalMachineZoneDoNotRunAntimalwarePrograms_var" selector="LocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var" selector="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="TrustedSitesZoneDoNotRunAntimalwarePrograms_var" selector="TrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffPhoneNumberDetection_var" selector="TurnOffPhoneNumberDetection_var-selector-0" operator="equals" />
    <refine-value idref="UseAdvancedRemoteFXGraphicsForRemoteApp_var" selector="UseAdvancedRemoteFXGraphicsForRemoteApp_var-selector-0" operator="equals" />
    <refine-value idref="PreventSkyDriveFilesFromSyncing_metered__var" selector="PreventSkyDriveFilesFromSyncing_metered__var-selector-0" operator="equals" />
    <refine-value idref="PreventTheUsageOfSkyDriveForFileStorage_var" selector="PreventTheUsageOfSkyDriveForFileStorage_var-selector-0" operator="equals" />
    <refine-value idref="SaveDocumentsAndPicturesToTheLocalPC_var" selector="SaveDocumentsAndPicturesToTheLocalPC_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffAutomaticDownloadAndInstallOfUpdates_var" selector="TurnOffAutomaticDownloadAndInstallOfUpdates_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffAutomaticDownloadOfUpdates_Win8__var" selector="TurnOffAutomaticDownloadOfUpdates_Win8__var-selector-0" operator="equals" />
    <refine-value idref="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var" selector="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSyncApps_var" selector="DoNotSyncApps_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSyncStartSettings_var" selector="DoNotSyncStartSettings_var-selector-0" operator="equals" />
    <refine-value idref="ForceAutomaticSetupForAllUsers_var" selector="ForceAutomaticSetupForAllUsers_var-selector-0" operator="equals" />
    <refine-value idref="AlwaysAutomaticallyRestartAtTheScheduledTime_var" selector="AlwaysAutomaticallyRestartAtTheScheduledTime_var-selector-0" operator="equals" />
    <refine-value idref="DoNotConnectToAnyWUInternetLocations_var" selector="DoNotConnectToAnyWUInternetLocations_var-selector-0" operator="equals" />
    <refine-value idref="AutomaticallyWorkplaceJoinClientComputers_var" selector="AutomaticallyWorkplaceJoinClientComputers_var-selector-0" operator="equals" />
    <refine-value idref="AutomaticallySendMemoryDumps_var" selector="AutomaticallySendMemoryDumps_var-selector-0" operator="equals" />
    <refine-value idref="Sign-inLastInteractiveUserAutomatically_var" selector="Sign-inLastInteractiveUserAutomatically_var-selector-0" operator="equals" />
    <refine-value idref="AllowOnlySystemBackup_var" selector="AllowOnlySystemBackup_var-selector-0" operator="equals" />
    <refine-value idref="DisallowNetworkAsBackupTarget_var" selector="DisallowNetworkAsBackupTarget_var-selector-0" operator="equals" />
    <refine-value idref="DisallowLocallyAttachedStorageAsBackupTarget_var" selector="DisallowLocallyAttachedStorageAsBackupTarget_var-selector-0" operator="equals" />
    <refine-value idref="DisallowOpticalMediaAsBackupTarget_var" selector="DisallowOpticalMediaAsBackupTarget_var-selector-0" operator="equals" />
    <refine-value idref="DisallowRun-onceBackups_var" selector="DisallowRun-onceBackups_var-selector-0" operator="equals" />
    <refine-value idref="ForceASpecificStartBackground_var" selector="ForceASpecificStartBackground_var-selector-0" operator="equals" />
    <refine-value idref="PreventEnablingLockScreenCamera_var" selector="PreventEnablingLockScreenCamera_var-selector-0" operator="equals" />
    <refine-value idref="PreventEnablingLockScreenSlideShow_var" selector="PreventEnablingLockScreenSlideShow_var-selector-0" operator="equals" />
    <refine-value idref="IncludeCommandLineInProcessCreationEvents_var" selector="IncludeCommandLineInProcessCreationEvents_var-selector-0" operator="equals" />
    <refine-value idref="RestrictDelegationOfCredentialsToRemoteServers_var" selector="RestrictDelegationOfCredentialsToRemoteServers_var-selector-0" operator="equals" />
    <refine-value idref="RequestCompoundAuthentication_var" selector="RequestCompoundAuthentication_var-selector-0" operator="equals" />
    <refine-value idref="AlwaysSendCompoundAuthenticationFirst_var" selector="AlwaysSendCompoundAuthenticationFirst_var-selector-0" operator="equals" />
    <refine-value idref="AllowUsersToSelectWhenAPasswordIsRequired_var" selector="AllowUsersToSelectWhenAPasswordIsRequired_var-selector-0" operator="equals" />
    <refine-value idref="DoNotDisplayNetworkSelectionUI_var" selector="DoNotDisplayNetworkSelectionUI_var-selector-0" operator="equals" />
    <refine-value idref="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var" selector="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var-selector-0" operator="equals" />
    <refine-value idref="SlowLinkDetectionConnectionSpeed_var" selector="SlowLinkDetectionConnectionSpeed_var-selector-0" operator="equals" />
    <refine-value idref="ConfigureLogonScriptDelay_var" selector="ConfigureLogonScriptDelay_var-selector-0" operator="equals" />
    <refine-value idref="CachingForServers-SlowLinkValue_milliseconds__var" selector="CachingForServers-SlowLinkValue_milliseconds__var-selector-0" operator="equals" />
    <refine-value idref="CachingForServers-TimeoutValue_milliseconds__var" selector="CachingForServers-TimeoutValue_milliseconds__var-selector-0" operator="equals" />
    <refine-value idref="SlowLinkDetection-WWANConnection_var" selector="SlowLinkDetection-WWANConnection_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffTheAdvertisingID_var" selector="TurnOffTheAdvertisingID_var-selector-0" operator="equals" />
    <refine-value idref="EnableHotspotAuthentication_var" selector="EnableHotspotAuthentication_var-selector-0" operator="equals" />
    <refine-value idref="AllowDevelopmentOfWindowsStoreApps_var" selector="AllowDevelopmentOfWindowsStoreApps_var-selector-0" operator="equals" />
    <refine-value idref="AllowMicrosoftAccountsToBeOptional_var" selector="AllowMicrosoftAccountsToBeOptional_var-selector-0" operator="equals" />
    <refine-value idref="DisableHelpTips_var" selector="DisableHelpTips_var-selector-0" operator="equals" />
    <refine-value idref="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var" selector="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSearchTheWebOrDisplayWebResults_var" selector="DoNotSearchTheWebOrDisplayWebResults_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSearchTheWebOrDisplayWebResults_metered__var" selector="DoNotSearchTheWebOrDisplayWebResults_metered__var-selector-0" operator="equals" />
    <refine-value idref="SetTheSafeSearchSettingForSearch_var" selector="SetTheSafeSearchSettingForSearch_var-selector-0" operator="equals" />
    <refine-value idref="SetWhatInformationIsSharedInSearch_var" selector="SetWhatInformationIsSharedInSearch_var-selector-0" operator="equals" />
   </Profile>
  <Profile id="WindowsServer2012R2-MS" abstract="false">
    <title xml:lang="en">Windows Server 2012 R2 - MS</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2012:r2" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="AuditSubcategory_AuditOtherAccountLogonEvents" selected="true" />
    <select idref="AuditSubcategory_ApplicationGroupManagement" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DistributionGroupManagement" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DPAPIActivity" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_ProcessTermination" selected="true" />
    <select idref="AuditSubcategory_RPCEvents" selected="true" />
    <select idref="AuditSubcategory_AuditAccountLockout" selected="true" />
    <select idref="AuditSubcategory_IPsecExtendedMode" selected="true" />
    <select idref="AuditSubcategory_IPsecMainMode" selected="true" />
    <select idref="AuditSubcategory_IPsecQuickMode" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_OtherLogon_LogoffEvents" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_ApplicationGenerated" selected="true" />
    <select idref="AuditSubcategory_CertificationServices" selected="true" />
    <select idref="AuditSubcategory_FileShare" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformConnection" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPacketDrop" selected="true" />
    <select idref="AuditSubcategory_HandleManipulation" selected="true" />
    <select idref="AuditSubcategory_KernelObject" selected="true" />
    <select idref="AuditSubcategory_OtherObjectAccessEvents" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SAM" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthorizationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPolicyChange" selected="true" />
    <select idref="AuditSubcategory_MPSSVCRule-LevelPolicyChange" selected="true" />
    <select idref="AuditSubcategory_OtherPolicyChangeEvents" selected="true" />
    <select idref="AuditSubcategory_NonSensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_OtherPrivilegeUseEvents" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_OtherSystemEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="Accounts_RenameAdministratorAccount" selected="true" />
    <select idref="Accounts_RenameGuestAccount" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MachineAccountLockoutThreshold" selected="true" />
    <select idref="InteractiveLogon_MachineInactivityLimit" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemCryptography_UseFIPSCompliantAlgorithmsForEncryption_HashingAndSigning" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemSettings_UseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateExecutablesThatAreSignedAndValidated" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreateGlobalObjects" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_CreateSymbolicLinks" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob" selected="true" />
    <select idref="UserRight_DenyLogOnAsAService" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_IncreaseAProcessWorkingSet" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsInstaller_AlwaysInstallWithElevatedPrivileges" selected="true" />
    <select idref="WindowsComponents-InternetExplorerAllowMicrosoftServicesToProvideEnhancedSuggestionsAsTheUserTypesInTheAddressBar" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageAllowInternetExplorerToUseTheSPDY3NetworkProtocol" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOffLoadingWebsitesAndContentInTheBackgroundToOptimizePerformance" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOffSendingUTF-8QueryStringsForURLs" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOn64-bitTabProcessesWhenRunningInEnhancedProtectedModeOn64-bitVersionsOfWindows" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-InternetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-IntranetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-LocalMachineZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownInternetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownIntranetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownLocalMachineZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownRestrictedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownTrustedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-RestrictedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-TrustedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetSettings-AdvancedSettings-BrowsingTurnOffPhoneNumberDetection" selected="true" />
    <select idref="WindowsComponents-RemoteDesktopServices-RemoteDesktopSessionHost-RemoteSessionEnvironmentUseAdvancedRemoteFXGraphicsForRemoteApp" selected="true" />
    <select idref="WindowsComponents-SkyDrivePreventSkyDriveFilesFromSyncingOverMeteredConnections" selected="true" />
    <select idref="WindowsComponents-SkyDrivePreventTheUsageOfSkyDriveForFileStorage" selected="true" />
    <select idref="WindowsComponents-SkyDriveSaveDocumentsAndPicturesToTheLocalPCByDefault" selected="true" />
    <select idref="WindowsComponents-StoreTurnOffAutomaticDownloadAndInstallOfUpdates" selected="true" />
    <select idref="WindowsComponents-StoreTurnOffAutomaticDownloadOfUpdatesOnWin8Machines" selected="true" />
    <select idref="WindowsComponents-StoreTurnOffTheOfferToUpdateToTheLatestVersionOfWindows" selected="true" />
    <select idref="WindowsComponents-SyncYourSettingsDoNotSyncApps" selected="true" />
    <select idref="WindowsComponents-SyncYourSettingsDoNotSyncStartSettings" selected="true" />
    <select idref="WindowsComponents-WorkFoldersForceAutomaticSetupForAllUsers" selected="true" />
    <select idref="WindowsComponents-WindowsUpdateAlwaysAutomaticallyRestartAtTheScheduledTime" selected="true" />
    <select idref="WindowsComponents-WindowsUpdateDoNotConnectToAnyWindowsUpdateInternetLocations" selected="true" />
    <select idref="WindowsComponents-WorkplaceJoinAutomaticallyWorkplaceJoinClientComputers" selected="true" />
    <select idref="WindowsComponents-WindowsErrorReportingAutomaticallySendMemoryDumpsForOS-generatedErrorReports" selected="true" />
    <select idref="WindowsComponents-WindowsLogonOptionsSign-inLastInteractiveUserAutomaticallyAfterASystem-initiatedRestart" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowLocallyAttachedStorageAsBackupTarget" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowNetworkAsBackupTarget" selected="true" />
    <select idref="WindowsComponents-Backup-ServerAllowOnlySystemBackup" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowRun-onceBackups" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowOpticalMediaAsBackupTarget" selected="true" />
    <select idref="ControlPanel-PersonalizationForceASpecificStartBackground" selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenCamera" selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenSlideShow" selected="true" />
    <select idref="System-AuditProcessCreationIncludeCommandLineInProcessCreationEvents" selected="true" />
    <select idref="System-CredentialsDelegationRestrictDelegationOfCredentialsToRemoteServers" selected="true" />
    <select idref="System-KDCRequestCompoundAuthentication" selected="true" />
    <select idref="System-KerberosAlwaysSendCompoundAuthenticationFirst" selected="true" />
    <select idref="System-LogonAllowUsersToSelectWhenAPasswordIsRequiredWhenResumingFromConnectedStandby" selected="true" />
    <select idref="System-LogonDoNotDisplayNetworkSelectionUI" selected="true" />
    <select idref="System-NetLogon-DCLocatorDNSRecordsUseDNSNameResolutionWhenASingle-labelDomainNameIsUsedByAppendingDifferentRegisteredDNSSuffixesIfTheAllowSingleLabelDnsDomainSettingIsNotEnabled" selected="true" />
    <select idref="System-GroupPolicyConfigureGroupPolicySlowLinkDetection_ConnectionSpeed_" selected="true" />
    <select idref="System-GroupPolicyConfigureLogonScriptDelay" selected="true" />
    <select idref="System-GroupPolicyEnableGroupPolicyCachingForServers_SlowLinkValue_" selected="true" />
    <select idref="System-GroupPolicyEnableGroupPolicyCachingForServers_TimeoutValue_" selected="true" />
    <select idref="System-GroupPolicyConfigureGroupPolicySlowLinkDetection_WWANConnection_" selected="true" />
    <select idref="System-UserProfilesTurnOffTheAdvertisingID" selected="true" />
    <select idref="Network-HotspotAuthenticationEnableHotspotAuthentication" selected="true" />
    <select idref="WindowsComponents-AppPackageDeploymentAllowDevelopmentOfWindowsStoreAppsWithoutInstallingADeveloperLicense" selected="true" />
    <select idref="WindowsComponents-AppRuntimeAllowMicrosoftAccountsToBeOptional" selected="true" />
    <select idref="WindowsComponents-EdgeUIDisableHelpTips" selected="true" />
    <select idref="WindowsComponents-SearchDoNotAllowLocationsOnRemovableDrivesToBeAddedToLibraries" selected="true" />
    <select idref="WindowsComponents-SearchDontSearchTheWebOrDisplayWebResultsInSearch" selected="true" />
    <select idref="WindowsComponents-SearchDontSearchTheWebOrDisplayWebResultsInSearchOverMeteredConnections" selected="true" />
    <select idref="WindowsComponents-SearchSetTheSafeSearchSettingForSearch" selected="true" />
    <select idref="WindowsComponents-SearchSetWhatInformationIsSharedInSearch" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-20" operator="equals" />
    <refine-value idref="MinimumPasswordLength_var" selector="MinimumPasswordLength_var-selector-10" operator="equals" />
    <refine-value idref="MaxPwdAgeInSeconds_864001Day__var" selector="MaxPwdAgeInSeconds_864001Day__var-selector-7" operator="equals" />
    <refine-value idref="ComputerAccountManagementAuditSubcategory._var" selector="ComputerAccountManagementAuditSubcategory._var-selector-6" operator="equals" />
    <refine-value idref="SensitivePrivilegeUseAuditSubcategory._var" selector="SensitivePrivilegeUseAuditSubcategory._var-selector-7" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-20" operator="equals" />
    <refine-value idref="DomainControllerRequiredToUnlock_var" selector="DomainControllerRequiredToUnlock_var-selector-5" operator="equals" />
    <refine-value idref="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var" selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-7" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-18" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-13" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-13" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-9" operator="equals" />
    <refine-value idref="UseFIPSCompliantAlgorithms_var" selector="UseFIPSCompliantAlgorithms_var-selector-3" operator="equals" />
    <refine-value idref="UseCertificateRules_var" selector="UseCertificateRules_var-selector-5" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForAdministrators_var" selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-5" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForStandardUsers_var" selector="BehaviorOfTheElevationPromptForStandardUsers_var-selector-0" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_chinese" selector="AccessThisComputerFromTheNetwork_chinese-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_italian" selector="AccessThisComputerFromTheNetwork_italian-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_german" selector="AccessThisComputerFromTheNetwork_german-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_swedish" selector="AccessThisComputerFromTheNetwork_swedish-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_french" selector="AccessThisComputerFromTheNetwork_french-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_spanish" selector="AccessThisComputerFromTheNetwork_spanish-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_japanese" selector="AccessThisComputerFromTheNetwork_japanese-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_english" selector="AccessThisComputerFromTheNetwork_english-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_turkish" selector="AccessThisComputerFromTheNetwork_turkish-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_polish" selector="AccessThisComputerFromTheNetwork_polish-selector-10" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_portuguese" selector="AccessThisComputerFromTheNetwork_portuguese-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_italian" selector="AdjustMemoryQuotasForAProcess_italian-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_turkish" selector="AdjustMemoryQuotasForAProcess_turkish-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_french" selector="AdjustMemoryQuotasForAProcess_french-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_swedish" selector="AdjustMemoryQuotasForAProcess_swedish-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_polish" selector="AdjustMemoryQuotasForAProcess_polish-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_spanish" selector="AdjustMemoryQuotasForAProcess_spanish-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_portuguese" selector="AdjustMemoryQuotasForAProcess_portuguese-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_english" selector="AdjustMemoryQuotasForAProcess_english-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_chinese" selector="AdjustMemoryQuotasForAProcess_chinese-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_japanese" selector="AdjustMemoryQuotasForAProcess_japanese-selector-10" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_german" selector="AdjustMemoryQuotasForAProcess_german-selector-10" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-14" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-15" operator="equals" />
    <refine-value idref="BypassTraverseChecking_english" selector="BypassTraverseChecking_english-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_turkish" selector="BypassTraverseChecking_turkish-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_german" selector="BypassTraverseChecking_german-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_french" selector="BypassTraverseChecking_french-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_portuguese" selector="BypassTraverseChecking_portuguese-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_italian" selector="BypassTraverseChecking_italian-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_polish" selector="BypassTraverseChecking_polish-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_japanese" selector="BypassTraverseChecking_japanese-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_chinese" selector="BypassTraverseChecking_chinese-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_swedish" selector="BypassTraverseChecking_swedish-selector-10" operator="equals" />
    <refine-value idref="BypassTraverseChecking_spanish" selector="BypassTraverseChecking_spanish-selector-10" operator="equals" />
    <refine-value idref="CreateGlobalObjects_german" selector="CreateGlobalObjects_german-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_english" selector="CreateGlobalObjects_english-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_italian" selector="CreateGlobalObjects_italian-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_chinese" selector="CreateGlobalObjects_chinese-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_french" selector="CreateGlobalObjects_french-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_swedish" selector="CreateGlobalObjects_swedish-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_portuguese" selector="CreateGlobalObjects_portuguese-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_polish" selector="CreateGlobalObjects_polish-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_spanish" selector="CreateGlobalObjects_spanish-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_turkish" selector="CreateGlobalObjects_turkish-selector-8" operator="equals" />
    <refine-value idref="CreateGlobalObjects_japanese" selector="CreateGlobalObjects_japanese-selector-8" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-10" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-10" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_swedish" selector="DenyLogOnAsABatchJob_swedish-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_german" selector="DenyLogOnAsABatchJob_german-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_spanish" selector="DenyLogOnAsABatchJob_spanish-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_english" selector="DenyLogOnAsABatchJob_english-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_turkish" selector="DenyLogOnAsABatchJob_turkish-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_french" selector="DenyLogOnAsABatchJob_french-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_japanese" selector="DenyLogOnAsABatchJob_japanese-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_chinese" selector="DenyLogOnAsABatchJob_chinese-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_polish" selector="DenyLogOnAsABatchJob_polish-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_portuguese" selector="DenyLogOnAsABatchJob_portuguese-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_italian" selector="DenyLogOnAsABatchJob_italian-selector-1" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-13" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-13" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-17" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-17" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-13" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-13" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_spanish" selector="LogOnAsABatchJob_spanish-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_english" selector="LogOnAsABatchJob_english-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_portuguese" selector="LogOnAsABatchJob_portuguese-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_german" selector="LogOnAsABatchJob_german-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_chinese" selector="LogOnAsABatchJob_chinese-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_french" selector="LogOnAsABatchJob_french-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_polish" selector="LogOnAsABatchJob_polish-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_italian" selector="LogOnAsABatchJob_italian-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_turkish" selector="LogOnAsABatchJob_turkish-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_japanese" selector="LogOnAsABatchJob_japanese-selector-2" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_swedish" selector="LogOnAsABatchJob_swedish-selector-2" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_spanish" selector="ProfileSystemPerformance_spanish-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_french" selector="ProfileSystemPerformance_french-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_english" selector="ProfileSystemPerformance_english-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_polish" selector="ProfileSystemPerformance_polish-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_chinese" selector="ProfileSystemPerformance_chinese-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_japanese" selector="ProfileSystemPerformance_japanese-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_portuguese" selector="ProfileSystemPerformance_portuguese-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_italian" selector="ProfileSystemPerformance_italian-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_turkish" selector="ProfileSystemPerformance_turkish-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_german" selector="ProfileSystemPerformance_german-selector-4" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_swedish" selector="ProfileSystemPerformance_swedish-selector-4" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_spanish" selector="RemoveComputerFromADockingStation_spanish-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_french" selector="RemoveComputerFromADockingStation_french-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_turkish" selector="RemoveComputerFromADockingStation_turkish-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_portuguese" selector="RemoveComputerFromADockingStation_portuguese-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_polish" selector="RemoveComputerFromADockingStation_polish-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_swedish" selector="RemoveComputerFromADockingStation_swedish-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_english" selector="RemoveComputerFromADockingStation_english-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_italian" selector="RemoveComputerFromADockingStation_italian-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_japanese" selector="RemoveComputerFromADockingStation_japanese-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_german" selector="RemoveComputerFromADockingStation_german-selector-8" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_chinese" selector="RemoveComputerFromADockingStation_chinese-selector-8" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-23" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-23" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-10" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-10" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PublicProfile_var" selector="ApplyLocalConnectionSecurityRules-PublicProfile_var-selector" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PublicProfile_var" selector="ApplyLocalFirewallRules-PublicProfile_var-selector-1" operator="equals" />
    <refine-value idref="DisplayANotification-PublicProfile_var" selector="DisplayANotification-PublicProfile_var-selector-0" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PrivateProfile_var" selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-7" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PrivateProfile_var" selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-7" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-DomainProfile_var" selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-7" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-DomainProfile_var" selector="ApplyLocalFirewallRules-DomainProfile_var-selector-7" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var-selector-0" operator="equals" />
    <refine-value idref="AllowMicrosoftServicesToProvideEnhancedSuggestions_var" selector="AllowMicrosoftServicesToProvideEnhancedSuggestions_var-selector-0" operator="equals" />
    <refine-value idref="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var" selector="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffLoadingWebsitesAndContent_var" selector="TurnOffLoadingWebsitesAndContent_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffSendingUTF-8QueryStringsForURLs_var" selector="TurnOffSendingUTF-8QueryStringsForURLs_var-selector-0" operator="equals" />
    <refine-value idref="TurnOn64-bitTabProcesses_var" selector="TurnOn64-bitTabProcesses_var-selector-0" operator="equals" />
    <refine-value idref="InternetZoneDoNotRunAntimalwarePrograms_var" selector="InternetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="IntranetZoneDoNotRunAntimalwarePrograms_var" selector="IntranetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="LocalMachineZoneDoNotRunAntimalwarePrograms_var" selector="LocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var" selector="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="TrustedSitesZoneDoNotRunAntimalwarePrograms_var" selector="TrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffPhoneNumberDetection_var" selector="TurnOffPhoneNumberDetection_var-selector-0" operator="equals" />
    <refine-value idref="UseAdvancedRemoteFXGraphicsForRemoteApp_var" selector="UseAdvancedRemoteFXGraphicsForRemoteApp_var-selector-0" operator="equals" />
    <refine-value idref="PreventSkyDriveFilesFromSyncing_metered__var" selector="PreventSkyDriveFilesFromSyncing_metered__var-selector-0" operator="equals" />
    <refine-value idref="PreventTheUsageOfSkyDriveForFileStorage_var" selector="PreventTheUsageOfSkyDriveForFileStorage_var-selector-0" operator="equals" />
    <refine-value idref="SaveDocumentsAndPicturesToTheLocalPC_var" selector="SaveDocumentsAndPicturesToTheLocalPC_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffAutomaticDownloadAndInstallOfUpdates_var" selector="TurnOffAutomaticDownloadAndInstallOfUpdates_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffAutomaticDownloadOfUpdates_Win8__var" selector="TurnOffAutomaticDownloadOfUpdates_Win8__var-selector-0" operator="equals" />
    <refine-value idref="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var" selector="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSyncApps_var" selector="DoNotSyncApps_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSyncStartSettings_var" selector="DoNotSyncStartSettings_var-selector-0" operator="equals" />
    <refine-value idref="ForceAutomaticSetupForAllUsers_var" selector="ForceAutomaticSetupForAllUsers_var-selector-0" operator="equals" />
    <refine-value idref="AlwaysAutomaticallyRestartAtTheScheduledTime_var" selector="AlwaysAutomaticallyRestartAtTheScheduledTime_var-selector-0" operator="equals" />
    <refine-value idref="DoNotConnectToAnyWUInternetLocations_var" selector="DoNotConnectToAnyWUInternetLocations_var-selector-0" operator="equals" />
    <refine-value idref="AutomaticallyWorkplaceJoinClientComputers_var" selector="AutomaticallyWorkplaceJoinClientComputers_var-selector-0" operator="equals" />
    <refine-value idref="AutomaticallySendMemoryDumps_var" selector="AutomaticallySendMemoryDumps_var-selector-0" operator="equals" />
    <refine-value idref="Sign-inLastInteractiveUserAutomatically_var" selector="Sign-inLastInteractiveUserAutomatically_var-selector-0" operator="equals" />
    <refine-value idref="AllowOnlySystemBackup_var" selector="AllowOnlySystemBackup_var-selector-0" operator="equals" />
    <refine-value idref="DisallowNetworkAsBackupTarget_var" selector="DisallowNetworkAsBackupTarget_var-selector-0" operator="equals" />
    <refine-value idref="DisallowLocallyAttachedStorageAsBackupTarget_var" selector="DisallowLocallyAttachedStorageAsBackupTarget_var-selector-0" operator="equals" />
    <refine-value idref="DisallowOpticalMediaAsBackupTarget_var" selector="DisallowOpticalMediaAsBackupTarget_var-selector-0" operator="equals" />
    <refine-value idref="DisallowRun-onceBackups_var" selector="DisallowRun-onceBackups_var-selector-0" operator="equals" />
    <refine-value idref="ForceASpecificStartBackground_var" selector="ForceASpecificStartBackground_var-selector-0" operator="equals" />
    <refine-value idref="PreventEnablingLockScreenCamera_var" selector="PreventEnablingLockScreenCamera_var-selector-0" operator="equals" />
    <refine-value idref="PreventEnablingLockScreenSlideShow_var" selector="PreventEnablingLockScreenSlideShow_var-selector-0" operator="equals" />
    <refine-value idref="IncludeCommandLineInProcessCreationEvents_var" selector="IncludeCommandLineInProcessCreationEvents_var-selector-0" operator="equals" />
    <refine-value idref="RestrictDelegationOfCredentialsToRemoteServers_var" selector="RestrictDelegationOfCredentialsToRemoteServers_var-selector-0" operator="equals" />
    <refine-value idref="RequestCompoundAuthentication_var" selector="RequestCompoundAuthentication_var-selector-0" operator="equals" />
    <refine-value idref="AlwaysSendCompoundAuthenticationFirst_var" selector="AlwaysSendCompoundAuthenticationFirst_var-selector-0" operator="equals" />
    <refine-value idref="AllowUsersToSelectWhenAPasswordIsRequired_var" selector="AllowUsersToSelectWhenAPasswordIsRequired_var-selector-0" operator="equals" />
    <refine-value idref="DoNotDisplayNetworkSelectionUI_var" selector="DoNotDisplayNetworkSelectionUI_var-selector-0" operator="equals" />
    <refine-value idref="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var" selector="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var-selector-0" operator="equals" />
    <refine-value idref="SlowLinkDetectionConnectionSpeed_var" selector="SlowLinkDetectionConnectionSpeed_var-selector-0" operator="equals" />
    <refine-value idref="ConfigureLogonScriptDelay_var" selector="ConfigureLogonScriptDelay_var-selector-0" operator="equals" />
    <refine-value idref="CachingForServers-SlowLinkValue_milliseconds__var" selector="CachingForServers-SlowLinkValue_milliseconds__var-selector-0" operator="equals" />
    <refine-value idref="CachingForServers-TimeoutValue_milliseconds__var" selector="CachingForServers-TimeoutValue_milliseconds__var-selector-0" operator="equals" />
    <refine-value idref="SlowLinkDetection-WWANConnection_var" selector="SlowLinkDetection-WWANConnection_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffTheAdvertisingID_var" selector="TurnOffTheAdvertisingID_var-selector-0" operator="equals" />
    <refine-value idref="EnableHotspotAuthentication_var" selector="EnableHotspotAuthentication_var-selector-0" operator="equals" />
    <refine-value idref="AllowDevelopmentOfWindowsStoreApps_var" selector="AllowDevelopmentOfWindowsStoreApps_var-selector-0" operator="equals" />
    <refine-value idref="AllowMicrosoftAccountsToBeOptional_var" selector="AllowMicrosoftAccountsToBeOptional_var-selector-0" operator="equals" />
    <refine-value idref="DisableHelpTips_var" selector="DisableHelpTips_var-selector-0" operator="equals" />
    <refine-value idref="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var" selector="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSearchTheWebOrDisplayWebResults_var" selector="DoNotSearchTheWebOrDisplayWebResults_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSearchTheWebOrDisplayWebResults_metered__var" selector="DoNotSearchTheWebOrDisplayWebResults_metered__var-selector-0" operator="equals" />
    <refine-value idref="SetTheSafeSearchSettingForSearch_var" selector="SetTheSafeSearchSettingForSearch_var-selector-0" operator="equals" />
    <refine-value idref="SetWhatInformationIsSharedInSearch_var" selector="SetWhatInformationIsSharedInSearch_var-selector-0" operator="equals" />
      </Profile>
  <Profile id="WindowsServer2012R2-DC" abstract="false">
    <title xml:lang="en">Windows Server 2012  R2 - DC</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:microsoft:windows_server_2012:r2" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
    <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
    <select idref="AuditSubcategory_CredentialValidation" selected="true" />
    <select idref="AuditSubcategory_AuditOtherAccountLogonEvents" selected="true" />
    <select idref="AuditSubcategory_ApplicationGroupManagement" selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DistributionGroupManagement" selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
    <select idref="AuditSubcategory_DPAPIActivity" selected="true" />
    <select idref="AuditSubcategory_ProcessCreation" selected="true" />
    <select idref="AuditSubcategory_ProcessTermination" selected="true" />
    <select idref="AuditSubcategory_RPCEvents" selected="true" />
    <select idref="AuditSubcategory_DetailedDirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceAccess" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges" selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceReplication" selected="true" />
    <select idref="AuditSubcategory_AuditAccountLockout" selected="true" />
    <select idref="AuditSubcategory_IPsecExtendedMode" selected="true" />
    <select idref="AuditSubcategory_IPsecMainMode" selected="true" />
    <select idref="AuditSubcategory_IPsecQuickMode" selected="true" />
    <select idref="AuditSubcategory_Logoff" selected="true" />
    <select idref="AuditSubcategory_Logon" selected="true" />
    <select idref="AuditSubcategory_OtherLogon_LogoffEvents" selected="true" />
    <select idref="AuditSubcategory_SpecialLogon" selected="true" />
    <select idref="AuditSubcategory_ApplicationGenerated" selected="true" />
    <select idref="AuditSubcategory_CertificationServices" selected="true" />
    <select idref="AuditSubcategory_FileShare" selected="true" />
    <select idref="AuditSubcategory_FileSystem" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformConnection" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPacketDrop" selected="true" />
    <select idref="AuditSubcategory_HandleManipulation" selected="true" />
    <select idref="AuditSubcategory_KernelObject" selected="true" />
    <select idref="AuditSubcategory_OtherObjectAccessEvents" selected="true" />
    <select idref="AuditSubcategory_Registry" selected="true" />
    <select idref="AuditSubcategory_SAM" selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_AuthorizationPolicyChange" selected="true" />
    <select idref="AuditSubcategory_FilteringPlatformPolicyChange" selected="true" />
    <select idref="AuditSubcategory_MPSSVCRule-LevelPolicyChange" selected="true" />
    <select idref="AuditSubcategory_OtherPolicyChangeEvents" selected="true" />
    <select idref="AuditSubcategory_NonSensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_OtherPrivilegeUseEvents" selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
    <select idref="AuditSubcategory_IPsecDriver" selected="true" />
    <select idref="AuditSubcategory_OtherSystemEvents" selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
    <select idref="DomainController_AllowServerOperatorsToScheduleTasks" selected="true" />
    <select idref="DomainController_LDAPServerSigningRequirements" selected="true" />
    <select idref="DomainController_RefuseMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
    <select idref="InteractiveLogon_MachineAccountLockoutThreshold" selected="true" />
    <select idref="InteractiveLogon_MachineInactivityLimit" selected="true" />
    <select idref="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
    <select idref="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
    <select idref="MSS_DisableIPSourceRouting" selected="true" />
    <select idref="MSS_SafeDLLSearchMode" selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
    <select idref="MSS_WarningLevel" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM" selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemNULLSessionFallback" selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
    <select idref="RecoveryConsole_AllowAutomaticAdministrativeLogon" selected="true" />
    <select idref="RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders" selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" selected="true" />
    <select idref="Shutdown_ClearVirtualMemoryPagefileSetting" selected="true" />
    <select idref="SystemCryptography_UseFIPSCompliantAlgorithmsForEncryption_HashingAndSigning" selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
    <select idref="SystemSettings_UseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies" selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
    <select idref="UserAccountControl_OnlyElevateExecutablesThatAreSignedAndValidated" selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
    <select idref="UserRight_AddWorkstationsToDomain" selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess" selected="true" />
    <select idref="UserRight_AllowLogonLocally" selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories" selected="true" />
    <select idref="UserRight_BypassTraverseChecking" selected="true" />
    <select idref="UserRight_ChangeTheSystemTime" selected="true" />
    <select idref="UserRight_ChangeTheTimeZone" selected="true" />
    <select idref="UserRight_CreateAPagefile" selected="true" />
    <select idref="UserRight_CreateATokenObject" selected="true" />
    <select idref="UserRight_CreateGlobalObjects" selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
    <select idref="UserRight_CreateSymbolicLinks" selected="true" />
    <select idref="UserRight_DebugPrograms" selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob" selected="true" />
    <select idref="UserRight_DenyLogOnAsAService" selected="true" />
    <select idref="UserRight_DenyLogOnLocally" selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
    <select idref="UserRight_GenerateSecurityAudits" selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
    <select idref="UserRight_IncreaseAProcessWorkingSet" selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
    <select idref="UserRight_LockPagesInMemory" selected="true" />
    <select idref="UserRight_LogOnAsABatchJob" selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel" selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
    <select idref="UserRight_ProfileSingleProcess" selected="true" />
    <select idref="UserRight_ProfileSystemPerformance" selected="true" />
    <select idref="UserRight_RemoveComputerFromDockingStation" selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
    <select idref="UserRight_ShutDownTheSystem" selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData" selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile" selected="true" />
    <select idref="WindowsVistaFirewall_AllowUnicastResponse-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile" selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
    <select idref="WindowsInstaller_AlwaysInstallWithElevatedPrivileges" selected="true" />
    <select idref="WindowsComponents-InternetExplorerAllowMicrosoftServicesToProvideEnhancedSuggestionsAsTheUserTypesInTheAddressBar" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageAllowInternetExplorerToUseTheSPDY3NetworkProtocol" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOffLoadingWebsitesAndContentInTheBackgroundToOptimizePerformance" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOffSendingUTF-8QueryStringsForURLs" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOn64-bitTabProcessesWhenRunningInEnhancedProtectedModeOn64-bitVersionsOfWindows" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-InternetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-IntranetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-LocalMachineZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownInternetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownIntranetZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownLocalMachineZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownRestrictedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownTrustedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-RestrictedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-TrustedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" selected="true" />
    <select idref="WindowsComponents-InternetExplorer-InternetSettings-AdvancedSettings-BrowsingTurnOffPhoneNumberDetection" selected="true" />
    <select idref="WindowsComponents-RemoteDesktopServices-RemoteDesktopSessionHost-RemoteSessionEnvironmentUseAdvancedRemoteFXGraphicsForRemoteApp" selected="true" />
    <select idref="WindowsComponents-SkyDrivePreventSkyDriveFilesFromSyncingOverMeteredConnections" selected="true" />
    <select idref="WindowsComponents-SkyDrivePreventTheUsageOfSkyDriveForFileStorage" selected="true" />
    <select idref="WindowsComponents-SkyDriveSaveDocumentsAndPicturesToTheLocalPCByDefault" selected="true" />
    <select idref="WindowsComponents-StoreTurnOffAutomaticDownloadAndInstallOfUpdates" selected="true" />
    <select idref="WindowsComponents-StoreTurnOffAutomaticDownloadOfUpdatesOnWin8Machines" selected="true" />
    <select idref="WindowsComponents-StoreTurnOffTheOfferToUpdateToTheLatestVersionOfWindows" selected="true" />
    <select idref="WindowsComponents-SyncYourSettingsDoNotSyncApps" selected="true" />
    <select idref="WindowsComponents-SyncYourSettingsDoNotSyncStartSettings" selected="true" />
    <select idref="WindowsComponents-WorkFoldersForceAutomaticSetupForAllUsers" selected="true" />
    <select idref="WindowsComponents-WindowsUpdateAlwaysAutomaticallyRestartAtTheScheduledTime" selected="true" />
    <select idref="WindowsComponents-WindowsUpdateDoNotConnectToAnyWindowsUpdateInternetLocations" selected="true" />
    <select idref="WindowsComponents-WorkplaceJoinAutomaticallyWorkplaceJoinClientComputers" selected="true" />
    <select idref="WindowsComponents-WindowsErrorReportingAutomaticallySendMemoryDumpsForOS-generatedErrorReports" selected="true" />
    <select idref="WindowsComponents-WindowsLogonOptionsSign-inLastInteractiveUserAutomaticallyAfterASystem-initiatedRestart" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowLocallyAttachedStorageAsBackupTarget" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowNetworkAsBackupTarget" selected="true" />
    <select idref="WindowsComponents-Backup-ServerAllowOnlySystemBackup" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowRun-onceBackups" selected="true" />
    <select idref="WindowsComponents-Backup-ServerDisallowOpticalMediaAsBackupTarget" selected="true" />
    <select idref="ControlPanel-PersonalizationForceASpecificStartBackground" selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenCamera" selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenSlideShow" selected="true" />
    <select idref="System-AuditProcessCreationIncludeCommandLineInProcessCreationEvents" selected="true" />
    <select idref="System-CredentialsDelegationRestrictDelegationOfCredentialsToRemoteServers" selected="true" />
    <select idref="System-KDCRequestCompoundAuthentication" selected="true" />
    <select idref="System-KerberosAlwaysSendCompoundAuthenticationFirst" selected="true" />
    <select idref="System-LogonAllowUsersToSelectWhenAPasswordIsRequiredWhenResumingFromConnectedStandby" selected="true" />
    <select idref="System-LogonDoNotDisplayNetworkSelectionUI" selected="true" />
    <select idref="System-NetLogon-DCLocatorDNSRecordsUseDNSNameResolutionWhenASingle-labelDomainNameIsUsedByAppendingDifferentRegisteredDNSSuffixesIfTheAllowSingleLabelDnsDomainSettingIsNotEnabled" selected="true" />
    <select idref="System-GroupPolicyConfigureGroupPolicySlowLinkDetection_ConnectionSpeed_" selected="true" />
    <select idref="System-GroupPolicyConfigureLogonScriptDelay" selected="true" />
    <select idref="System-GroupPolicyEnableGroupPolicyCachingForServers_SlowLinkValue_" selected="true" />
    <select idref="System-GroupPolicyEnableGroupPolicyCachingForServers_TimeoutValue_" selected="true" />
    <select idref="System-GroupPolicyConfigureGroupPolicySlowLinkDetection_WWANConnection_" selected="true" />
    <select idref="System-UserProfilesTurnOffTheAdvertisingID" selected="true" />
    <select idref="Network-HotspotAuthenticationEnableHotspotAuthentication" selected="true" />
    <select idref="WindowsComponents-AppPackageDeploymentAllowDevelopmentOfWindowsStoreAppsWithoutInstallingADeveloperLicense" selected="true" />
    <select idref="WindowsComponents-AppRuntimeAllowMicrosoftAccountsToBeOptional" selected="true" />
    <select idref="WindowsComponents-EdgeUIDisableHelpTips" selected="true" />
    <select idref="WindowsComponents-SearchDoNotAllowLocationsOnRemovableDrivesToBeAddedToLibraries" selected="true" />
    <select idref="WindowsComponents-SearchDontSearchTheWebOrDisplayWebResultsInSearch" selected="true" />
    <select idref="WindowsComponents-SearchDontSearchTheWebOrDisplayWebResultsInSearchOverMeteredConnections" selected="true" />
    <select idref="WindowsComponents-SearchSetTheSafeSearchSettingForSearch" selected="true" />
    <select idref="WindowsComponents-SearchSetWhatInformationIsSharedInSearch" selected="true" />
    <refine-value idref="NumberOfBadAttemptsBeforeLockout_var" selector="NumberOfBadAttemptsBeforeLockout_var-selector-21" operator="equals" />
    <refine-value idref="MaxPwdAgeInSeconds_864001Day__var" selector="MaxPwdAgeInSeconds_864001Day__var-selector-8" operator="equals" />
    <refine-value idref="MinimumPasswordLength_var" selector="MinimumPasswordLength_var-selector-11" operator="equals" />
    <refine-value idref="DirectoryServiceAccessAuditSubcategory._var" selector="DirectoryServiceAccessAuditSubcategory._var-selector-2" operator="equals" />
    <refine-value idref="DirectoryServiceChangesAuditSubcategory._var" selector="DirectoryServiceChangesAuditSubcategory._var-selector-3" operator="equals" />
    <refine-value idref="SensitivePrivilegeUseAuditSubcategory._var" selector="SensitivePrivilegeUseAuditSubcategory._var-selector-8" operator="equals" />
    <refine-value idref="DomainControllerRequiredToUnlock_var" selector="DomainControllerRequiredToUnlock_var-selector-6" operator="equals" />
    <refine-value idref="NumberOfPreviousLogonsToCache_var1" selector="NumberOfPreviousLogonsToCache_var1-selector-21" operator="equals" />
    <refine-value idref="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var" selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-8" operator="equals" />
    <refine-value idref="AuthenticationLevel_var" selector="AuthenticationLevel_var-selector-19" operator="equals" />
    <refine-value idref="MinimumSessionSecurityClients_var" selector="MinimumSessionSecurityClients_var-selector-14" operator="equals" />
    <refine-value idref="MinimumSessionSecurityForServers_var" selector="MinimumSessionSecurityForServers_var-selector-14" operator="equals" />
    <refine-value idref="ClearPagefileAtShutdown_var0" selector="ClearPagefileAtShutdown_var0-selector-10" operator="equals" />
    <refine-value idref="UseFIPSCompliantAlgorithms_var" selector="UseFIPSCompliantAlgorithms_var-selector-4" operator="equals" />
    <refine-value idref="UseCertificateRules_var" selector="UseCertificateRules_var-selector-6" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForAdministrators_var" selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-6" operator="equals" />
    <refine-value idref="BehaviorOfTheElevationPromptForStandardUsers_var" selector="BehaviorOfTheElevationPromptForStandardUsers_var-selector-1" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_chinese" selector="AccessThisComputerFromTheNetwork_chinese-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_italian" selector="AccessThisComputerFromTheNetwork_italian-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_german" selector="AccessThisComputerFromTheNetwork_german-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_swedish" selector="AccessThisComputerFromTheNetwork_swedish-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_french" selector="AccessThisComputerFromTheNetwork_french-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_spanish" selector="AccessThisComputerFromTheNetwork_spanish-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_japanese" selector="AccessThisComputerFromTheNetwork_japanese-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_english" selector="AccessThisComputerFromTheNetwork_english-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_turkish" selector="AccessThisComputerFromTheNetwork_turkish-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_polish" selector="AccessThisComputerFromTheNetwork_polish-selector-11" operator="equals" />
    <refine-value idref="AccessThisComputerFromTheNetwork_portuguese" selector="AccessThisComputerFromTheNetwork_portuguese-selector-11" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_german" selector="AddWorkstationsToDomain_german-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_swedish" selector="AddWorkstationsToDomain_swedish-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_japanese" selector="AddWorkstationsToDomain_japanese-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_spanish" selector="AddWorkstationsToDomain_spanish-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_english" selector="AddWorkstationsToDomain_english-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_italian" selector="AddWorkstationsToDomain_italian-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_french" selector="AddWorkstationsToDomain_french-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_chinese" selector="AddWorkstationsToDomain_chinese-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_polish" selector="AddWorkstationsToDomain_polish-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_portuguese" selector="AddWorkstationsToDomain_portuguese-selector-2" operator="equals" />
    <refine-value idref="AddWorkstationsToDomain_turkish" selector="AddWorkstationsToDomain_turkish-selector-2" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_italian" selector="AdjustMemoryQuotasForAProcess_italian-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_turkish" selector="AdjustMemoryQuotasForAProcess_turkish-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_french" selector="AdjustMemoryQuotasForAProcess_french-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_swedish" selector="AdjustMemoryQuotasForAProcess_swedish-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_polish" selector="AdjustMemoryQuotasForAProcess_polish-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_spanish" selector="AdjustMemoryQuotasForAProcess_spanish-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_portuguese" selector="AdjustMemoryQuotasForAProcess_portuguese-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_english" selector="AdjustMemoryQuotasForAProcess_english-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_chinese" selector="AdjustMemoryQuotasForAProcess_chinese-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_japanese" selector="AdjustMemoryQuotasForAProcess_japanese-selector-11" operator="equals" />
    <refine-value idref="AdjustMemoryQuotasForAProcess_german" selector="AdjustMemoryQuotasForAProcess_german-selector-11" operator="equals" />
    <refine-value idref="AllowLogOnLocally_polish" selector="AllowLogOnLocally_polish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_chinese" selector="AllowLogOnLocally_chinese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_italian" selector="AllowLogOnLocally_italian-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_turkish" selector="AllowLogOnLocally_turkish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_portuguese" selector="AllowLogOnLocally_portuguese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_japanese" selector="AllowLogOnLocally_japanese-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_german" selector="AllowLogOnLocally_german-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_swedish" selector="AllowLogOnLocally_swedish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_spanish" selector="AllowLogOnLocally_spanish-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_english" selector="AllowLogOnLocally_english-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnLocally_french" selector="AllowLogOnLocally_french-selector-15" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_japanese" selector="AllowLogOnThroughTerminalServices_japanese-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_french" selector="AllowLogOnThroughTerminalServices_french-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_swedish" selector="AllowLogOnThroughTerminalServices_swedish-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_polish" selector="AllowLogOnThroughTerminalServices_polish-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_spanish" selector="AllowLogOnThroughTerminalServices_spanish-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_english" selector="AllowLogOnThroughTerminalServices_english-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_turkish" selector="AllowLogOnThroughTerminalServices_turkish-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_portuguese" selector="AllowLogOnThroughTerminalServices_portuguese-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_chinese" selector="AllowLogOnThroughTerminalServices_chinese-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_german" selector="AllowLogOnThroughTerminalServices_german-selector-16" operator="equals" />
    <refine-value idref="AllowLogOnThroughTerminalServices_italian" selector="AllowLogOnThroughTerminalServices_italian-selector-16" operator="equals" />
    <refine-value idref="BypassTraverseChecking_english" selector="BypassTraverseChecking_english-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_turkish" selector="BypassTraverseChecking_turkish-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_german" selector="BypassTraverseChecking_german-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_french" selector="BypassTraverseChecking_french-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_portuguese" selector="BypassTraverseChecking_portuguese-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_italian" selector="BypassTraverseChecking_italian-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_polish" selector="BypassTraverseChecking_polish-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_chinese" selector="BypassTraverseChecking_chinese-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_japanese" selector="BypassTraverseChecking_japanese-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_swedish" selector="BypassTraverseChecking_swedish-selector-11" operator="equals" />
    <refine-value idref="BypassTraverseChecking_spanish" selector="BypassTraverseChecking_spanish-selector-11" operator="equals" />
    <refine-value idref="CreateGlobalObjects_german" selector="CreateGlobalObjects_german-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_english" selector="CreateGlobalObjects_english-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_italian" selector="CreateGlobalObjects_italian-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_chinese" selector="CreateGlobalObjects_chinese-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_french" selector="CreateGlobalObjects_french-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_swedish" selector="CreateGlobalObjects_swedish-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_portuguese" selector="CreateGlobalObjects_portuguese-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_polish" selector="CreateGlobalObjects_polish-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_spanish" selector="CreateGlobalObjects_spanish-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_turkish" selector="CreateGlobalObjects_turkish-selector-9" operator="equals" />
    <refine-value idref="CreateGlobalObjects_japanese" selector="CreateGlobalObjects_japanese-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_japanese" selector="DebugPrograms_japanese-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_italian" selector="DebugPrograms_italian-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_german" selector="DebugPrograms_german-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_turkish" selector="DebugPrograms_turkish-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_swedish" selector="DebugPrograms_swedish-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_portuguese" selector="DebugPrograms_portuguese-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_french" selector="DebugPrograms_french-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_spanish" selector="DebugPrograms_spanish-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_english" selector="DebugPrograms_english-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_polish" selector="DebugPrograms_polish-selector-9" operator="equals" />
    <refine-value idref="DebugPrograms_chinese" selector="DebugPrograms_chinese-selector-9" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_german" selector="DenyLogOnAsABatchJob_german-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_swedish" selector="DenyLogOnAsABatchJob_swedish-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_spanish" selector="DenyLogOnAsABatchJob_spanish-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_english" selector="DenyLogOnAsABatchJob_english-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_turkish" selector="DenyLogOnAsABatchJob_turkish-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_french" selector="DenyLogOnAsABatchJob_french-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_japanese" selector="DenyLogOnAsABatchJob_japanese-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_chinese" selector="DenyLogOnAsABatchJob_chinese-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_polish" selector="DenyLogOnAsABatchJob_polish-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_portuguese" selector="DenyLogOnAsABatchJob_portuguese-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnAsABatchJob_italian" selector="DenyLogOnAsABatchJob_italian-selector-2" operator="equals" />
    <refine-value idref="DenyLogOnLocally_italian" selector="DenyLogOnLocally_italian-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_turkish" selector="DenyLogOnLocally_turkish-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_portuguese" selector="DenyLogOnLocally_portuguese-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_german" selector="DenyLogOnLocally_german-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_swedish" selector="DenyLogOnLocally_swedish-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_japanese" selector="DenyLogOnLocally_japanese-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_spanish" selector="DenyLogOnLocally_spanish-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_english" selector="DenyLogOnLocally_english-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_french" selector="DenyLogOnLocally_french-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_polish" selector="DenyLogOnLocally_polish-selector-14" operator="equals" />
    <refine-value idref="DenyLogOnLocally_chinese" selector="DenyLogOnLocally_chinese-selector-14" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_swedish" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_swedish-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_japanese" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_japanese-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_german" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_german-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_spanish" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_spanish-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_turkish" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_turkish-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_portuguese" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_portuguese-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_french" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_french-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_polish" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_polish-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_english" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_english-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_italian" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_italian-selector" operator="equals" />
    <refine-value idref="EnableComputerAndUserAccountsToBeTrustedForDelegation_chinese" selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_chinese-selector" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_spanish" selector="GenerateSecurityAudits_spanish-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_portuguese" selector="GenerateSecurityAudits_portuguese-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_english" selector="GenerateSecurityAudits_english-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_german" selector="GenerateSecurityAudits_german-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_chinese" selector="GenerateSecurityAudits_chinese-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_french" selector="GenerateSecurityAudits_french-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_italian" selector="GenerateSecurityAudits_italian-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_polish" selector="GenerateSecurityAudits_polish-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_turkish" selector="GenerateSecurityAudits_turkish-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_japanese" selector="GenerateSecurityAudits_japanese-selector-18" operator="equals" />
    <refine-value idref="GenerateSecurityAudits_swedish" selector="GenerateSecurityAudits_swedish-selector-18" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_spanish" selector="ImpersonateAClientAfterAuthentication_spanish-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_french" selector="ImpersonateAClientAfterAuthentication_french-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_english" selector="ImpersonateAClientAfterAuthentication_english-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_turkish" selector="ImpersonateAClientAfterAuthentication_turkish-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_polish" selector="ImpersonateAClientAfterAuthentication_polish-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_chinese" selector="ImpersonateAClientAfterAuthentication_chinese-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_portuguese" selector="ImpersonateAClientAfterAuthentication_portuguese-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_italian" selector="ImpersonateAClientAfterAuthentication_italian-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_german" selector="ImpersonateAClientAfterAuthentication_german-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_swedish" selector="ImpersonateAClientAfterAuthentication_swedish-selector-14" operator="equals" />
    <refine-value idref="ImpersonateAClientAfterAuthentication_japanese" selector="ImpersonateAClientAfterAuthentication_japanese-selector-14" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_spanish" selector="LogOnAsABatchJob_spanish-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_english" selector="LogOnAsABatchJob_english-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_portuguese" selector="LogOnAsABatchJob_portuguese-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_german" selector="LogOnAsABatchJob_german-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_chinese" selector="LogOnAsABatchJob_chinese-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_french" selector="LogOnAsABatchJob_french-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_polish" selector="LogOnAsABatchJob_polish-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_italian" selector="LogOnAsABatchJob_italian-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_turkish" selector="LogOnAsABatchJob_turkish-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_japanese" selector="LogOnAsABatchJob_japanese-selector-3" operator="equals" />
    <refine-value idref="LogOnAsABatchJob_swedish" selector="LogOnAsABatchJob_swedish-selector-3" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_spanish" selector="ProfileSystemPerformance_spanish-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_french" selector="ProfileSystemPerformance_french-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_english" selector="ProfileSystemPerformance_english-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_polish" selector="ProfileSystemPerformance_polish-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_chinese" selector="ProfileSystemPerformance_chinese-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_japanese" selector="ProfileSystemPerformance_japanese-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_portuguese" selector="ProfileSystemPerformance_portuguese-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_italian" selector="ProfileSystemPerformance_italian-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_turkish" selector="ProfileSystemPerformance_turkish-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_german" selector="ProfileSystemPerformance_german-selector-5" operator="equals" />
    <refine-value idref="ProfileSystemPerformance_swedish" selector="ProfileSystemPerformance_swedish-selector-5" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_spanish" selector="RemoveComputerFromADockingStation_spanish-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_french" selector="RemoveComputerFromADockingStation_french-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_turkish" selector="RemoveComputerFromADockingStation_turkish-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_portuguese" selector="RemoveComputerFromADockingStation_portuguese-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_polish" selector="RemoveComputerFromADockingStation_polish-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_swedish" selector="RemoveComputerFromADockingStation_swedish-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_english" selector="RemoveComputerFromADockingStation_english-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_italian" selector="RemoveComputerFromADockingStation_italian-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_japanese" selector="RemoveComputerFromADockingStation_japanese-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_german" selector="RemoveComputerFromADockingStation_german-selector-9" operator="equals" />
    <refine-value idref="RemoveComputerFromADockingStation_chinese" selector="RemoveComputerFromADockingStation_chinese-selector-9" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_french" selector="ReplaceAProcessLevelToken_french-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_spanish" selector="ReplaceAProcessLevelToken_spanish-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_polish" selector="ReplaceAProcessLevelToken_polish-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_turkish" selector="ReplaceAProcessLevelToken_turkish-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_swedish" selector="ReplaceAProcessLevelToken_swedish-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_english" selector="ReplaceAProcessLevelToken_english-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_german" selector="ReplaceAProcessLevelToken_german-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_italian" selector="ReplaceAProcessLevelToken_italian-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_portuguese" selector="ReplaceAProcessLevelToken_portuguese-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_japanese" selector="ReplaceAProcessLevelToken_japanese-selector-24" operator="equals" />
    <refine-value idref="ReplaceAProcessLevelToken_chinese" selector="ReplaceAProcessLevelToken_chinese-selector-24" operator="equals" />
    <refine-value idref="ShutDownTheSystem_chinese" selector="ShutDownTheSystem_chinese-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_japanese" selector="ShutDownTheSystem_japanese-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_turkish" selector="ShutDownTheSystem_turkish-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_german" selector="ShutDownTheSystem_german-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_swedish" selector="ShutDownTheSystem_swedish-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_portuguese" selector="ShutDownTheSystem_portuguese-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_french" selector="ShutDownTheSystem_french-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_spanish" selector="ShutDownTheSystem_spanish-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_english" selector="ShutDownTheSystem_english-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_polish" selector="ShutDownTheSystem_polish-selector-11" operator="equals" />
    <refine-value idref="ShutDownTheSystem_italian" selector="ShutDownTheSystem_italian-selector-11" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PublicProfile_var" selector="ApplyLocalConnectionSecurityRules-PublicProfile_var-selector-0" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PublicProfile_var" selector="ApplyLocalFirewallRules-PublicProfile_var-selector-0" operator="equals" />
    <refine-value idref="DisplayANotification-PublicProfile_var" selector="DisplayANotification-PublicProfile_var-selector-1" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-PrivateProfile_var" selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-8" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-PrivateProfile_var" selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-8" operator="equals" />
    <refine-value idref="ApplyLocalConnectionSecurityRules-DomainProfile_var" selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-8" operator="equals" />
    <refine-value idref="ApplyLocalFirewallRules-DomainProfile_var" selector="ApplyLocalFirewallRules-DomainProfile_var-selector-8" operator="equals" />
    <refine-value idref="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var" selector="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var-selector-1" operator="equals" />
    <refine-value idref="AllowMicrosoftServicesToProvideEnhancedSuggestions_var" selector="AllowMicrosoftServicesToProvideEnhancedSuggestions_var-selector-0" operator="equals" />
    <refine-value idref="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var" selector="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffLoadingWebsitesAndContent_var" selector="TurnOffLoadingWebsitesAndContent_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffSendingUTF-8QueryStringsForURLs_var" selector="TurnOffSendingUTF-8QueryStringsForURLs_var-selector-0" operator="equals" />
    <refine-value idref="TurnOn64-bitTabProcesses_var" selector="TurnOn64-bitTabProcesses_var-selector-0" operator="equals" />
    <refine-value idref="InternetZoneDoNotRunAntimalwarePrograms_var" selector="InternetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="IntranetZoneDoNotRunAntimalwarePrograms_var" selector="IntranetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="LocalMachineZoneDoNotRunAntimalwarePrograms_var" selector="LocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var" selector="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var" selector="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="TrustedSitesZoneDoNotRunAntimalwarePrograms_var" selector="TrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffPhoneNumberDetection_var" selector="TurnOffPhoneNumberDetection_var-selector-0" operator="equals" />
    <refine-value idref="UseAdvancedRemoteFXGraphicsForRemoteApp_var" selector="UseAdvancedRemoteFXGraphicsForRemoteApp_var-selector-0" operator="equals" />
    <refine-value idref="PreventSkyDriveFilesFromSyncing_metered__var" selector="PreventSkyDriveFilesFromSyncing_metered__var-selector-0" operator="equals" />
    <refine-value idref="PreventTheUsageOfSkyDriveForFileStorage_var" selector="PreventTheUsageOfSkyDriveForFileStorage_var-selector-0" operator="equals" />
    <refine-value idref="SaveDocumentsAndPicturesToTheLocalPC_var" selector="SaveDocumentsAndPicturesToTheLocalPC_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffAutomaticDownloadAndInstallOfUpdates_var" selector="TurnOffAutomaticDownloadAndInstallOfUpdates_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffAutomaticDownloadOfUpdates_Win8__var" selector="TurnOffAutomaticDownloadOfUpdates_Win8__var-selector-0" operator="equals" />
    <refine-value idref="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var" selector="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSyncApps_var" selector="DoNotSyncApps_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSyncStartSettings_var" selector="DoNotSyncStartSettings_var-selector-0" operator="equals" />
    <refine-value idref="ForceAutomaticSetupForAllUsers_var" selector="ForceAutomaticSetupForAllUsers_var-selector-0" operator="equals" />
    <refine-value idref="AlwaysAutomaticallyRestartAtTheScheduledTime_var" selector="AlwaysAutomaticallyRestartAtTheScheduledTime_var-selector-0" operator="equals" />
    <refine-value idref="DoNotConnectToAnyWUInternetLocations_var" selector="DoNotConnectToAnyWUInternetLocations_var-selector-0" operator="equals" />
    <refine-value idref="AutomaticallyWorkplaceJoinClientComputers_var" selector="AutomaticallyWorkplaceJoinClientComputers_var-selector-0" operator="equals" />
    <refine-value idref="AutomaticallySendMemoryDumps_var" selector="AutomaticallySendMemoryDumps_var-selector-0" operator="equals" />
    <refine-value idref="Sign-inLastInteractiveUserAutomatically_var" selector="Sign-inLastInteractiveUserAutomatically_var-selector-0" operator="equals" />
    <refine-value idref="AllowOnlySystemBackup_var" selector="AllowOnlySystemBackup_var-selector-0" operator="equals" />
    <refine-value idref="DisallowNetworkAsBackupTarget_var" selector="DisallowNetworkAsBackupTarget_var-selector-0" operator="equals" />
    <refine-value idref="DisallowLocallyAttachedStorageAsBackupTarget_var" selector="DisallowLocallyAttachedStorageAsBackupTarget_var-selector-0" operator="equals" />
    <refine-value idref="DisallowOpticalMediaAsBackupTarget_var" selector="DisallowOpticalMediaAsBackupTarget_var-selector-0" operator="equals" />
    <refine-value idref="DisallowRun-onceBackups_var" selector="DisallowRun-onceBackups_var-selector-0" operator="equals" />
    <refine-value idref="ForceASpecificStartBackground_var" selector="ForceASpecificStartBackground_var-selector-0" operator="equals" />
    <refine-value idref="PreventEnablingLockScreenCamera_var" selector="PreventEnablingLockScreenCamera_var-selector-0" operator="equals" />
    <refine-value idref="PreventEnablingLockScreenSlideShow_var" selector="PreventEnablingLockScreenSlideShow_var-selector-0" operator="equals" />
    <refine-value idref="IncludeCommandLineInProcessCreationEvents_var" selector="IncludeCommandLineInProcessCreationEvents_var-selector-0" operator="equals" />
    <refine-value idref="RestrictDelegationOfCredentialsToRemoteServers_var" selector="RestrictDelegationOfCredentialsToRemoteServers_var-selector-0" operator="equals" />
    <refine-value idref="RequestCompoundAuthentication_var" selector="RequestCompoundAuthentication_var-selector-0" operator="equals" />
    <refine-value idref="AlwaysSendCompoundAuthenticationFirst_var" selector="AlwaysSendCompoundAuthenticationFirst_var-selector-0" operator="equals" />
    <refine-value idref="AllowUsersToSelectWhenAPasswordIsRequired_var" selector="AllowUsersToSelectWhenAPasswordIsRequired_var-selector-0" operator="equals" />
    <refine-value idref="DoNotDisplayNetworkSelectionUI_var" selector="DoNotDisplayNetworkSelectionUI_var-selector-0" operator="equals" />
    <refine-value idref="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var" selector="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var-selector-0" operator="equals" />
    <refine-value idref="SlowLinkDetectionConnectionSpeed_var" selector="SlowLinkDetectionConnectionSpeed_var-selector-0" operator="equals" />
    <refine-value idref="ConfigureLogonScriptDelay_var" selector="ConfigureLogonScriptDelay_var-selector-0" operator="equals" />
    <refine-value idref="CachingForServers-SlowLinkValue_milliseconds__var" selector="CachingForServers-SlowLinkValue_milliseconds__var-selector-0" operator="equals" />
    <refine-value idref="CachingForServers-TimeoutValue_milliseconds__var" selector="CachingForServers-TimeoutValue_milliseconds__var-selector-0" operator="equals" />
    <refine-value idref="SlowLinkDetection-WWANConnection_var" selector="SlowLinkDetection-WWANConnection_var-selector-0" operator="equals" />
    <refine-value idref="TurnOffTheAdvertisingID_var" selector="TurnOffTheAdvertisingID_var-selector-0" operator="equals" />
    <refine-value idref="EnableHotspotAuthentication_var" selector="EnableHotspotAuthentication_var-selector-0" operator="equals" />
    <refine-value idref="AllowDevelopmentOfWindowsStoreApps_var" selector="AllowDevelopmentOfWindowsStoreApps_var-selector-0" operator="equals" />
    <refine-value idref="AllowMicrosoftAccountsToBeOptional_var" selector="AllowMicrosoftAccountsToBeOptional_var-selector-0" operator="equals" />
    <refine-value idref="DisableHelpTips_var" selector="DisableHelpTips_var-selector-0" operator="equals" />
    <refine-value idref="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var" selector="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSearchTheWebOrDisplayWebResults_var" selector="DoNotSearchTheWebOrDisplayWebResults_var-selector-0" operator="equals" />
    <refine-value idref="DoNotSearchTheWebOrDisplayWebResults_metered__var" selector="DoNotSearchTheWebOrDisplayWebResults_metered__var-selector-0" operator="equals" />
    <refine-value idref="SetTheSafeSearchSettingForSearch_var" selector="SetTheSafeSearchSettingForSearch_var-selector-0" operator="equals" />
    <refine-value idref="SetWhatInformationIsSharedInSearch_var" selector="SetWhatInformationIsSharedInSearch_var-selector-0" operator="equals" />
  </Profile>
  <Profile id="Windows10" abstract="false">
    <title xml:lang="en">Windows10</title>
    <description xml:lang="en" />    
    <platform idref="cpe:/o:microsoft:windows_10::x86" />
    <platform idref="cpe:/o:microsoft:windows_10::x64" />
       <select idref="Network-LinkLayerTopology_TurnOnResponder_RSPNDR_Driver" selected="true" />
      <select idref="WindowsComponents-WindowsInstaller_DisableIESecurityPromptForWindowsInstallerScripts" selected="true" />
      <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths" selected="true" />
      <select idref="WindowsComponents-WindowsInstaller_EnableUserControlOverInstalls" selected="true" />
      <select idref="PasswordPolicy_EnforcePasswordHistory" selected="true" />
      <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption" selected="true" />
      <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements" selected="true" />
      <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" selected="true" />
      <select idref="AuditSubcategory_AuditAccountLockout" selected="true" />
      <select idref="UserRight_AccessThisComputerFromTheNetwork" selected="true" />
      <select idref="UserRight_BackUpFilesAndDirectories" selected="true" />
      <select idref="UserRight_CreateAPagefile" selected="true" />
      <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection" selected="true" />
      <select idref="NetworkSecurity_ForceLogoffWhenLogonHoursExpire" selected="true" />
      <select idref="DomainMember_MaximumMachineAccountPasswordAge" selected="true" />
      <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" selected="true" />
      <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" selected="true" />
      <select idref="System-LogonDoNotDisplayNetworkSelectionUI" selected="true" />
      <select idref="WinRMClient_DisallowDigestAuthentication" selected="true" />
      <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" selected="true" />
      <select idref="UserRight_LogOnAsAService" selected="true" />
      <select idref="UserRight_LoadAndUnloadDeviceDrivers" selected="true" />
      <select idref="NetworkSecurity_LDAPClientSigningRequirements" selected="true" />
      <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously" selected="true" />
      <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" selected="true" />
      <select idref="NetworkAccess_NamedPipesThatCanBeAccessedAnonymously" selected="true" />
      <select idref="Network-WindowsConnectNow_ConfigurationOfWirelessSettingsUsingWindowsConnectNow" selected="true" />
      <select idref="Network-WindowsConnectNow_ProhibitAccessOfTheWindowsConnectNowWizards" selected="true" />
      <select idref="InteractiveLogon_MachineInactivityLimit" selected="true" />
      <select idref="MSS_PerformRouterDiscovery" selected="true" />
      <select idref="MSS_ScreenSaverGracePeriod" selected="true" />
      <select idref="MSS_SafeDLLSearchMode" selected="true" />
      <select idref="UserRight_LockPagesInMemory" selected="true" />
      <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" selected="true" />
      <select idref="UserRight_CreateGlobalObjects" selected="true" />
      <select idref="UserRight_ImpersonateAClientAfterAuthentication" selected="true" />
      <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" selected="true" />
      <select idref="UserRight_AdjustMemoryQuotasForAProcess" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffHandwritingRecognitionErrorReporting" selected="true" />
      <select idref="WindowsComponents-WindowsRemoteShell_AllowRemoteShellAccess" selected="true" />
      <select idref="MSS_TCPMaxDataRetransmissionsIPv6" selected="true" />
      <select idref="MSS_DisableIPSourceRoutingIPv6" selected="true" />
      <select idref="WindowsComponents-EventLogService-Setup_MaximumLogSize_KB_" selected="true" />
      <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" selected="true" />
      <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" selected="true" />
      <select idref="InteractiveLogon_MachineAccountLockoutThreshold" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile" selected="true" />
      <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile" selected="true" />
      <select idref="WindowsVistaFirewall_FirewallState-DomainProfile" selected="true" />
      <select idref="TerminalServices_SetTimeLimitForActiveButIdleRemoteDesktopServicesSessions" selected="true" />
      <select idref="Network-MicrosoftPeer-to-PeerNetworkingServices_TurnOffMicrosoftPeer-to-PeerNetworkingServices" selected="true" />
      <select idref="Network-LinkLayerTopology_TurnOnMapperI_O_LLTDIO_Driver" selected="true" />
      <select idref="UserRight_DebugPrograms" selected="true" />
      <select idref="UserRight_DenyLogOnThroughTerminalServices" selected="true" />
      <select idref="AutoplayPolicies_TurnOffAutoplay" selected="true" />
      <select idref="UserRight_DenyLogOnAsAService" selected="true" />
      <select idref="AuditSubcategory_ProcessCreation" selected="true" />
      <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" selected="true" />
      <select idref="AuditSubcategory_ComputerAccountManagement" selected="true" />
      <select idref="AuditSubcategory_ApplicationGroupManagement" selected="true" />
      <select idref="AuditSubcategory_UserAccountManagement" selected="true" />
      <select idref="AuditSubcategory_SecurityGroupManagement" selected="true" />
      <select idref="AuditSubcategory_OtherAccountManagementEvents" selected="true" />
      <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_" selected="true" />
      <select idref="InteractiveLogon_SmartCardRemovalBehavior" selected="true" />
      <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" selected="true" />
      <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" selected="true" />
      <select idref="WinRMClient_AllowUnencryptedTraffic" selected="true" />
      <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" selected="true" />
      <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PublicProfile" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PublicProfile" selected="true" />
      <select idref="WindowsInstaller_AlwaysInstallWithElevatedPrivileges" selected="true" />
      <select idref="MSS_NoNameReleaseOnDemand" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PublicProfile" selected="true" />
      <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile" selected="true" />
      <select idref="MSS_KeepAliveTime" selected="true" />
      <select idref="MSS_EnableICMPRedirects" selected="true" />
      <select idref="MSS_EnableAutomaticAdminLogon" selected="true" />
      <select idref="MSS_DisableIPSourceRouting" selected="true" />
      <select idref="System-Logon_TurnOnPINSign-in" selected="true" />
      <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" selected="true" />
      <select idref="NetworkSecurity_AllowPKU2UAuthenticationRequestsToThisComputerToUseOnlineIdentities" selected="true" />
      <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" selected="true" />
      <select idref="SleepSettings_AllowStandbyStates_S1-S3_WhenSleeping_PluggedIn_" selected="true" />
      <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile" selected="true" />
      <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" selected="true" />
      <select idref="WindowsComponents-WindowsExplorer_TurnOffDataExecutionPreventionForExplorer" selected="true" />
      <select idref="WindowsComponents-SearchSetWhatInformationIsSharedInSearch" selected="true" />
      <select idref="OperatingSystemDrives_ConfigureMinimumPINLengthForStartup" selected="true" />
      <select idref="RemoteAssistance_OfferRemoteAssistance" selected="true" />
      <select idref="RemoteAssistance_SolicitedRemoteAssistance" selected="true" />
      <select idref="RemoteProcedureCall_RestrictionsForUnauthenticatedRPCClients" selected="true" />
      <select idref="RemoteProcedureCall_RPCEndpointMapperClient" selected="true" />
      <select idref="RemovableDataDrives_AllowAccessToBitLocker-protectedRemovableDataDrivesFromEarlierVersionsOfWindows" selected="true" />
      <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffRegistrationIfURLConnectionIsReferringToMicrosoft.com" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffWindowsErrorReporting" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffThe_OrderPrints_PictureTask" selected="true" />
      <select idref="UserRight_RestoreFilesAndDirectories" selected="true" />
      <select idref="UserRight_CreateATokenObject" selected="true" />
      <select idref="UserRight_CreatePermanentSharedObjects" selected="true" />
      <select idref="AuditSubcategory_IPsecDriver" selected="true" />
      <select idref="TerminalServices_DoNotAllowDriveRedirection" selected="true" />
      <select idref="UserRight_ProfileSystemPerformance" selected="true" />
      <select idref="AccountLockoutPolicy_AccountLockoutDuration" selected="true" />
      <select idref="AccountLockoutPolicy_AccountLockoutThreshold" selected="true" />
      <select idref="AuditSubcategory_OtherLogon_LogoffEvents" selected="true" />
      <select idref="AuditSubcategory_Logon" selected="true" />
      <select idref="AuditSubcategory_SpecialLogon" selected="true" />
      <select idref="UserRight_ManageAuditingAndSecurityLog" selected="true" />
      <select idref="UserRight_LogOnAsABatchJob" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-DomainProfile" selected="true" />
      <select idref="UserRight_IncreaseSchedulingPriority" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-DomainProfile" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-DomainProfile" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-DomainProfile" selected="true" />
      <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" selected="true" />
      <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" selected="true" />
      <select idref="WindowsComponents-AppRuntimeAllowMicrosoftAccountsToBeOptional" selected="true" />
      <select idref="OperatingSystemDrives_AllowSecuredBootForIntegrityValidation" selected="true" />
      <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenSlideShow" selected="true" />
      <select idref="System-AuditProcessCreationIncludeCommandLineInProcessCreationEvents" selected="true" />
      <select idref="RemovableDataDrives_DenyWriteAccessToRemovableDrivesNotProtectedByBitLocker" selected="true" />
      <select idref="OperatingSystemDrives_AllowEnhancedPINsForStartup" selected="true" />
      <select idref="DomainMember_DisableMachineAccountPasswordChanges" selected="true" />
      <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" selected="true" />
      <select idref="Devices_PreventUsersFromInstallingPrinterDrivers" selected="true" />
      <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_PluggedIn_" selected="true" />
      <select idref="InteractiveLogon_DoNotDisplayLastUserName" selected="true" />
      <select idref="AuditSubcategory_SystemIntegrity" selected="true" />
      <select idref="AuditSubcategory_SecuritySystemExtension" selected="true" />
      <select idref="AuditSubcategory_OtherSystemEvents" selected="true" />
      <select idref="AuditSubcategory_SensitivePrivilegeUse" selected="true" />
      <select idref="UserRight_ReplaceAProcessLevelToken" selected="true" />
      <select idref="UserRight_DenyLogOnLocally" selected="true" />
      <select idref="UserRight_ChangeTheTimeZone" selected="true" />
      <select idref="UserRight_PerformVolumeMaintenanceTasks" selected="true" />
      <select idref="UserRight_ModifyAnObjectLabel" selected="true" />
      <select idref="PasswordPolicy_MinimumPasswordAge" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile" selected="true" />
      <select idref="System-Logon_DoNotEnumerateConnectedUsersOnDomain-joinedComputers" selected="true" />
      <select idref="System-Logon_EnumerateLocalUsersOnDomain-joinedComputers" selected="true" />
      <select idref="PasswordPolicy_MaximumPasswordAge" selected="true" />
      <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" selected="true" />
      <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile" selected="true" />
      <select idref="Accounts_AdministratorAccountStatus" selected="true" />
      <select idref="WinRMService_DisallowWinRMFromStoringRunAsCredentials" selected="true" />
      <select idref="WindowsComponents-WindowsLogonOptionsSign-inLastInteractiveUserAutomaticallyAfterASystem-initiatedRestart" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PublicProfile" selected="true" />
      <select idref="UserRight_GenerateSecurityAudits" selected="true" />
      <select idref="WinRMService_AllowUnencryptedTraffic" selected="true" />
      <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects" selected="true" />
      <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache" selected="true" />
      <select idref="WinRMClient_AllowBasicAuthentication" selected="true" />
      <select idref="UserRight_DenyLogOnAsABatchJob" selected="true" />
      <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" selected="true" />
      <select idref="Accounts_RenameAdministratorAccount" selected="true" />
      <select idref="WinRMService_AllowBasicAuthentication" selected="true" />
      <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" selected="true" />
      <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" selected="true" />
      <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" selected="true" />
      <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" selected="true" />
      <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" selected="true" />
      <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" selected="true" />
      <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" selected="true" />
      <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" selected="true" />
      <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts" selected="true" />
      <select idref="MSS_WarningLevel" selected="true" />
      <select idref="MSS_TCPMaxDataRetransmissions" selected="true" />
      <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" selected="true" />
      <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" selected="true" />
      <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" selected="true" />
      <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" selected="true" />
      <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" selected="true" />
      <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_" selected="true" />
      <select idref="AuditSubcategory_CredentialValidation" selected="true" />
      <select idref="UserRight_CreateSymbolicLinks" selected="true" />
      <select idref="PasswordPolicy_MinimumPasswordLength" selected="true" />
      <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents" selected="true" />
      <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents" selected="true" />
      <select idref="WindowsComponents-EventLogService-System_RetainOldEvents" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffInternetConnectionWizardIfURLConnectionIsReferringToMicrosoft.com" selected="true" />
      <select idref="UserRight_ProfileSingleProcess" selected="true" />
      <select idref="TerminalServices_SetClientConnectionEncryptionLevel" selected="true" />
      <select idref="UserRight_ActAsPartOfTheOperatingSystem" selected="true" />
      <select idref="AuditSubcategory_Logoff" selected="true" />
      <select idref="NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM" selected="true" />
      <select idref="AuditSubcategory_AuditPolicyChange" selected="true" />
      <select idref="NetworkSecurity_AllowLocalSystemNULLSessionFallback" selected="true" />
      <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork" selected="true" />
      <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_" selected="true" />
      <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" selected="true" />
      <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting" selected="true" />
      <select idref="UserRight_AllowLogonLocally" selected="true" />
      <select idref="AuditSubcategory_SecurityStateChange" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" selected="true" />
      <select idref="WindowsComponents-WindowsExplorer_TurnOffShellProtocolProtectedMode" selected="true" />
      <select idref="WindowsComponents-WindowsExplorer_TurnOffHeapTerminationOnCorruption" selected="true" />
      <select idref="TerminalServices_AllowUsersToConnectRemotelyUsingTerminalServices" selected="true" />
      <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved" selected="true" />
      <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" selected="true" />
      <select idref="WindowsComponents-Search_AllowIndexingOfEncryptedFiles" selected="true" />
      <select idref="FileExplorer_ConfigureWindowsSmartScreen" selected="true" />
      <select idref="EarlyLaunchAntimalware_Boot-StartDriverInitializationPolicy" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile" selected="true" />
      <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile" selected="true" />
      <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile" selected="true" />
      <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" selected="true" />
      <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" selected="true" />
      <select idref="WindowsVistaFirewall_FirewallState-PublicProfile" selected="true" />
      <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_OnBattery_" selected="true" />
      <select idref="Network-NetworkConnections_ProhibitInstallationAndConfigurationOfNetworkBridgeOnYourDNSDomainNetwork" selected="true" />
      <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" selected="true" />
      <select idref="Accounts_GuestAccountStatus" selected="true" />
      <select idref="Accounts_RenameGuestAccount" selected="true" />
      <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting" selected="true" />
      <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" selected="true" />
      <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" selected="true" />
      <select idref="Accounts_BlockMicrosoftAccounts" selected="true" />
      <select idref="UserRight_ForceShutdownFromARemoteSystem" selected="true" />
      <select idref="UserRight_AllowLogOnThroughTerminalServices" selected="true" />
      <select idref="AuditSubcategory_AuthenticationPolicyChange" selected="true" />
      <select idref="UserRight_ModifyFirmwareEnvironmentValues" selected="true" />
      <select idref="UserRight_ShutDownTheSystem" selected="true" />
      <select idref="FixedDataDrives_AllowAccessToBitLocker-protectedFixedDataDrivesFromEarlierVersionsOfWindows" selected="true" />
      <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenCamera" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PrivateProfile" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PrivateProfile" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PrivateProfile" selected="true" />
      <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PrivateProfile" selected="true" />
      <select idref="UserRight_ChangeTheSystemTime" selected="true" />
      <select idref="SleepSettings_AllowStandbyStates_S1-S3_WhenSleeping_OnBattery_" selected="true" />
      <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile" selected="true" />
      <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" selected="true" />
      <select idref="LAPS_EnsureLAPSAdmPwdGPOExtension_CSEisinstalled" selected="true" />
      <select idref="WindowsPowerShell_SetTurnonPowerShellTranscription" selected="true" />
      <select idref="InternetCommunicationSettings_SetTurnoffhandwritingpersonalizationdatasharing" selected="true" />
      <select idref="AdministrativeTemplates_Network_MinimizethenumberofsimultaneousconnectionstotheInternetoraWindowsDomain" selected="true" />
      <select idref="TimeProviders_SetEnableWindowsNTPServer" selected="true" />
      <select idref="ConfigureInteractiveLogon_MessageTextForUsersAttemptingToLogOn" selected="true" />
      <select idref="MicrosoftEdge_TurnofftheSmartScreenFilter" selected="true" />
      <select idref="MicrosoftEdge_DontallowSmartScreenFilterwarningoverrides" selected="true" />
      <select idref="WindowsUpdate_ConfigureAutomaticUpdatesScheduledinstallday" selected="true" />
      <select idref="NetworkAccessDoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication" selected="true" />
      <select idref="Store_TurnofftheoffertoupdatetothelatestversionofWindows" selected="true" />
      <select idref="Personalization_SetEnableScreenSaver" selected="true" />
      <select idref="WindowsPowerShell_SetTurnonPowerShellScriptBlockLogging" selected="true" />
      <select idref="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrives" selected="true" />
      <select idref="RemovableDataDrivesAllowDataRecoveryAgent" selected="true" />
      <select idref="OperatingSystemDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption" selected="true" />
      <select idref="SetPreventinstallationofdevicesthatmatchanyofthesedeviceIDs_Alsoapplytomatchingdevicesthatarealreadyinstalled" selected="true" />
      <select idref="AppPrivacy_LetWindowsapps" selected="true" />
      <select idref="SetSystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" selected="true" />
      <select idref="EMET_SetSystemDEP" selected="true" />
      <select idref="OperatingSystemDrives_SetConfigureStorageOfBitLockerRecoveryInformationToADDS" selected="true" />
      <select idref="TimeProviders_SetEnableWindowsNTPClient" selected="true" />
      <select idref="OperatingSystemDrives_SetDoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDS" selected="true" />
      <select idref="RemovableDataDrivesDonotenableBitLockeruntilrecoveryinformationisstoredtoADDSforremovabledatadrives" selected="true" />
      <select idref="MitigationOptions_SetUntrustedFontBlocking" selected="true" />
      <select idref="TemporaryFolders_Donotdeletetempfoldersuponexit" selected="true" />
      <select idref="EMET_SetDefaultProtectionsforInternetExplorer" selected="true" />
      <select idref="CloudContent_TurnoffMicrosoftconsumerexperiences" selected="true" />
      <select idref="Personalization_SetScreenSaverTimeout" selected="true" />
      <select idref="EMET_SetDefaultProtectionsforPopularSoftware" selected="true" />
      <select idref="SoftwareProtectionPlatform_SetTurnoffKMSClientOnlineAVSValidation" selected="true" />
      <select idref="RemovableDataDrivesRestrictcryptoalgorithmsorciphersuites" selected="true" />
      <select idref="DataCollectionandPreviewBuilds_SetAllowTelemetry" selected="true" />
      <select idref="OperatingSystemDrives_SetFirstUnnamedValue" selected="true" />
      <select idref="RemovableDataDrives_SetConfigureUseOfSmartCardsOnRemovableDataDrives_Requireuseofsmartcardsonremovabledatadrives" selected="true" />
      <select idref="RemovableDataDrives_SetConfigureUseOfSmartCardsOnRemovableDataDrives" selected="true" />
      <select idref="DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClasses" selected="true" />
      <select idref="Personalization_SetForceSpecificScreenSaver" selected="true" />
      <select idref="AttachmentManager_SetDoNotPreserveZoneInformationInFileAttachments" selected="true" />
      <select idref="OperatingSystemDrivesConfigureUseOfPasswordsForOperatingSystemDrives" selected="true" />
      <select idref="Choosedriveencryptionmethodandcipherstrength_Windows10_Version1511andlater" selected="true" />
      <select idref="Store_TurnoffAutomaticDownloadandInstallofupdates" selected="true" />
      <select idref="Store_DisableallappsfromWindowsStore" selected="true" />
      <select idref="MicrosoftEdge_TurnoffInPrivatebrowsing" selected="true" />
      <select idref="SetNetworkSecurity_ConfigureencryptiontypesallowedforKerberos" selected="true" />
      <select idref="OperatingSystemDrives_SetConfigureTPMStartupKeyAndPIN" selected="true" />
      <select idref="RSSFeeds_TurnOff_PreventDownloadingOfEnclosures" selected="true" />
      <select idref="LAPS_EnableLocalAdminPasswordManagement" selected="true" />
      <select idref="OperatingSystemDrives_SetSaveBitLockerRecoveryInformationToADDSForOperatingSystemDriv" selected="true" />
      <select idref="DataCollectionandPreviewBuilds_SetToggleusercontroloverInsiderbuilds" selected="true" />
      <select idref="AutoplayPolicies_DefaultBehaviorForAutoRun" selected="true" />
      <select idref="SetMicrosoftNetworkServer_ServerSPNTargetNameValidationLevel" selected="true" />
      <select idref="FixedDataDrivesConfigureUseOfPasswordsForFixedDataDrives" selected="true" />
      <select idref="AppPackageDeployment_SetAllowaWindowsapptoshareapplicationdatabetweenusers" selected="true" />
      <select idref="FixedDataDrivesSetSaveBitLockerRecoveryInformationToActiveDirectoryDomanServices" selected="true" />
      <select idref="AppRuntime_SetBlocklaunchingWindowsStoreappswithWindowsRuntimeAPIaccessfromhostedcontent" selected="true" />
      <select idref="OperatingSystemDrives_SetAllowDataRecoveryAgent" selected="true" />
      <select idref="SCM_PassTheHashMitigations_SetWDigestAuthentication" selected="true" />
      <select idref="Store_TurnofftheStoreapplication" selected="true" />
      <select idref="OperatingSystemDrives_SetSecondUnnamedValue" selected="true" />
      <select idref="RemovableDataDrivesRecoveryKey" selected="true" />
      <select idref="FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrives" selected="true" />
      <select idref="OperatingSystemDrives_SetRequireAdditionalAuthenticationAtStartup" selected="true" />
      <select idref="RemovableDataDrivesRestrictencryptionalgorithmsandciphersuitesallowedforhardwarebasedencryption" selected="true" />
      <select idref="OperatingSystemDrives_SetConfigureTPMStartupPIN" selected="true" />
      <select idref="Search_SetAllowsearchandCortanatouselocation" selected="true" />
      <select idref="WindowsPerformancePerfTrack_Enable_DisablePerfTrack" selected="true" />
      <select idref="WindowsUpdate_DeferUpgradesandUpdates" selected="true" />
      <select idref="AutoplayPolicies_SetDisallowAutoplayfornonvolumedevices" selected="true" />
      <select idref="LAPS_Donotallowpasswordexpirationtimelongerthanrequiredbypolicy" selected="true" />
      <select idref="InternetCommunicationsettings_SetTurnoffHelpExperienceImprovementProgram" selected="true" />
      <select idref="FixedDataDrivesChooseHowBitLocker-protectedFixedDrivesCanBeRecovered" selected="true" />
      <select idref="OperatingSystemDrives_SetChooseHowBitLocker_protectedOperatingSystemDrivesCanBeRecovered" selected="true" />
      <select idref="GroupPolicy_ConfigureDoNotApplyDuringPeriodicBackgroundProcessing" selected="true" />
      <select idref="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable" selected="true" />
      <select idref="System_InternetCommunicationManagement_Turnoffaccesstothestore" selected="true" />
      <select idref="MicrosoftEdge_ConfigureCookies" selected="true" />
      <select idref="MAPS_SetJoinMicrosoftMAPS" selected="true" />
      <select idref="FixedDataDrivesOmitRecoveryOptionsFromTheBitLockerSetupWizard" selected="true" />
      <select idref="RemovableDataDrivesOmitRecoveryOptionsFromTheBitLockerSetupWizard" selected="true" />
      <select idref="OperatingSystemDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable" selected="true" />
      <select idref="DeliveryOptimization_SetDownloadMode" selected="true" />
      <select idref="Logon_Turnoffappnotificationsonthelockscreen" selected="true" />
      <select idref="OneDrive_SetPreventtheusageofOneDriveforfilestorage" selected="true" />
      <select idref="DeviceandResourceRedirection_SetDonotallowCOMportredirection" selected="true" />
      <select idref="WindowsConnectionManager_Prohibitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork" selected="true" />
      <select idref="EMET_DefaultActionandMitigationSettings" selected="true" />
      <select idref="GroupPolicy_TurnOffBackgroundRefreshOfGroupPolicy" selected="true" />
      <select idref="Security_RequireSecureRPCCommunication" selected="true" />
      <select idref="RemovableDataDrivesConfigureStorageOfBitLockerRecoveryInformationToADDS" selected="true" />
      <select idref="NetworkSharing_SetPreventusersfromsharingfileswithintheirprofile" selected="true" />
      <select idref="FixedDataDrivesSecondUnnamedValue" selected="true" />
      <select idref="DataCollectionandPreviewBuilds_Donotshowfeedbacknotifications" selected="true" />
      <select idref="AttachmentManager_SetNotifyAntivirusProgramsWhenOpeningAttachments" selected="true" />
      <select idref="MicrosoftEdge_DontallowSmartScreenFilterwarningoverridesforunverifiedfiles" selected="true" />
      <select idref="DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClassesAlsoApplyToMatchingDevicesThatAreAlreadyInstalled" selected="true" />
      <select idref="Search_SetAllowCortana" selected="true" />
      <select idref="LocaleServices_SetDisallowcopyingofuserinputmethodstothesystemaccountforsignin" selected="true" />
      <select idref="DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClassesPreventInstallationOfDevicesUsingDriversForTheseDeviceSetup" selected="true" />
      <select idref="SetPreventinstallationofdevicesthatmatchanyofthesedeviceIDs" selected="true" />
      <select idref="OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrivesRestrictCryptoAlgorithmsOrCipherSuites" selected="true" />
      <select idref="Setup_ControlEventLogbehaviorwhenthelogfilereachesitsmaximumsize" selected="true" />
      <select idref="CredentialUserInterface_SetDoNotDisplayThePasswordRevealButton" selected="true" />
      <select idref="RegionalandLanguageOptions_AllowInputPersonalization" selected="true" />
      <select idref="WindowsInstaller_SetAlwaysInstallWithElevatedPrivileges" selected="true" />
      <select idref="MicrosoftEdge_TurnoffPasswordManager" selected="true" />
      <select idref="Personalization_SetPasswordProtectTheScreenSaver" selected="true" />
      <select idref="StartMenuandTaskbar_Turnofftoastnotificationsonthelockscreen" selected="true" />
      <select idref="RemovableDataDrivesConfigureUseOfPasswordsForRemovableDataDrives" selected="true" />
      <select idref="MicrosoftEdge_DontallowWebRTCtosharetheLocalHostIPaddress" selected="true" />
      <select idref="RemovableDataDrivesChooseHowBitLocker-protectedRemovableDrivesCanBeRecovered" selected="true" />
      <select idref="WindowsUpdate_SetNoAuto-restartWithLoggedOnUsersForScheduledAutomaticUpdatesInstallations" selected="true" />
      <select idref="MicrosoftEdge_Turnoffaddressbarsearchsuggestions" selected="true" />
      <select idref="WLANSettings_AllowWindowstoautomaticallyconnecttosuggestedopenhotspots_tonetworkssharedbycontacts_andtohotspotsofferingpaidservices" selected="true" />
      <select idref="HomeGroup_SetPreventTheComputerFromJoiningAHomegroup" selected="true" />
      <select idref="TurnOffLocation" selected="true" />
      <select idref="LAPS_PasswordSettings_PasswordAge" selected="true" />
      <select idref="Kerberos_SetSupportdeviceauthenticationusingcertificate" selected="true" />
      <select idref="SetMSS_DisableSavePassword_PreventTheDial_upPasswordFromBeingSaved" selected="true" />
      <select idref="TemporaryFolders_SetDoNotUseTemporaryFoldersPerSession" selected="true" />
      <select idref="Playback_PreventCodecDownload" selected="true" />
      <select idref="FixedDataDrivesSaveBitLockerRecoveryInformationToActiveDirectoryDomanServices" selected="true" />
      <select idref="FixedDataDrivesFirstUnnamedValue" selected="true" />
      <select idref="EMET_SetSystemASLR" selected="true" />
      <select idref="EMET_SetSystemSEHOP" selected="true" />
      <select idref="FacialFeatures_Useenhancedantispoofingwhenavailable" selected="true" />
      <select idref="RemovableDataDrivesConfigureuseofhardwarebasedencryptionforremovabledatadrives" selected="true" />
      <select idref="RemovableDataDrivesUseBitLockersoftwarebasedencryptionwhenhardwareencryptionisnotavailable" selected="true" />
      <select idref="RemovableDataDrivesSetSaveBitLockerRecoveryInformationToADDSForRemovableDataDrives" selected="true" />
      <select idref="WindowsUpdate_ConfigureAutomaticUpdates" selected="true" />
      <select idref="OperatingSystemDrives_SetAllowBitLockerWithoutACompatibleTPM" selected="true" />
      <select idref="InternetCommunicationSettings_TurnOffWindowsCustomerExperienceImprovementProgram" selected="true" />
      <select idref="OperatingSystemDrives_SetOmitRecoveryOptionsFromTheBitLockerSetupWizard" selected="true" />
      <select idref="DeviceAndResourceRedirection_DoNotAllowLPTPortRedirection" selected="true" />
      <select idref="DeviceAndResourceRedirection_DoNotAllowSupportedPlugAndPlayDeviceRedirection" selected="true" />
      <select idref="OperatingSystemDrives_SetConfigureTPMStartupKey" selected="true" />
      <select idref="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesRestrictCryptoAlgorithmsOrCipherSuites" selected="true" />
      <select idref="MicrosoftSupportDiagnosticTool_TurnOnMSDTInteractiveCommunicationWithSupportProvider" selected="true" />
      <select idref="NetworkConnections_RequireDomainUsersToElevateWhenSettingANetwork_sLocation" selected="true" />
      <select idref="FixedDataDrivesDoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDSForFixedDataDrives" selected="true" />
      <select idref="MicrosoftEdge_TurnoffPopupBlocker" selected="true" />
      <select idref="DataCollectionandPreviewBuilds_SetDisableprereleasefeaturesorsettings" selected="true" />
      <select idref="GroupPolicy_ConfigureProcessEvenIfTheGroupPolicyObjectsHaveNotChanged" selected="true" />
      <select idref="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption" selected="true" />
      <select idref="LAPS_PasswordSettings_PasswordComplexity" selected="true" />
      <select idref="EMET_SetDefaultProtectionsforRecommendedSoftware" selected="true" />
      <select idref="LanmanWorkstation_Enableinsecureguestlogons" selected="true" />
      <select idref="SetInteractiveLogon_PromptUserToChangePasswordBeforeExpiration" selected="true" />
      <select idref="OperatingSystemDrives_SetConfigureTPMStartup" selected="true" />
      <select idref="FixedDataDrivesAllowDataRecoveryAgent" selected="true" />
      <select idref="LAPS_PasswordSettings_PasswordLength" selected="true" />
      <select idref="RemovableDataDrivesRecoveryPassword" selected="true" />
      <select idref="OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrives" selected="true" />
      <select idref="SCMPassTheHashMitigationsSetApplyUACRestrictionsToLocalAccountsOnNetworkLogons" selected="true" />
      <select idref="FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrivesRequireuseofsmartcardsonfixeddatadrives" selected="true" />
      <select idref="SessionTimeLimits_Setatimelimitfordisconnectedsessions" selected="true" />
  </Profile>
  <Profile id="WindowsServer2016DC" abstract="false">
    <title xml:lang="en">Windows Server 2016 - DC</title>
    <description xml:lang="en" />    
    <platform idref="cpe:/o:microsoft:windows_server_2016:-" />
    <select idref="PasswordPolicy_EnforcePasswordHistory"  selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge"  selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge"  selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength"  selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements"  selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption"  selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration"  selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold"  selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter"  selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork"  selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem"  selected="true" />
    <select idref="UserRight_AddWorkstationsToDomain"  selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess"  selected="true" />
    <select idref="UserRight_AllowLogonLocally"  selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices"  selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories"  selected="true" />
    <select idref="UserRight_ChangeTheSystemTime"  selected="true" />
    <select idref="UserRight_ChangeTheTimeZone"  selected="true" />
    <select idref="UserRight_CreateAPagefile"  selected="true" />
    <select idref="UserRight_CreateATokenObject"  selected="true" />
    <select idref="UserRight_CreateGlobalObjects"  selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects"  selected="true" />
    <select idref="UserRight_CreateSymbolicLinks"  selected="true" />
    <select idref="UserRight_DebugPrograms"  selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork"  selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob"  selected="true" />
    <select idref="UserRight_DenyLogOnAsAService"  selected="true" />
    <select idref="UserRight_DenyLogOnLocally"  selected="true" />
    <select idref="UserRight_DenyLogOnThroughTerminalServices"  selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation"  selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem"  selected="true" />
    <select idref="UserRight_GenerateSecurityAudits"  selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication"  selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority"  selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers"  selected="true" />
    <select idref="UserRight_LockPagesInMemory"  selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog"  selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel"  selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues"  selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks"  selected="true" />
    <select idref="UserRight_ProfileSingleProcess"  selected="true" />
    <select idref="UserRight_ProfileSystemPerformance"  selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken"  selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories"  selected="true" />
    <select idref="UserRight_ShutDownTheSystem"  selected="true" />
    <select idref="UserRight_SynchronizeDirectoryServiceData"  selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects"  selected="true" />
    <select idref="Accounts_AdministratorAccountStatus"  selected="true" />
    <select idref="Accounts_BlockMicrosoftAccounts"  selected="true" />
    <select idref="Accounts_GuestAccountStatus"  selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly"  selected="true" />
    <select idref="Accounts_RenameAdministratorAccount"  selected="true" />
    <select idref="Accounts_RenameGuestAccount"  selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings"  selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits"  selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting"  selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers"  selected="true" />
    <select idref="DomainController_AllowServerOperatorsToScheduleTasks"  selected="true" />
    <select idref="DomainController_LDAPServerSigningRequirements"  selected="true" />
    <select idref="DomainController_RefuseMachineAccountPasswordChanges"  selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_"  selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_"  selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_"  selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges"  selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge"  selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey"  selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName"  selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL"  selected="true" />
    <select idref="InteractiveLogon_MachineInactivityLimit"  selected="true" />
    <select idref="ConfigureInteractiveLogon_MessageTextForUsersAttemptingToLogOn"  selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn"  selected="true" />
    <select idref="SetInteractiveLogon_PromptUserToChangePasswordBeforeExpiration"  selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior"  selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_"  selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_"  selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers"  selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession"  selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_"  selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_"  selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire"  selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers"  selected="true" />
    <select idref="NetworkAccess_NamedPipesThatCanBeAccessedAnonymously"  selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths"  selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths"  selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares"  selected="true" />
    <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously"  selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts"  selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM"  selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemNULLSessionFallback"  selected="true" />
    <select idref="NetworkSecurity_AllowPKU2UAuthenticationRequestsToThisComputerToUseOnlineIdentities"  selected="true" />
    <select idref="SetNetworkSecurity_ConfigureencryptiontypesallowedforKerberos"  selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange"  selected="true" />
    <select idref="NetworkSecurity_ForceLogoffWhenLogonHoursExpire"  selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting"  selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements"  selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients"  selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers"  selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting"  selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems"  selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_"  selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount"  selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop"  selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode"  selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers"  selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation"  selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations"  selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode"  selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation"  selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations"  selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PublicProfile"  selected="true" />
    <select idref="AuditSubcategory_CredentialValidation"  selected="true" />
    <select idref="AuditSubcategory_ApplicationGroupManagement"  selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement"  selected="true" />
    <select idref="AuditSubcategory_DistributionGroupManagement"  selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents"  selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement"  selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement"  selected="true" />
    <select idref="AuditSubcategory_ProcessCreation"  selected="true" />
    <select idref="AuditPolicy_AuditDirectoryServiceAccess"  selected="true" />
    <select idref="AuditSubcategory_DirectoryServiceChanges"  selected="true" />
    <select idref="AuditSubcategory_AuditAccountLockout"  selected="true" />
    <select idref="AuditSubcategory_Logoff"  selected="true" />
    <select idref="AuditSubcategory_Logon"  selected="true" />
    <select idref="AuditSubcategory_OtherLogon_LogoffEvents"  selected="true" />
    <select idref="AuditSubcategory_SpecialLogon"  selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange"  selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange"  selected="true" />
    <select idref="AuditSubcategory_AuthorizationPolicyChange"  selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse"  selected="true" />
    <select idref="AuditSubcategory_IPsecDriver"  selected="true" />
    <select idref="AuditSubcategory_OtherSystemEvents"  selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange"  selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension"  selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity"  selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenCamera"  selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenSlideShow"  selected="true" />
    <select idref="RegionalandLanguageOptions_AllowInputPersonalization"  selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon"  selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6"  selected="true" />
    <select idref="MSS_DisableIPSourceRouting"  selected="true" />
    <select idref="MSS_EnableICMPRedirects"  selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand"  selected="true" />
    <select idref="MSS_SafeDLLSearchMode"  selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod"  selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissions"  selected="true" />
    <select idref="MSS_WarningLevel"  selected="true" />
    <select idref="DNSClientNetBIOSNodeType"  selected="true" />
    <select idref="LanmanWorkstation_Enableinsecureguestlogons"  selected="true" />
    <select idref="NetworkConnections_WindowsFirewall"  selected="true" />
    <select idref="Network-NetworkConnections_ProhibitInstallationAndConfigurationOfNetworkBridgeOnYourDNSDomainNetwork"  selected="true" />
    <select idref="Network-NetworkConnections_ProhibitUseOfInternetConnectionSharingOnYourDNSDomainNetwork"  selected="true" />
    <select idref="NetworkConnections_RequireDomainUsersToElevateWhenSettingANetwork_sLocation"  selected="true" />
    <select idref="IPv6TransitionTechnologies"  selected="true" />
    <select idref="AdministrativeTemplates_Network_MinimizethenumberofsimultaneousconnectionstotheInternetoraWindowsDomain"  selected="true" />
    <select idref="SCM_PassTheHashMitigations_SetWDigestAuthentication"  selected="true" />
    <select idref="System-AuditProcessCreationIncludeCommandLineInProcessCreationEvents"  selected="true" />
    <select idref="EarlyLaunchAntimalware_Boot-StartDriverInitializationPolicy"  selected="true" />
    <select idref="GroupPolicy_Loggingandtracing"  selected="true" />
    <select idref="GroupPolicy_ConfigureDoNotApplyDuringPeriodicBackgroundProcessing"  selected="true" />
    <select idref="GroupPolicy_ConfigureProcessEvenIfTheGroupPolicyObjectsHaveNotChanged"  selected="true" />
    <select idref="System-GroupPolicyContinueExperiencesOnThisDevice"  selected="true" />
    <select idref="GroupPolicy_TurnOffBackgroundRefreshOfGroupPolicy"  selected="true" />
    <select idref="System-LogonBlockUserFromShowingAccountDetailsOnSignin"  selected="true" />
    <select idref="System-LogonDoNotDisplayNetworkSelectionUI"  selected="true" />
    <select idref="System-Logon_DoNotEnumerateConnectedUsersOnDomain-joinedComputers"  selected="true" />
    <select idref="System-Logon_EnumerateLocalUsersOnDomain-joinedComputers"  selected="true" />
    <select idref="Logon_Turnoffappnotificationsonthelockscreen"  selected="true" />
    <select idref="System-Logon_TurnOnPINSign-in"  selected="true" />
    <select idref="MitigationOptions_SetUntrustedFontBlocking"  selected="true" />
    <select idref="RemoteAssistance_OfferRemoteAssistance"  selected="true" />
    <select idref="RemoteAssistance_SolicitedRemoteAssistance"  selected="true" />
    <select idref="WindowsComponents-AppRuntimeAllowMicrosoftAccountsToBeOptional"  selected="true" />
    <select idref="AutoplayPolicies_SetDisallowAutoplayfornonvolumedevices"  selected="true" />
    <select idref="AutoplayPolicies_DefaultBehaviorForAutoRun"  selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay"  selected="true" />
    <select idref="FacialFeatures_Useenhancedantispoofingwhenavailable"  selected="true" />
    <select idref="CloudContent_TurnoffMicrosoftconsumerexperiences"  selected="true" />
    <select idref="WindowsComponents-RequirePinForPairing"  selected="true" />
    <select idref="CredentialUserInterface_SetDoNotDisplayThePasswordRevealButton"  selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation"  selected="true" />
    <select idref="DataCollectionandPreviewBuilds_SetAllowTelemetry"  selected="true" />
    <select idref="DataCollectionandPreviewBuilds_SetDisableprereleasefeaturesorsettings"  selected="true" />
    <select idref="DataCollectionandPreviewBuilds_Donotshowfeedbacknotifications"  selected="true" />
    <select idref="DataCollectionandPreviewBuilds_SetToggleusercontroloverInsiderbuilds"  selected="true" />
    <select idref="EMET_DefaultActionandMitigationSettings" selected="true" />
    <select idref="EMET_SetDefaultProtectionsforInternetExplorer"  selected="true" />
    <select idref="EMET_SetDefaultProtectionsforPopularSoftware"  selected="true" />
    <select idref="EMET_SetDefaultProtectionsforRecommendedSoftware"  selected="true" />
    <select idref="EMET_SetSystemASLR"  selected="true" />
    <select idref="EMET_SetSystemDEP"  selected="true" />
    <select idref="EMET_SetSystemSEHOP"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_"  selected="true" />
    <select idref="Setup_ControlEventLogbehaviorwhenthelogfilereachesitsmaximumsize"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Setup_MaximumLogSize_KB_"  selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents"  selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_"  selected="true" />
    <select idref="FileExplorer_ConfigureWindowsSmartScreen"  selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffDataExecutionPreventionForExplorer"  selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffHeapTerminationOnCorruption"  selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffShellProtocolProtectedMode"  selected="true" />
    <select idref="MicrosoftEdge_ConfigureCookies"  selected="true" />
    <select idref="MicrosoftEdge_Turnoffaddressbarsearchsuggestions"  selected="true" />
    <select idref="MicrosoftEdge_TurnoffInPrivatebrowsing"  selected="true" />
    <select idref="MicrosoftEdge_TurnoffPasswordManager"  selected="true" />
    <select idref="MicrosoftEdge_TurnofftheSmartScreenFilter"  selected="true" />
    <select idref="OneDrive_SetPreventtheusageofOneDriveforfilestorage"  selected="true" />
    <select idref="RemoteDesktopConnectionClient_RemoteFXUSBDeviceRedirection"  selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved"  selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection"  selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection"  selected="true" />
    <select idref="Security_RequireSecureRPCCommunication"  selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel"  selected="true" />
    <select idref="TemporaryFolders_Donotdeletetempfoldersuponexit"  selected="true" />
    <select idref="TemporaryFolders_SetDoNotUseTemporaryFoldersPerSession"  selected="true" />
    <select idref="RSSFeeds_TurnOff_PreventDownloadingOfEnclosures"  selected="true" />
    <select idref="Search_OCR"  selected="true" />
    <select idref="Search_SetAllowCortana"  selected="true" />
    <select idref="Search_SetAllowCortanaAboveLockScreen"  selected="true" />
    <select idref="WindowsComponents-Search_AllowIndexingOfEncryptedFiles"  selected="true" />
    <select idref="Search_SetAllowsearchandCortanatouselocation"  selected="true" />
    <select idref="Store_TurnoffAutomaticDownloadandInstallofupdates"  selected="true" />
    <select idref="Store_TurnofftheoffertoupdatetothelatestversionofWindows"  selected="true" />
    <select idref="WindowsInkWorkspaceAllowWindowsInkWorkspace"  selected="true" />
    <select idref="WindowsComponents-WindowsInstaller_EnableUserControlOverInstalls"  selected="true" />
    <select idref="WindowsInstaller_AlwaysInstallWithElevatedPrivileges"  selected="true" />
    <select idref="WindowsComponents-WindowsLogonOptionsSign-inLastInteractiveUserAutomaticallyAfterASystem-initiatedRestart"  selected="true" />
    <select idref="WindowsPowerShell_SetTurnonPowerShellScriptBlockLogging"  selected="true" />
    <select idref="WindowsPowerShell_SetTurnonPowerShellTranscription"  selected="true" />
    <select idref="WinRMClient_AllowBasicAuthentication"  selected="true" />
    <select idref="WinRMClient_AllowUnencryptedTraffic"  selected="true" />
    <select idref="WinRMClient_DisallowDigestAuthentication"  selected="true" />
    <select idref="WinRMService_AllowBasicAuthentication"  selected="true" />
    <select idref="WinRMService_AllowUnencryptedTraffic"  selected="true" />
    <select idref="WinRMService_DisallowWinRMFromStoringRunAsCredentials"  selected="true" />
    <select idref="WindowsUpdate_ConfigureAutomaticUpdates"  selected="true" />
    <select idref="WindowsUpdate_ConfigureAutomaticUpdatesScheduledinstallday"  selected="true" />
    <select idref="DeferUpdatesSelectWhenQualityUpdatesAreReceived"  selected="true" />
    <select idref="DeferWindowsUpdatesSelectWhenFeatureUpdatesAreReceived"  selected="true" />
    <select idref="WindowsUpdate_SetNoAuto-restartWithLoggedOnUsersForScheduledAutomaticUpdatesInstallations"  selected="true" />
    <select idref="Personalization_SetEnableScreenSaver"  selected="true" />
    <select idref="Personalization_SetForceSpecificScreenSaver"  selected="true" />
    <select idref="Personalization_SetPasswordProtectTheScreenSaver"  selected="true" />
    <select idref="Personalization_SetScreenSaverTimeout"  selected="true" />
    <select idref="StartMenuandTaskbar_Turnofftoastnotificationsonthelockscreen"  selected="true" />
    <select idref="AttachmentManager_SetDoNotPreserveZoneInformationInFileAttachments"  selected="true" />
    <select idref="AttachmentManager_SetNotifyAntivirusProgramsWhenOpeningAttachments"  selected="true" />
    <select idref="CloudContentDoNotSuggestThird-partyContentInWindowsSpotlight"  selected="true" />
    <select idref="NetworkSharing_SetPreventusersfromsharingfileswithintheirprofile"  selected="true" />
    <select idref="WindowsInstaller_SetAlwaysInstallWithElevatedPrivileges"  selected="true" />
    <select idref="UserRight_LogOnAsABatchJob"  selected="true" />
    <select idref="CloudContentConfigureWindowsSpotlightOnLockScreen"  selected="true" />
    <select idref="CloudContentTurnOffAllWindowsSpotlightFeatures"  selected="true" />
    <select idref="Playback_PreventCodecDownload"  selected="true" />
    <select idref="DeviceandResourceRedirection_SetDonotallowCOMportredirection"  selected="true" />
    <select idref="Connections_RestrictRemoteDesktopServicesUsersToASingleRemoteDesktopServicesSession"  selected="true" />
    <select idref="NetworkAccessDoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication"  selected="true" />
    <select idref="MSS_KeepAliveTime"  selected="true" />
    <select idref="MicrosoftEdge_TurnoffPopupBlocker"  selected="true" />
    <select idref="InternetCommunicationsettings_SetTurnoffHelpExperienceImprovementProgram"  selected="true" />
    <select idref="WindowsComponents-WindowsRemoteManagement_WinRM_-WinRMServiceAllowRemoteServerManagementThroughWinRM"  selected="true" />
    <select idref="WindowsComponents-WindowsRemoteShell_AllowRemoteShellAccess"  selected="true" />
    <select idref="MicrosoftEdge_DontallowSmartScreenFilterwarningoverrides"  selected="true" />
    <select idref="MicrosoftEdge_DontallowSmartScreenFilterwarningoverridesforunverifiedfiles"  selected="true" />
    <select idref="MicrosoftEdge_DontallowWebRTCtosharetheLocalHostIPaddress"  selected="true" />
    <select idref="DeviceAndResourceRedirection_DoNotAllowLPTPortRedirection"  selected="true" />
    <select idref="DeviceAndResourceRedirection_DoNotAllowSupportedPlugAndPlayDeviceRedirection"  selected="true" />
    <select idref="TerminalServices_SetTimeLimitForActiveButIdleRemoteDesktopServicesSessions"  selected="true" />
    <select idref="SessionTimeLimits_Setatimelimitfordisconnectedsessions"  selected="true" />
    <select idref="SoftwareProtectionPlatform_SetTurnoffKMSClientOnlineAVSValidation"  selected="true" />
    <select idref="WindowsComponents-WindowsInstaller_DisableIESecurityPromptForWindowsInstallerScripts"  selected="true" />
    <select idref="Store_DisableallappsfromWindowsStore"  selected="true" />
    <select idref="Network-WindowsConnectNow_ProhibitAccessOfTheWindowsConnectNowWizards"  selected="true" />
    <select idref="MSS_PerformRouterDiscovery"  selected="true" />
    <select idref="Network-WindowsConnectNow_ConfigurationOfWirelessSettingsUsingWindowsConnectNow"  selected="true" />
    <select idref="Parameters_DisableIPv6"  selected="true" />
    <select idref="Network-LinkLayerTopology_TurnOnResponder_RSPNDR_Driver"  selected="true" />
    <select idref="Network-LinkLayerTopology_TurnOnMapperI_O_LLTDIO_Driver"  selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissionsIPv6"  selected="true" />
    <select idref="FontsEnableFontProviders"  selected="true" />
    <select idref="Network-MicrosoftPeer-to-PeerNetworkingServices_TurnOffMicrosoftPeer-to-PeerNetworkingServices"  selected="true" />
    <select idref="System_InternetCommunicationManagement_Turnoffaccesstothestore"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP"  selected="true" />
    <select idref="InternetCommunicationSettings_SetTurnoffhandwritingpersonalizationdatasharing"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffHandwritingRecognitionErrorReporting"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetConnectionWizardIfURLConnectionIsReferringToMicrosoft.com"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffRegistrationIfURLConnectionIsReferringToMicrosoft.com"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_OrderPrints_PictureTask"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsCustomerExperienceImprovementProgram"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsErrorReporting"  selected="true" />
    <select idref="Kerberos_SetSupportdeviceauthenticationusingcertificate"  selected="true" />
    <select idref="LocaleServices_SetDisallowcopyingofuserinputmethodstothesystemaccountforsignin"  selected="true" />
    <select idref="PowerManagement_OnBattery_-AllowNetworkConnectivityDuringConnectedStandby_onBattery_"  selected="true" />
    <select idref="PowerManagement-AllowNetworkConnectivityDuringConnectedstandby_pluggedIn_"  selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_OnBattery_"  selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_PluggedIn_"  selected="true" />
    <select idref="MicrosoftSupportDiagnosticTool_TurnOnMSDTInteractiveCommunicationWithSupportProvider"  selected="true" />
    <select idref="WindowsPerformancePerfTrack_Enable_DisablePerfTrack"  selected="true" />
    <select idref="System-UserProfilesTurnOffTheAdvertisingID"  selected="true" />
    <select idref="TimeProviders_SetEnableWindowsNTPClient"  selected="true" />
    <select idref="AppPackageDeployment_SetAllowaWindowsapptoshareapplicationdatabetweenusers"  selected="true" />
    <select idref="AppPrivacy_LetWindowsapps"  selected="true" />
    <select idref="AppRuntime_SetBlocklaunchingWindowsStoreappswithWindowsRuntimeAPIaccessfromhostedcontent"  selected="true" />
    <select idref="WindowsComponents-AllowUseOfCamera"  selected="true" />
    <select idref="TurnOffLocation"  selected="true" />
    <select idref="MicrosoftEdge-AllowExtensions"  selected="true" />
    <select idref="MicrosoftEdge-PreventAccessToTheAboutflagsPageInMicrosoftEdge"  selected="true" />
    <select idref="Store_TurnofftheStoreapplication"  selected="true" />
    <select idref="MAPS_SetJoinMicrosoftMAPS"  selected="true" />
    <select idref="ReportingConfigureWatsonEvents"  selected="true" />
    <select idref="WindowsInkWorkspaceAllowSuggestedAppsInWindowsInkWorkspace"  selected="true" />
  </Profile>    
  <Profile id="WindowsServer2016MS" abstract="false">
    <title xml:lang="en">Windows Server 2016 - MS</title>
    <description xml:lang="en" />    
    <platform idref="cpe:/o:microsoft:windows_server_2016:-" />
    <select idref="PasswordPolicy_EnforcePasswordHistory"  selected="true" />
    <select idref="PasswordPolicy_MaximumPasswordAge"  selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordAge"  selected="true" />
    <select idref="PasswordPolicy_MinimumPasswordLength"  selected="true" />
    <select idref="PasswordPolicy_PasswordMustMeetComplexityRequirements"  selected="true" />
    <select idref="PasswordPolicy_StorePasswordsUsingReversibleEncryption"  selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutDuration"  selected="true" />
    <select idref="AccountLockoutPolicy_AccountLockoutThreshold"  selected="true" />
    <select idref="AccountLockoutPolicy_ResetAccountLockoutCounterAfter"  selected="true" />
    <select idref="UserRight_AccessThisComputerFromTheNetwork"  selected="true" />
    <select idref="UserRight_ActAsPartOfTheOperatingSystem"  selected="true" />
    <select idref="UserRight_AdjustMemoryQuotasForAProcess"  selected="true" />
    <select idref="UserRight_AllowLogonLocally"  selected="true" />
    <select idref="UserRight_AllowLogOnThroughTerminalServices"  selected="true" />
    <select idref="UserRight_BackUpFilesAndDirectories"  selected="true" />
    <select idref="UserRight_ChangeTheSystemTime"  selected="true" />
    <select idref="UserRight_ChangeTheTimeZone"  selected="true" />
    <select idref="UserRight_CreateAPagefile"  selected="true" />
    <select idref="UserRight_CreateATokenObject"  selected="true" />
    <select idref="UserRight_CreateGlobalObjects"  selected="true" />
    <select idref="UserRight_CreatePermanentSharedObjects"  selected="true" />
    <select idref="UserRight_CreateSymbolicLinks"  selected="true" />
    <select idref="UserRight_DebugPrograms"  selected="true" />
    <select idref="UserRight_DenyAccessToThisComputerFromTheNetwork"  selected="true" />
    <select idref="UserRight_DenyLogOnAsABatchJob"  selected="true" />
    <select idref="UserRight_DenyLogOnAsAService"  selected="true" />
    <select idref="UserRight_DenyLogOnLocally"  selected="true" />
    <select idref="UserRight_DenyLogOnThroughTerminalServices"  selected="true" />
    <select idref="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation"  selected="true" />
    <select idref="UserRight_ForceShutdownFromARemoteSystem"  selected="true" />
    <select idref="UserRight_GenerateSecurityAudits"  selected="true" />
    <select idref="UserRight_ImpersonateAClientAfterAuthentication"  selected="true" />
    <select idref="UserRight_IncreaseSchedulingPriority"  selected="true" />
    <select idref="UserRight_LoadAndUnloadDeviceDrivers"  selected="true" />
    <select idref="UserRight_LockPagesInMemory"  selected="true" />
    <select idref="UserRight_ManageAuditingAndSecurityLog"  selected="true" />
    <select idref="UserRight_ModifyAnObjectLabel"  selected="true" />
    <select idref="UserRight_ModifyFirmwareEnvironmentValues"  selected="true" />
    <select idref="UserRight_PerformVolumeMaintenanceTasks"  selected="true" />
    <select idref="UserRight_ProfileSingleProcess"  selected="true" />
    <select idref="UserRight_ProfileSystemPerformance"  selected="true" />
    <select idref="UserRight_ReplaceAProcessLevelToken"  selected="true" />
    <select idref="UserRight_RestoreFilesAndDirectories"  selected="true" />
    <select idref="UserRight_ShutDownTheSystem"  selected="true" />
    <select idref="UserRight_TakeOwnershipOfFilesOrOtherObjects"  selected="true" />
    <select idref="Accounts_AdministratorAccountStatus"  selected="true" />
    <select idref="Accounts_BlockMicrosoftAccounts"  selected="true" />
    <select idref="Accounts_GuestAccountStatus"  selected="true" />
    <select idref="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly"  selected="true" />
    <select idref="Accounts_RenameAdministratorAccount"  selected="true" />
    <select idref="Accounts_RenameGuestAccount"  selected="true" />
    <select idref="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings"  selected="true" />
    <select idref="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits"  selected="true" />
    <select idref="Devices_AllowedToFormatAndEjectRemovableMediaSetting"  selected="true" />
    <select idref="Devices_PreventUsersFromInstallingPrinterDrivers"  selected="true" />
    <select idref="DomainController_AllowServerOperatorsToScheduleTasks"  selected="true" />
    <select idref="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_"  selected="true" />
    <select idref="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_"  selected="true" />
    <select idref="DomainMember_DigitallySignSecureChannelData_WhenPossible_"  selected="true" />
    <select idref="DomainMember_DisableMachineAccountPasswordChanges"  selected="true" />
    <select idref="DomainMember_MaximumMachineAccountPasswordAge"  selected="true" />
    <select idref="DomainMember_RequireStrong_Windows2000OrLater_SessionKey"  selected="true" />
    <select idref="InteractiveLogon_DoNotDisplayLastUserName"  selected="true" />
    <select idref="InteractiveLogon_DoNotRequireCTRL_ALT_DEL"  selected="true" />
    <select idref="InteractiveLogon_MachineInactivityLimit"  selected="true" />
    <select idref="ConfigureInteractiveLogon_MessageTextForUsersAttemptingToLogOn"  selected="true" />
    <select idref="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn"  selected="true" />
    <select idref="SetInteractiveLogon_PromptUserToChangePasswordBeforeExpiration"  selected="true" />
    <select idref="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock"  selected="true" />
    <select idref="InteractiveLogon_SmartCardRemovalBehavior"  selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_Always_"  selected="true" />
    <select idref="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_"  selected="true" />
    <select idref="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers"  selected="true" />
    <select idref="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession"  selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_Always_"  selected="true" />
    <select idref="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_"  selected="true" />
    <select idref="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire"  selected="true" />
    <select idref="SetMicrosoftNetworkServer_ServerSPNTargetNameValidationLevel"  selected="true" />
    <select idref="NetworkAccessRestrictClientsAllowedToMakeRemoteCallsToSAM"  selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts"  selected="true" />
    <select idref="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares"  selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissions"  selected="true" />
    <select idref="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers"  selected="true" />
    <select idref="NetworkAccess_NamedPipesThatCanBeAccessedAnonymously"  selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPaths"  selected="true" />
    <select idref="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths"  selected="true" />
    <select idref="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares"  selected="true" />
    <select idref="NetworkAccess_SharesThatCanBeAccessedAnonymously"  selected="true" />
    <select idref="NetworkAccess_SharingAndSecurityModelForLocalAccounts"  selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM"  selected="true" />
    <select idref="NetworkSecurity_AllowLocalSystemNULLSessionFallback"  selected="true" />
    <select idref="NetworkSecurity_AllowPKU2UAuthenticationRequestsToThisComputerToUseOnlineIdentities"  selected="true" />
    <select idref="SetNetworkSecurity_ConfigureencryptiontypesallowedforKerberos"  selected="true" />
    <select idref="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange"  selected="true" />
    <select idref="NetworkSecurity_ForceLogoffWhenLogonHoursExpire"  selected="true" />
    <select idref="NetworkSecurity_LANManagerAuthenticationLevelSetting"  selected="true" />
    <select idref="NetworkSecurity_LDAPClientSigningRequirements"  selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients"  selected="true" />
    <select idref="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers"  selected="true" />
    <select idref="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting"  selected="true" />
    <select idref="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems"  selected="true" />
    <select idref="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_"  selected="true" />
    <select idref="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount"  selected="true" />
    <select idref="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop"  selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode"  selected="true" />
    <select idref="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers"  selected="true" />
    <select idref="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation"  selected="true" />
    <select idref="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations"  selected="true" />
    <select idref="UserAccountControl_RunAllAdministratorsInAdminApprovalMode"  selected="true" />
    <select idref="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation"  selected="true" />
    <select idref="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations"  selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-DomainProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-DomainProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PrivateProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PrivateProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_FirewallState-PublicProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_InboundConnections-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_DisplayANotification-PublicProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile"  selected="true" />
    <select idref="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PublicProfile"  selected="true" />
    <select idref="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PublicProfile"  selected="true" />
    <select idref="AuditSubcategory_CredentialValidation"  selected="true" />
    <select idref="AuditSubcategory_ApplicationGroupManagement"  selected="true" />
    <select idref="AuditSubcategory_ComputerAccountManagement"  selected="true" />
    <select idref="AuditSubcategory_OtherAccountManagementEvents"  selected="true" />
    <select idref="AuditSubcategory_SecurityGroupManagement"  selected="true" />
    <select idref="AuditSubcategory_UserAccountManagement"  selected="true" />
    <select idref="AuditSubcategory_ProcessCreation"  selected="true" />
    <select idref="AuditSubcategory_AuditAccountLockout"  selected="true" />
    <select idref="AuditSubcategory_Logoff"  selected="true" />
    <select idref="AuditSubcategory_Logon"  selected="true" />
    <select idref="AuditSubcategory_OtherLogon_LogoffEvents"  selected="true" />
    <select idref="AuditSubcategory_SpecialLogon"  selected="true" />
    <select idref="AuditSubcategory_AuditPolicyChange"  selected="true" />
    <select idref="AuditSubcategory_AuthenticationPolicyChange"  selected="true" />
    <select idref="AuditSubcategory_AuthorizationPolicyChange"  selected="true" />
    <select idref="AuditSubcategory_SensitivePrivilegeUse"  selected="true" />
    <select idref="AuditSubcategory_IPsecDriver"  selected="true" />
    <select idref="AuditSubcategory_OtherSystemEvents"  selected="true" />
    <select idref="AuditSubcategory_SecurityStateChange"  selected="true" />
    <select idref="AuditSubcategory_SecuritySystemExtension"  selected="true" />
    <select idref="AuditSubcategory_SystemIntegrity"  selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenCamera"  selected="true" />
    <select idref="ControlPanel-PersonalizationPreventEnablingLockScreenSlideShow"  selected="true" />
    <select idref="RegionalandLanguageOptions_AllowInputPersonalization"  selected="true" />
    <select idref="LAPS_EnsureLAPSAdmPwdGPOExtension_CSEisinstalled"  selected="true" />
    <select idref="LAPS_Donotallowpasswordexpirationtimelongerthanrequiredbypolicy"  selected="true" />
    <select idref="LAPS_EnableLocalAdminPasswordManagement"  selected="true" />
    <select idref="LAPS_PasswordSettings_PasswordComplexity"  selected="true" />
    <select idref="LAPS_PasswordSettings_PasswordLength"  selected="true" />
    <select idref="LAPS_PasswordSettings_PasswordAge"  selected="true" />
    <select idref="MSS_EnableAutomaticAdminLogon"  selected="true" />
    <select idref="MSS_DisableIPSourceRoutingIPv6"  selected="true" />
    <select idref="MSS_DisableIPSourceRouting"  selected="true" />
    <select idref="MSS_EnableICMPRedirects"  selected="true" />
    <select idref="MSS_NoNameReleaseOnDemand"  selected="true" />
    <select idref="MSS_SafeDLLSearchMode"  selected="true" />
    <select idref="MSS_ScreenSaverGracePeriod"  selected="true" />
    <select idref="MSS_WarningLevel"  selected="true" />
    <select idref="Network-DNSClientTurnOffMulticastNameResolution"  selected="true" />
    <select idref="DNSClientNetBIOSNodeType"  selected="true" />
    <select idref="LanmanWorkstation_Enableinsecureguestlogons"  selected="true" />
    <select idref="NetworkConnections_WindowsFirewall"  selected="true" />
    <select idref="Network-NetworkConnections_ProhibitInstallationAndConfigurationOfNetworkBridgeOnYourDNSDomainNetwork"  selected="true" />
    <select idref="Network-NetworkConnections_ProhibitUseOfInternetConnectionSharingOnYourDNSDomainNetwork"  selected="true" />
    <select idref="NetworkConnections_RequireDomainUsersToElevateWhenSettingANetwork_sLocation"  selected="true" />
    <select idref="IPv6TransitionTechnologies"  selected="true" />
    <select idref="AdministrativeTemplates_Network_MinimizethenumberofsimultaneousconnectionstotheInternetoraWindowsDomain"  selected="true" />
    <select idref="SCMPassTheHashMitigationsSetApplyUACRestrictionsToLocalAccountsOnNetworkLogons"  selected="true" />
    <select idref="SCM_PassTheHashMitigations_SetWDigestAuthentication"  selected="true" />
    <select idref="System-AuditProcessCreationIncludeCommandLineInProcessCreationEvents"  selected="true" />
    <select idref="EarlyLaunchAntimalware_Boot-StartDriverInitializationPolicy"  selected="true" />
    <select idref="GroupPolicy_Loggingandtracing"  selected="true" />
    <select idref="GroupPolicy_ConfigureDoNotApplyDuringPeriodicBackgroundProcessing"  selected="true" />
    <select idref="GroupPolicy_ConfigureProcessEvenIfTheGroupPolicyObjectsHaveNotChanged"  selected="true" />
    <select idref="System-GroupPolicyContinueExperiencesOnThisDevice"  selected="true" />
    <select idref="GroupPolicy_TurnOffBackgroundRefreshOfGroupPolicy"  selected="true" />
    <select idref="System-LogonBlockUserFromShowingAccountDetailsOnSignin"  selected="true" />
    <select idref="System-LogonDoNotDisplayNetworkSelectionUI"  selected="true" />
    <select idref="System-Logon_DoNotEnumerateConnectedUsersOnDomain-joinedComputers"  selected="true" />
    <select idref="System-Logon_EnumerateLocalUsersOnDomain-joinedComputers"  selected="true" />
    <select idref="Logon_Turnoffappnotificationsonthelockscreen"  selected="true" />
    <select idref="System-Logon_TurnOnPINSign-in"  selected="true" />
    <select idref="MitigationOptions_SetUntrustedFontBlocking"  selected="true" />
    <select idref="RemoteAssistance_OfferRemoteAssistance"  selected="true" />
    <select idref="RemoteAssistance_SolicitedRemoteAssistance"  selected="true" />
    <select idref="RemoteProcedureCall_RPCEndpointMapperClient"  selected="true" />
    <select idref="WindowsComponents-AppRuntimeAllowMicrosoftAccountsToBeOptional"  selected="true" />
    <select idref="AutoplayPolicies_SetDisallowAutoplayfornonvolumedevices"  selected="true" />
    <select idref="AutoplayPolicies_DefaultBehaviorForAutoRun"  selected="true" />
    <select idref="AutoplayPolicies_TurnOffAutoplay"  selected="true" />
    <select idref="FacialFeatures_Useenhancedantispoofingwhenavailable"  selected="true" />
    <select idref="CloudContent_TurnoffMicrosoftconsumerexperiences"  selected="true" />
    <select idref="WindowsComponents-RequirePinForPairing"  selected="true" />
    <select idref="CredentialUserInterface_SetDoNotDisplayThePasswordRevealButton"  selected="true" />
    <select idref="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation"  selected="true" />
    <select idref="DataCollectionandPreviewBuilds_SetAllowTelemetry"  selected="true" />
    <select idref="DataCollectionandPreviewBuilds_SetDisableprereleasefeaturesorsettings"  selected="true" />
    <select idref="DataCollectionandPreviewBuilds_Donotshowfeedbacknotifications"  selected="true" />
    <select idref="DataCollectionandPreviewBuilds_SetToggleusercontroloverInsiderbuilds"  selected="true" />
    <select idref="EMET_DefaultActionandMitigationSettings" selected="true" />
    <select idref="EMET_SetDefaultProtectionsforInternetExplorer"  selected="true" />
    <select idref="EMET_SetDefaultProtectionsforPopularSoftware"  selected="true" />
    <select idref="EMET_SetDefaultProtectionsforRecommendedSoftware"  selected="true" />
    <select idref="EMET_SetSystemASLR"  selected="true" />
    <select idref="EMET_SetSystemDEP"  selected="true" />
    <select idref="EMET_SetSystemSEHOP"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_RetainOldEvents"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_RetainOldEvents"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_"  selected="true" />
    <select idref="Setup_ControlEventLogbehaviorwhenthelogfilereachesitsmaximumsize"  selected="true" />
    <select idref="WindowsComponents-EventLogService-Setup_MaximumLogSize_KB_"  selected="true" />
    <select idref="WindowsComponents-EventLogService-System_RetainOldEvents"  selected="true" />
    <select idref="WindowsComponents-EventLogService-System_MaximumLogSize_KB_"  selected="true" />
    <select idref="FileExplorer_ConfigureWindowsSmartScreen"  selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffDataExecutionPreventionForExplorer"  selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffHeapTerminationOnCorruption"  selected="true" />
    <select idref="WindowsComponents-WindowsExplorer_TurnOffShellProtocolProtectedMode"  selected="true" />
    <select idref="MicrosoftEdge_ConfigureCookies"  selected="true" />
    <select idref="MicrosoftEdge_Turnoffaddressbarsearchsuggestions"  selected="true" />
    <select idref="MicrosoftEdge_TurnoffInPrivatebrowsing"  selected="true" />
    <select idref="MicrosoftEdge_TurnoffPasswordManager"  selected="true" />
    <select idref="MicrosoftEdge_TurnofftheSmartScreenFilter"  selected="true" />
    <select idref="OneDrive_SetPreventtheusageofOneDriveforfilestorage"  selected="true" />
    <select idref="RemoteDesktopConnectionClient_RemoteFXUSBDeviceRedirection"  selected="true" />
    <select idref="TerminalServices_DoNotAllowPasswordsToBeSaved"  selected="true" />
    <select idref="TerminalServices_DoNotAllowDriveRedirection"  selected="true" />
    <select idref="TerminalServices_AlwaysPromptClientForPasswordUponConnection"  selected="true" />
    <select idref="Security_RequireSecureRPCCommunication"  selected="true" />
    <select idref="TerminalServices_SetClientConnectionEncryptionLevel"  selected="true" />
    <select idref="TemporaryFolders_Donotdeletetempfoldersuponexit"  selected="true" />
    <select idref="TemporaryFolders_SetDoNotUseTemporaryFoldersPerSession"  selected="true" />
    <select idref="RSSFeeds_TurnOff_PreventDownloadingOfEnclosures"  selected="true" />
    <select idref="Search_OCR"  selected="true" />
    <select idref="Search_SetAllowCortana"  selected="true" />
    <select idref="Search_SetAllowCortanaAboveLockScreen"  selected="true" />
    <select idref="WindowsComponents-Search_AllowIndexingOfEncryptedFiles"  selected="true" />
    <select idref="Search_SetAllowsearchandCortanatouselocation"  selected="true" />
    <select idref="Store_TurnoffAutomaticDownloadandInstallofupdates"  selected="true" />
    <select idref="Store_TurnofftheoffertoupdatetothelatestversionofWindows"  selected="true" />
    <select idref="WindowsInkWorkspaceAllowWindowsInkWorkspace"  selected="true" />
    <select idref="WindowsComponents-WindowsInstaller_EnableUserControlOverInstalls"  selected="true" />
    <select idref="WindowsInstaller_AlwaysInstallWithElevatedPrivileges"  selected="true" />
    <select idref="WindowsComponents-WindowsLogonOptionsSign-inLastInteractiveUserAutomaticallyAfterASystem-initiatedRestart"  selected="true" />
    <select idref="WindowsPowerShell_SetTurnonPowerShellScriptBlockLogging"  selected="true" />
    <select idref="WindowsPowerShell_SetTurnonPowerShellTranscription"  selected="true" />
    <select idref="WinRMClient_AllowBasicAuthentication"  selected="true" />
    <select idref="WinRMClient_AllowUnencryptedTraffic"  selected="true" />
    <select idref="WinRMClient_DisallowDigestAuthentication"  selected="true" />
    <select idref="WinRMService_AllowBasicAuthentication"  selected="true" />
    <select idref="WinRMService_AllowUnencryptedTraffic"  selected="true" />
    <select idref="WinRMService_DisallowWinRMFromStoringRunAsCredentials"  selected="true" />
    <select idref="WindowsUpdate_ConfigureAutomaticUpdates"  selected="true" />
    <select idref="WindowsUpdate_ConfigureAutomaticUpdatesScheduledinstallday"  selected="true" />
    <select idref="DeferUpdatesSelectWhenQualityUpdatesAreReceived"  selected="true" />
    <select idref="DeferWindowsUpdatesSelectWhenFeatureUpdatesAreReceived"  selected="true" />
    <select idref="WindowsUpdate_SetNoAuto-restartWithLoggedOnUsersForScheduledAutomaticUpdatesInstallations"  selected="true" />
    <select idref="Personalization_SetEnableScreenSaver"  selected="true" />
    <select idref="Personalization_SetForceSpecificScreenSaver"  selected="true" />
    <select idref="Personalization_SetPasswordProtectTheScreenSaver"  selected="true" />
    <select idref="Personalization_SetScreenSaverTimeout"  selected="true" />
    <select idref="StartMenuandTaskbar_Turnofftoastnotificationsonthelockscreen"  selected="true" />
    <select idref="AttachmentManager_SetDoNotPreserveZoneInformationInFileAttachments"  selected="true" />
    <select idref="AttachmentManager_SetNotifyAntivirusProgramsWhenOpeningAttachments"  selected="true" />
    <select idref="CloudContentDoNotSuggestThird-partyContentInWindowsSpotlight"  selected="true" />
    <select idref="NetworkSharing_SetPreventusersfromsharingfileswithintheirprofile"  selected="true" />
    <select idref="WindowsInstaller_SetAlwaysInstallWithElevatedPrivileges"  selected="true" />
    <select idref="InteractiveLogon_NumberOfPreviousLogonsToCache"  selected="true" />
    <select idref="Playback_PreventCodecDownload"  selected="true" />
    <select idref="DeviceandResourceRedirection_SetDonotallowCOMportredirection"  selected="true" />
    <select idref="CloudContentTurnOffAllWindowsSpotlightFeatures"  selected="true" />
    <select idref="CloudContentConfigureWindowsSpotlightOnLockScreen"  selected="true" />
    <select idref="Connections_RestrictRemoteDesktopServicesUsersToASingleRemoteDesktopServicesSession"  selected="true" />
    <select idref="DeviceAndResourceRedirection_DoNotAllowLPTPortRedirection"  selected="true" />
    <select idref="DeviceAndResourceRedirection_DoNotAllowSupportedPlugAndPlayDeviceRedirection"  selected="true" />
    <select idref="TerminalServices_SetTimeLimitForActiveButIdleRemoteDesktopServicesSessions"  selected="true" />
    <select idref="SessionTimeLimits_Setatimelimitfordisconnectedsessions"  selected="true" />
    <select idref="SoftwareProtectionPlatform_SetTurnoffKMSClientOnlineAVSValidation"  selected="true" />
    <select idref="Store_DisableallappsfromWindowsStore"  selected="true" />
    <select idref="InternetCommunicationsettings_SetTurnoffHelpExperienceImprovementProgram"  selected="true" />
    <select idref="WindowsComponents-WindowsRemoteManagement_WinRM_-WinRMServiceAllowRemoteServerManagementThroughWinRM"  selected="true" />
    <select idref="WindowsComponents-WindowsRemoteShell_AllowRemoteShellAccess"  selected="true" />
    <select idref="WindowsComponents-WindowsInstaller_DisableIESecurityPromptForWindowsInstallerScripts"  selected="true" />
    <select idref="MicrosoftEdge_TurnoffPopupBlocker"  selected="true" />
    <select idref="MicrosoftEdge_DontallowSmartScreenFilterwarningoverrides"  selected="true" />
    <select idref="MicrosoftEdge_DontallowSmartScreenFilterwarningoverridesforunverifiedfiles"  selected="true" />
    <select idref="MicrosoftEdge_DontallowWebRTCtosharetheLocalHostIPaddress"  selected="true" />
    <select idref="Network-WindowsConnectNow_ProhibitAccessOfTheWindowsConnectNowWizards"  selected="true" />
    <select idref="NetworkAccessDoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication"  selected="true" />
    <select idref="Network-WindowsConnectNow_ConfigurationOfWirelessSettingsUsingWindowsConnectNow"  selected="true" />
    <select idref="Parameters_DisableIPv6"  selected="true" />
    <select idref="Network-LinkLayerTopology_TurnOnMapperI_O_LLTDIO_Driver"  selected="true" />
    <select idref="MSS_KeepAliveTime"  selected="true" />
    <select idref="MSS_PerformRouterDiscovery"  selected="true" />
    <select idref="Network-LinkLayerTopology_TurnOnResponder_RSPNDR_Driver"  selected="true" />
    <select idref="MSS_TCPMaxDataRetransmissionsIPv6"  selected="true" />
    <select idref="FontsEnableFontProviders"  selected="true" />
    <select idref="Network-MicrosoftPeer-to-PeerNetworkingServices_TurnOffMicrosoftPeer-to-PeerNetworkingServices"  selected="true" />
    <select idref="WindowsConnectionManager_Prohibitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork"  selected="true" />
    <select idref="System_InternetCommunicationManagement_Turnoffaccesstothestore"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP"  selected="true" />
    <select idref="InternetCommunicationSettings_SetTurnoffhandwritingpersonalizationdatasharing"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffHandwritingRecognitionErrorReporting"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetConnectionWizardIfURLConnectionIsReferringToMicrosoft.com"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffPrintingOverHTTP"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffRegistrationIfURLConnectionIsReferringToMicrosoft.com"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_OrderPrints_PictureTask"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsCustomerExperienceImprovementProgram"  selected="true" />
    <select idref="InternetCommunicationSettings_TurnOffWindowsErrorReporting"  selected="true" />
    <select idref="Kerberos_SetSupportdeviceauthenticationusingcertificate"  selected="true" />
    <select idref="LocaleServices_SetDisallowcopyingofuserinputmethodstothesystemaccountforsignin"  selected="true" />
    <select idref="PowerManagement_OnBattery_-AllowNetworkConnectivityDuringConnectedStandby_onBattery_"  selected="true" />
    <select idref="PowerManagement-AllowNetworkConnectivityDuringConnectedstandby_pluggedIn_"  selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_OnBattery_"  selected="true" />
    <select idref="PowerManagement_RequireAPasswordWhenAComputerWakes_PluggedIn_"  selected="true" />
    <select idref="RemoteProcedureCall_RestrictionsForUnauthenticatedRPCClients"  selected="true" />
    <select idref="MicrosoftSupportDiagnosticTool_TurnOnMSDTInteractiveCommunicationWithSupportProvider"  selected="true" />
    <select idref="WindowsPerformancePerfTrack_Enable_DisablePerfTrack"  selected="true" />
    <select idref="System-UserProfilesTurnOffTheAdvertisingID"  selected="true" />
    <select idref="TimeProviders_SetEnableWindowsNTPClient"  selected="true" />
    <select idref="TimeProviders_SetEnableWindowsNTPServer"  selected="true" />
    <select idref="AppPackageDeployment_SetAllowaWindowsapptoshareapplicationdatabetweenusers"  selected="true" />
    <select idref="AppPrivacy_LetWindowsapps"  selected="true" />
    <select idref="AppRuntime_SetBlocklaunchingWindowsStoreappswithWindowsRuntimeAPIaccessfromhostedcontent"  selected="true" />
    <select idref="WindowsComponents-AllowUseOfCamera"  selected="true" />
    <select idref="TurnOffLocation"  selected="true" />
    <select idref="MicrosoftEdge-AllowExtensions"  selected="true" />
    <select idref="MicrosoftEdge-PreventAccessToTheAboutflagsPageInMicrosoftEdge"  selected="true" />
    <select idref="Store_TurnofftheStoreapplication"  selected="true" />
    <select idref="MAPS_SetJoinMicrosoftMAPS"  selected="true" />
    <select idref="ReportingConfigureWatsonEvents"  selected="true" />
    <select idref="WindowsInkWorkspaceAllowSuggestedAppsInWindowsInkWorkspace"  selected="true" />
    </Profile>
    <Group id="WindowsSettings" xml:lang="en">
    <title xml:lang="en">Windows Settings</title>
    <Group id="PasswordPolicy" xml:lang="en">
      <title xml:lang="en">Password Policy</title>
      <Value id="MinimumPasswordLength_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">8</value>
        <value selector="MinimumPasswordLength_var-selector-8">12</value>
        <value selector="MinimumPasswordLength_var-selector-9">14</value>
        <value selector="MinimumPasswordLength_var-selector-10">14</value>
        <value selector="MinimumPasswordLength_var-selector-11">14</value>
      </Value>
      <Value id="MaxPwdAgeInSeconds_864001Day__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">7776000</value>
        <value selector="MaxPwdAgeInSeconds_864001Day__var-selector-0">3628800</value>
        <value selector="MaxPwdAgeInSeconds_864001Day__var-selector-3">3628800</value>
        <value selector="MaxPwdAgeInSeconds_864001Day__var-selector-5">5184000</value>
        <value selector="MaxPwdAgeInSeconds_864001Day__var-selector-6">5184000</value>
        <value selector="MaxPwdAgeInSeconds_864001Day__var-selector-7">5184000</value>
        <value selector="MaxPwdAgeInSeconds_864001Day__var-selector-8">5184000</value>
      </Value>
      <Value id="MinPwdAgeInSeconds_864001Day__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">86400</value>
      </Value>
      <Value id="PasswordMeetsComplexityRequirements_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ReversiblePasswordEncryption_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="PasswordHistory_between0And24__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">24</value>
      </Value>
      <Rule id="PasswordPolicy_MinimumPasswordLength" xml:lang="en" selected="false">
        <title xml:lang="en">Password Policy: Minimum password length</title>
        <description xml:lang="en">This security setting determines the least number of characters that a password for a user account may contain.
          
          You can set a value of between 1 and 14 characters, or you can establish that no password is required by setting the number of characters to 0.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MinimumPasswordLength_var" export-name="oval:com.mcafee.oval.windows:var:12" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:19" />
        </check>
      </Rule>
      <Rule id="PasswordPolicy_MaximumPasswordAge" xml:lang="en" selected="false">
        <title xml:lang="en">Password Policy: Maximum password age</title>
        <description xml:lang="en">This security setting determines the period of time (in days) that a password can be used before the system requires the user to change it.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MaxPwdAgeInSeconds_864001Day__var" export-name="oval:com.mcafee.oval.windows:var:90" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:17" />
        </check>
      </Rule>
      <Rule id="PasswordPolicy_MinimumPasswordAge" xml:lang="en" selected="false">
        <title xml:lang="en">Password Policy: Minimum password age</title>
        <description xml:lang="en">This security setting determines the period of time (in days) that a password must be used before the user can change it.
          
          You can set a value between 1 and 998 days, or you can allow changes immediately by setting the number of days to 0.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MinPwdAgeInSeconds_864001Day__var" export-name="oval:com.mcafee.oval.windows:var:101" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:18" />
        </check>
      </Rule>
      <Rule id="PasswordPolicy_PasswordMustMeetComplexityRequirements" xml:lang="en" selected="false">
        <title xml:lang="en">Password Policy: Password must meet complexity requirements</title>
        <description xml:lang="en">This security setting determines whether passwords must meet complexity requirements.
          
          Weak password policies could make it easier for an attacker to gain unauthorized access to user accounts.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PasswordMeetsComplexityRequirements_var" export-name="oval:com.mcafee.oval.windows:var:60041" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6004" />
        </check>
      </Rule>
      <Rule id="PasswordPolicy_StorePasswordsUsingReversibleEncryption" xml:lang="en" selected="false">
        <title xml:lang="en">Password Policy: Store passwords using reversible encryption</title>
        <description xml:lang="en">This security setting determines whether the operating system stores passwords using reversible encryption.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ReversiblePasswordEncryption_var" export-name="oval:com.mcafee.oval.windows:var:60051" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6005" />
        </check>
      </Rule>
      <Rule id="PasswordPolicy_EnforcePasswordHistory" xml:lang="en" selected="false">
        <title xml:lang="en">Password Policy: Enforce password history</title>
        <description xml:lang="en">This security setting determines the number of unique new passwords that have to be associated with a user account before an old password can be reused.
          
          The value must be between 0 and 24 passwords.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PasswordHistory_between0And24__var" export-name="oval:com.mcafee.oval.windows:var:60011" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6001" />
        </check>
      </Rule>
    </Group>
    <Group id="AccountLockoutPolicy" xml:lang="en">
      <title xml:lang="en">Account Lockout Policy</title>
      <Value id="AccountLockoutDuration_inSeconds__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">900</value>
      </Value>
      <Value id="NumberOfBadAttemptsBeforeLockout_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">50</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector">3</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-3">15</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-6">15</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-12">15</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-13">15</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-14">15</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-15">15</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-18">5</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-19">5</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-20">5</value>
        <value selector="NumberOfBadAttemptsBeforeLockout_var-selector-21">5</value>
      </Value>
      <Value id="AccountLockoutCounterResetInSeconds_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">900</value>
      </Value>
      <Rule id="AccountLockoutPolicy_AccountLockoutDuration" xml:lang="en" selected="false">
        <title xml:lang="en">Account Lockout Policy: Account lockout duration</title>
        <description xml:lang="en">This security setting determines the number of minutes a locked-out account remains locked out before automatically becoming unlocked.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AccountLockoutDuration_inSeconds__var" export-name="oval:com.mcafee.oval.windows:var:15" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:23" />
        </check>
      </Rule>
      <Rule id="AccountLockoutPolicy_AccountLockoutThreshold" xml:lang="en" selected="false">
        <title xml:lang="en">Account Lockout Policy: Account lockout threshold</title>
        <description xml:lang="en">This security setting determines the number of failed logon attempts that causes a user account to be locked out.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NumberOfBadAttemptsBeforeLockout_var" export-name="oval:com.mcafee.oval.windows:var:10" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:24" />
        </check>
      </Rule>
      <Rule id="AccountLockoutPolicy_ResetAccountLockoutCounterAfter" xml:lang="en" selected="false">
        <title xml:lang="en">Account Lockout Policy: Reset account lockout counter after</title>
        <description xml:lang="en">This security setting determines the number of minutes that must elapse after a failed logon attempt before the failed logon attempt counter is reset to 0 bad logon attempts.
          
          The available range is 1 minute to 99,999 minutes.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AccountLockoutCounterResetInSeconds_var" export-name="oval:com.mcafee.oval.windows:var:60091" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6009" />
        </check>
      </Rule>
    </Group>
    <Group id="AuditPolicy" xml:lang="en">
      <title xml:lang="en">Audit Policy</title>
      <Value id="AuditAccountLogonEvents_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="AuditAccountLogonEvents_var0-selector-1">AUDIT_NONE</value>
      </Value>
      <Value id="AuditAccountManagement_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="AuditAccountManagement_var0-selector-1">AUDIT_NONE</value>
      </Value>
      <Value id="AuditDirectoryServiceAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="AuditLogonEvents_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="AuditLogonEvents_var0-selector-1">AUDIT_NONE</value>
      </Value>
      <Value id="AuditObjectAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_FAILURE</value>
        <value selector="AuditObjectAccess_var1-selector-1">AUDIT_SUCCESS_FAILURE</value>
        <value selector="AuditObjectAccess_var1-selector-4">AUDIT_SUCCESS_FAILURE</value>
        <value selector="AuditObjectAccess_var1-selector-8">AUDIT_NONE</value>
      </Value>
      <Value id="AuditPolicyChange_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="AuditPolicyChange_var0-selector">AUDIT_FAILURE</value>
        <value selector="AuditPolicyChange_var0-selector-1">AUDIT_SUCCESS</value>
        <value selector="AuditPolicyChange_var0-selector-5">AUDIT_SUCCESS</value>
        <value selector="AuditPolicyChange_var0-selector-8">AUDIT_SUCCESS</value>
        <value selector="AuditPolicyChange_var0-selector-12">AUDIT_NONE</value>
      </Value>
      <Value id="AuditPrivilegeUse_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_FAILURE</value>
        <value selector="AuditPrivilegeUse_var0-selector-1">AUDIT_NONE</value>
      </Value>
      <Value id="AuditProcessTracking_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="AuditSystemEvents_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="AuditSystemEvents_var0-selector-0">AUDIT_SUCCESS</value>
        <value selector="AuditSystemEvents_var0-selector-4">AUDIT_SUCCESS</value>
        <value selector="AuditSystemEvents_var0-selector-7">AUDIT_SUCCESS</value>
        <value selector="AuditSystemEvents_var0-selector-11">AUDIT_NONE</value>
      </Value>
      <Value id="IPsecDriverAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
      </Value>
      <Value id="SecurityStateChangeAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
      </Value>
      <Value id="SecuritySystemExtensionAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
      </Value>
      <Value id="SystemIntegrityAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
      </Value>
      <Value id="LogoffAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS</value>
      </Value>
      <Value id="LogonAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="LogonAuditSubcategory._var-selector">AUDIT_SUCCESS</value>
        <value selector="LogonAuditSubcategory._var-selector-1">AUDIT_SUCCESS</value>
        <value selector="LogonAuditSubcategory._var-selector-2">AUDIT_SUCCESS</value>
        <value selector="LogonAuditSubcategory._var-selector-3">AUDIT_SUCCESS</value>
        <value selector="LogonAuditSubcategory._var-selector-4">AUDIT_SUCCESS</value>
      </Value>
      <Value id="SpecialLogonAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS</value>
      </Value>
      <Value id="FileSystemAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
        <value selector="FileSystemAuditSubcategory._var-selector-5">AUDIT_FAILURE</value>
      </Value>
      <Value id="RegistryAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
        <value selector="RegistryAuditSubcategory._var-selector-5">AUDIT_FAILURE</value>
      </Value>
      <Value id="SensitivePrivilegeUseAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
        <value selector="SensitivePrivilegeUseAuditSubcategory._var-selector-5">AUDIT_SUCCESS_FAILURE</value>
        <value selector="SensitivePrivilegeUseAuditSubcategory._var-selector-6">AUDIT_SUCCESS_FAILURE</value>
        <value selector="SensitivePrivilegeUseAuditSubcategory._var-selector-7">AUDIT_SUCCESS_FAILURE</value>
        <value selector="SensitivePrivilegeUseAuditSubcategory._var-selector-8">AUDIT_SUCCESS_FAILURE</value>
      </Value>
      <Value id="ProcessCreationAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS</value>
      </Value>
      <Value id="AuditPolicyChangeSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
      </Value>
      <Value id="AuthenticationPolicyChangeAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS</value>
      </Value>
      <Value id="ComputerAccountManagementAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="ComputerAccountManagementAuditSubcategory._var-selector">AUDIT_SUCCESS</value>
        <value selector="ComputerAccountManagementAuditSubcategory._var-selector-1">AUDIT_SUCCESS</value>
        <value selector="ComputerAccountManagementAuditSubcategory._var-selector-2">AUDIT_SUCCESS</value>
        <value selector="ComputerAccountManagementAuditSubcategory._var-selector-3">AUDIT_SUCCESS</value>
        <value selector="ComputerAccountManagementAuditSubcategory._var-selector-4">AUDIT_SUCCESS</value>
        <value selector="ComputerAccountManagementAuditSubcategory._var-selector-5">AUDIT_NONE</value>
        <value selector="ComputerAccountManagementAuditSubcategory._var-selector-6">AUDIT_SUCCESS</value>
      </Value>
      <Value id="DistributionGroupManagementAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="OtherAccountManagementEventsAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="OtherAccountManagementEventsAuditSubcategory._var-selector">AUDIT_SUCCESS</value>
        <value selector="OtherAccountManagementEventsAuditSubcategory._var-selector-1">AUDIT_SUCCESS</value>
        <value selector="OtherAccountManagementEventsAuditSubcategory._var-selector-2">AUDIT_SUCCESS</value>
        <value selector="OtherAccountManagementEventsAuditSubcategory._var-selector-3">AUDIT_SUCCESS</value>
        <value selector="OtherAccountManagementEventsAuditSubcategory._var-selector-4">AUDIT_SUCCESS</value>
      </Value>
      <Value id="SecurityGroupManagementAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="SecurityGroupManagementAuditSubcategory._var-selector">AUDIT_SUCCESS</value>
        <value selector="SecurityGroupManagementAuditSubcategory._var-selector-1">AUDIT_SUCCESS</value>
        <value selector="SecurityGroupManagementAuditSubcategory._var-selector-2">AUDIT_SUCCESS</value>
        <value selector="SecurityGroupManagementAuditSubcategory._var-selector-3">AUDIT_SUCCESS</value>
        <value selector="SecurityGroupManagementAuditSubcategory._var-selector-4">AUDIT_SUCCESS</value>
      </Value>
      <Value id="UserAccountManagementAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="UserAccountManagementAuditSubcategory._var-selector">AUDIT_SUCCESS</value>
        <value selector="UserAccountManagementAuditSubcategory._var-selector-1">AUDIT_SUCCESS</value>
        <value selector="UserAccountManagementAuditSubcategory._var-selector-2">AUDIT_SUCCESS</value>
        <value selector="UserAccountManagementAuditSubcategory._var-selector-3">AUDIT_SUCCESS</value>
        <value selector="UserAccountManagementAuditSubcategory._var-selector-4">AUDIT_SUCCESS</value>
      </Value>
      <Value id="CredentialValidationAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_SUCCESS_FAILURE</value>
        <value selector="CredentialValidationAuditSubcategory._var-selector">AUDIT_SUCCESS</value>
        <value selector="CredentialValidationAuditSubcategory._var-selector-1">AUDIT_SUCCESS</value>
        <value selector="CredentialValidationAuditSubcategory._var-selector-2">AUDIT_SUCCESS</value>
        <value selector="CredentialValidationAuditSubcategory._var-selector-3">AUDIT_SUCCESS</value>
        <value selector="CredentialValidationAuditSubcategory._var-selector-4">AUDIT_SUCCESS</value>
      </Value>
      <Value id="DirectoryServiceAccessAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
        <value selector="DirectoryServiceAccessAuditSubcategory._var-selector">AUDIT_SUCCESS</value>
        <value selector="DirectoryServiceAccessAuditSubcategory._var-selector-1">AUDIT_SUCCESS</value>
        <value selector="DirectoryServiceAccessAuditSubcategory._var-selector-2">AUDIT_SUCCESS_FAILURE</value>
      </Value>
      <Value id="DirectoryServiceChangesAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
        <value selector="DirectoryServiceChangesAuditSubcategory._var-selector">AUDIT_SUCCESS</value>
        <value selector="DirectoryServiceChangesAuditSubcategory._var-selector-2">AUDIT_SUCCESS</value>
        <value selector="DirectoryServiceChangesAuditSubcategory._var-selector-3">AUDIT_SUCCESS_FAILURE</value>
      </Value>
      <Value id="ApplicationGroupManagementAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="DPAPIActivityAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="ProcessTerminationAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="RPCEventsAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="DetailedDirectoryServiceReplicationAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="DirectoryServiceReplicationAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="AccountLockoutAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="IPsecExtendedModeAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="IPsecMainModeAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="IPsecQuickModeAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="OtherLogonLogoffEventsAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="ApplicationGeneratedAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="CertificationServicesAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="FileShareAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="FilteringPlatformConnectionAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="FilteringPlatformPacketDropAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="HandleManipulationAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="KernelObjectAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="OtherObjectAccessEventsAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="SAMAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="AuthorizationPolicyChangeAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="FilteringPlatformPolicyChangeAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="MPSSVCRule-LevelPolicyChangeAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="OtherPolicyChangeEventsAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="NonSensitivePrivilegeUseAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="OtherPrivilegeUseEventsAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="OtherSystemEventsAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Value id="OtherAccountLogonEventsAuditSubcategory._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AUDIT_NONE</value>
      </Value>
      <Rule id="AuditPolicy_AuditAccountLogonEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Policy: Audit account logon events</title>
        <description xml:lang="en">This security setting determines whether to audit each instance of a user logging on to or logging off from another computer in which this computer is used to validate the account.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditAccountLogonEvents_var0" export-name="oval:com.mcafee.oval.windows:var:29" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:27" />
        </check>
      </Rule>
      <Rule id="AuditPolicy_AuditAccountManagement" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Policy: Audit account management</title>
        <description xml:lang="en">This security setting determines whether to audit each event of account management on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditAccountManagement_var0" export-name="oval:com.mcafee.oval.windows:var:31" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:29" />
        </check>
      </Rule>
      <Rule id="AuditPolicy_AuditDirectoryServiceAccess" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Policy: Audit directory service access</title>
        <description xml:lang="en">This security setting determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditDirectoryServiceAccess_var0" export-name="oval:com.mcafee.oval.windows:var:32" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:30" />
        </check>
      </Rule>
      <Rule id="AuditPolicy_AuditLogonEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Policy: Audit logon events</title>
        <description xml:lang="en">This security setting determines whether to audit each instance of a user logging on to or logging off from a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditLogonEvents_var0" export-name="oval:com.mcafee.oval.windows:var:33" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:32" />
        </check>
      </Rule>
      <Rule id="AuditPolicy_AuditObjectAccess" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Policy: Audit object access</title>
        <description xml:lang="en">This security setting determines whether to audit the event of a user accessing an object—for example, a file, folder, registry key, printer, and so forth—that has its own system access control list (SACL) specified.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditObjectAccess_var1" export-name="oval:com.mcafee.oval.windows:var:35" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:34" />
        </check>
      </Rule>
      <Rule id="AuditPolicy_AuditPolicyChange" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Policy: Audit policy change</title>
        <description xml:lang="en">This security setting determines whether to audit every incident of a change to user rights assignment policies, audit policies, or trust policies.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditPolicyChange_var0" export-name="oval:com.mcafee.oval.windows:var:36" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:35" />
        </check>
      </Rule>
      <Rule id="AuditPolicy_AuditPrivilegeUse" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Policy: Audit privilege use</title>
        <description xml:lang="en">This security setting determines whether to audit each instance of a user exercising a user right.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditPrivilegeUse_var0" export-name="oval:com.mcafee.oval.windows:var:37" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:36" />
        </check>
      </Rule>
      <Rule id="AuditPolicy_AuditProcessTracking" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Policy: Audit process tracking</title>
        <description xml:lang="en">This security setting determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditProcessTracking_var0" export-name="oval:com.mcafee.oval.windows:var:42" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:40" />
        </check>
      </Rule>
      <Rule id="AuditPolicy_AuditSystemEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Policy: Audit system events</title>
        <description xml:lang="en">This security setting determines whether to audit when a user restarts or shuts down the computer or when an event occurs that affects either the system security or the security log.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditSystemEvents_var0" export-name="oval:com.mcafee.oval.windows:var:38" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:37" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_IPsecDriver" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: IPsec Driver</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of IPsec Drivers use on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IPsecDriverAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8043" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8043" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_SecurityStateChange" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Security State Change</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of security state changes use on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SecurityStateChangeAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8045" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8045" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_SecuritySystemExtension" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Security System Extension</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of security system extensions use on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SecuritySystemExtensionAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8046" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8046" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_SystemIntegrity" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: System Integrity</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of system integrity use on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SystemIntegrityAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8047" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8047" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_Logoff" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Logoff</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of logoff on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogoffAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8019" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8019" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_Logon" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Logon</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of logon on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogonAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8020" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8020" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_SpecialLogon" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Special Logon</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of special logon on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SpecialLogonAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8022" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8022" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_FileSystem" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: File System</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of file system events on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FileSystemAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8026" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8026" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_Registry" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Registry</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of registry events on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RegistryAuditSubcategory._var" export-name="oval:com.mcafee.oval.windows:var:8032" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:8032" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_SensitivePrivilegeUse" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Sensitive Privilege Use</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of sensitive privilege use on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SensitivePrivilegeUseAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8042" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8042" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_ProcessCreation" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Process Creation</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of process creation on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ProcessCreationAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8008" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8008" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_AuditPolicyChange" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Audit Policy Change</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of audit policy changes on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditPolicyChangeSubcategory._var" export-name="oval:com.mcafee.oval:var:72017" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65870" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_AuthenticationPolicyChange" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Authentication Policy Change</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of authentication policy changes on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuthenticationPolicyChangeAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8035" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8035" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_ComputerAccountManagement" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Computer Account Management</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of computer account management on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ComputerAccountManagementAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8002" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8002" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_DistributionGroupManagement" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Distribution Group Management</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of distribution group management on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DistributionGroupManagementAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8003" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8003" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_OtherAccountManagementEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Other Account Management Events</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of other account management on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OtherAccountManagementEventsAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8004" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8004" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_SecurityGroupManagement" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Security Group Management</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of security group management on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SecurityGroupManagementAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8005" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8005" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_UserAccountManagement" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: User Account Management</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of user account management on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="UserAccountManagementAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8006" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8006" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_CredentialValidation" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Credential Validation</title>
        <description xml:lang="en">This subcategory audits events generated by validation tests on user account logon credentials.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="CredentialValidationAuditSubcategory._var" export-name="oval:com.mcafee.oval:var:79462" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101083" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_DirectoryServiceAccess" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Directory Service Access</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of directory service access on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DirectoryServiceAccessAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8012" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8012" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_DirectoryServiceChanges" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Directory Service Changes</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of directory service changes on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DirectoryServiceChangesAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8013" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8013" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_ApplicationGroupManagement" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Application Group Management</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of application group management on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplicationGroupManagementAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8001" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8001" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_DPAPIActivity" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: DPAPI Activity</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of DPAPI activity on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DPAPIActivityAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8007" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8007" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_ProcessTermination" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Process Termination</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of process termination on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ProcessTerminationAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8009" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8009" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_RPCEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: RPC Events</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of RPC events on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RPCEventsAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8010" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8010" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_DetailedDirectoryServiceReplication" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Detailed Directory Service Replication</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of detailed directory service replication on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DetailedDirectoryServiceReplicationAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8011" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8011" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_DirectoryServiceReplication" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Directory Service Replication</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of directory service replication on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DirectoryServiceReplicationAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8014" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8014" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_AuditAccountLockout" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Audit Account Lockout</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of account lockout on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AccountLockoutAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8015" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8015" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_IPsecExtendedMode" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: IPsec Extended Mode</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of IPsec extended mode negotiation on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IPsecExtendedModeAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8016" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8016" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_IPsecMainMode" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: IPsec Main Mode</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of IPsec main mode negotiation on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IPsecMainModeAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8017" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8017" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_IPsecQuickMode" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: IPsec Quick Mode</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of IPsec quick mode negotiation on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IPsecQuickModeAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8018" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8018" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_OtherLogon_LogoffEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Other Logon/Logoff Events</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of other logon/logoff events on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OtherLogonLogoffEventsAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8021" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8021" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_ApplicationGenerated" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Application Generated</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of application generated events on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplicationGeneratedAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8023" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8023" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_CertificationServices" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Certification Services</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of certification services on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="CertificationServicesAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8024" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8024" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_FileShare" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: File Share</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of file sharing on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FileShareAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8025" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8025" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_FilteringPlatformConnection" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Filtering Platform Connection</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of filtering platform connections on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FilteringPlatformConnectionAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8027" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8027" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_FilteringPlatformPacketDrop" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Filtering Platform Packet Drop</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of filtering platform packet drops on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FilteringPlatformPacketDropAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8028" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8028" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_HandleManipulation" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Handle Manipulation</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of handle manipulation on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="HandleManipulationAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8029" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8029" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_KernelObject" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Kernel Object</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of kernel objects on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="KernelObjectAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8030" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8030" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_OtherObjectAccessEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Other Object Access Events</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of other object access events on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OtherObjectAccessEventsAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8031" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8031" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_SAM" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: SAM</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of SAM events on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SAMAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8033" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8033" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_AuthorizationPolicyChange" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Authorization Policy Change</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of authorization policy changes on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuthorizationPolicyChangeAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8036" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8036" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_FilteringPlatformPolicyChange" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Filtering Platform Policy Change</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of filtering platform policy changes on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FilteringPlatformPolicyChangeAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8037" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8037" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_MPSSVCRule-LevelPolicyChange" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: MPSSVC Rule-Level Policy Change</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of MPSSVC rule-level policy changes on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MPSSVCRule-LevelPolicyChangeAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8038" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8038" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_OtherPolicyChangeEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Other Policy Change Events</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of other policy changes on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OtherPolicyChangeEventsAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8039" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8039" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_NonSensitivePrivilegeUse" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Non Sensitive Privilege Use</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of non-sensitive privilege use on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NonSensitivePrivilegeUseAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8040" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8040" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_OtherPrivilegeUseEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Other Privilege Use Events</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of other privilege use on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OtherPrivilegeUseEventsAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8041" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8041" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_OtherSystemEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Other System Events</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of other system events use on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OtherSystemEventsAuditSubcategory._var" export-name="oval:com.mcafee.oval.vista:var:8044" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8044" />
        </check>
      </Rule>
      <Rule id="AuditSubcategory_AuditOtherAccountLogonEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Audit Subcategory: Audit Other Account Logon Events</title>
        <description xml:lang="en">This audit subcategory setting determines whether to audit each event of other account logons on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OtherAccountLogonEventsAuditSubcategory._var" export-name="oval:com.mcafee.oval:var:216456" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215760" />
        </check>
      </Rule>
    </Group>
    <Group id="UserRightsAssignment" xml:lang="en">
      <title xml:lang="en">User Rights Assignment</title>
            <Value id="AccessThisComputerFromTheNetwork_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AccessThisComputerFromTheNetwork_english-selector-3">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_english-selector-4">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_english-selector-5">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_english-selector-7">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_english-selector-9">Administrators</value>
              <value selector="AccessThisComputerFromTheNetwork_english-selector-10">Administrators|Authenticated Users</value>
              <value selector="AccessThisComputerFromTheNetwork_english-selector-11">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AccessThisComputerFromTheNetwork_italian-selector-3">Administrators|Authenticated Users|CONTROLLER DI DOMINIO ORGANIZZAZIONE</value>
        <value selector="AccessThisComputerFromTheNetwork_italian-selector-4">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_italian-selector-5">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_italian-selector-7">Administrators|Authenticated Users|CONTROLLER DI DOMINIO ORGANIZZAZIONE</value>
        <value selector="AccessThisComputerFromTheNetwork_italian-selector-9">Administrators</value>
        <value selector="AccessThisComputerFromTheNetwork_italian-selector-10">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_italian-selector-11">Administrators|Authenticated Users|CONTROLLER DI DOMINIO ORGANIZZAZIONE</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|Usuarios</value>
        <value selector="AccessThisComputerFromTheNetwork_spanish-selector-2">Administradores|Usuarios autentificados|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_spanish-selector-4">Administradores|Usuarios autentificados</value>
        <value selector="AccessThisComputerFromTheNetwork_spanish-selector-5">Administradores|Usuarios autentificados</value>
        <value selector="AccessThisComputerFromTheNetwork_spanish-selector-7">Administradores|Usuarios autentificados|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_spanish-selector-9">Administradores</value>
        <value selector="AccessThisComputerFromTheNetwork_spanish-selector-10">Administradores|Usuarios autentificados</value>
        <value selector="AccessThisComputerFromTheNetwork_spanish-selector-11">Administradores|Usuarios autentificados|ENTERPRISE DOMAIN CONTROLLERS</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AccessThisComputerFromTheNetwork_chinese-selector-3">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_chinese-selector-4">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_chinese-selector-5">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_chinese-selector-7">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_chinese-selector-9">Administrators</value>
        <value selector="AccessThisComputerFromTheNetwork_chinese-selector-10">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_chinese-selector-11">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AccessThisComputerFromTheNetwork_japanese-selector-3">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_japanese-selector-4">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_japanese-selector-5">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_japanese-selector-7">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_japanese-selector-9">Administrators</value>
        <value selector="AccessThisComputerFromTheNetwork_japanese-selector-10">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_japanese-selector-11">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs|Utilisateurs</value>
        <value selector="AccessThisComputerFromTheNetwork_french-selector-2">Administrateurs|Utilisateurs authentifiés|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_french-selector-4">Administrateurs|Utilisateurs authentifiés</value>
        <value selector="AccessThisComputerFromTheNetwork_french-selector-5">Administrateurs|Utilisateurs authentifiés</value>
        <value selector="AccessThisComputerFromTheNetwork_french-selector-7">Administrateurs|Utilisateurs authentifiés|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_french-selector-9">Administrateurs</value>
        <value selector="AccessThisComputerFromTheNetwork_french-selector-10">Administrateurs|Utilisateurs authentifiés</value>
        <value selector="AccessThisComputerFromTheNetwork_french-selector-11">Administrateurs|Utilisateurs authentifiés|ENTERPRISE DOMAIN CONTROLLERS</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren|Benutzer</value>
        <value selector="AccessThisComputerFromTheNetwork_german-selector-2">Administratoren|Authentifizierte Benutzer|DOMÄNENCONTROLLER DER ORGANISATION</value>
        <value selector="AccessThisComputerFromTheNetwork_german-selector-4">Administratoren|Authentifizierte Benutzer</value>
        <value selector="AccessThisComputerFromTheNetwork_german-selector-5">Administratoren|Authentifizierte Benutzer</value>
        <value selector="AccessThisComputerFromTheNetwork_german-selector-7">Administratoren|Authentifizierte Benutzer|DOMÄNENCONTROLLER DER ORGANISATION</value>
        <value selector="AccessThisComputerFromTheNetwork_german-selector-9">Administratoren</value>
        <value selector="AccessThisComputerFromTheNetwork_german-selector-10">Administratoren|Authentifizierte Benutzer</value>
        <value selector="AccessThisComputerFromTheNetwork_german-selector-11">Administratoren|Authentifizierte Benutzer|DOMÄNENCONTROLLER DER ORGANISATION</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy|Użytkownicy</value>
        <value selector="AccessThisComputerFromTheNetwork_polish-selector-2">Administratorzy|Użytkownicy uwierzytelnieni|KONTROLERY DOMENY PRZEDSIĘBIORSTWA</value>
        <value selector="AccessThisComputerFromTheNetwork_polish-selector-4">Administratorzy|Użytkownicy uwierzytelnieni</value>
        <value selector="AccessThisComputerFromTheNetwork_polish-selector-7">Administratorzy|Użytkownicy uwierzytelnieni|KONTROLERY DOMENY PRZEDSIĘBIORSTWA</value>
        <value selector="AccessThisComputerFromTheNetwork_polish-selector-8">Administratorzy|Użytkownicy uwierzytelnieni</value>
        <value selector="AccessThisComputerFromTheNetwork_polish-selector-9">Administratorzy</value>
        <value selector="AccessThisComputerFromTheNetwork_polish-selector-10">Administratorzy|Użytkownicy uwierzytelnieni</value>
        <value selector="AccessThisComputerFromTheNetwork_polish-selector-11">Administratorzy|Użytkownicy uwierzytelnieni|KONTROLERY DOMENY PRZEDSIĘBIORSTWA</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|Usuários</value>
        <value selector="AccessThisComputerFromTheNetwork_portuguese-selector-2">Administradores|Usuários autenticados|CONTROLADORES DE DOMÍNIO DA EMPRESA</value>
        <value selector="AccessThisComputerFromTheNetwork_portuguese-selector-4">Administradores|Usuários autenticados</value>
        <value selector="AccessThisComputerFromTheNetwork_portuguese-selector-5">Administradores|Usuários autenticados</value>
        <value selector="AccessThisComputerFromTheNetwork_portuguese-selector-7">Administradores|Usuários autenticados|CONTROLADORES DE DOMÍNIO DA EMPRESA</value>
        <value selector="AccessThisComputerFromTheNetwork_portuguese-selector-9">Administradores</value>
        <value selector="AccessThisComputerFromTheNetwork_portuguese-selector-10">Administradores|Usuários autenticados</value>
        <value selector="AccessThisComputerFromTheNetwork_portuguese-selector-11">Administradores|Usuários autenticados|CONTROLADORES DE DOMÍNIO DA EMPRESA</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer|Användare</value>
        <value selector="AccessThisComputerFromTheNetwork_swedish-selector-2">Administratörer|Autentiserade användare|FÖRETAGETS DOMÄNKONTROLLANTER</value>
        <value selector="AccessThisComputerFromTheNetwork_swedish-selector-4">Administratörer|Autentiserade användare</value>
        <value selector="AccessThisComputerFromTheNetwork_swedish-selector-5">Administratörer|Autentiserade användare</value>
        <value selector="AccessThisComputerFromTheNetwork_swedish-selector-7">Administratörer|Autentiserade användare|FÖRETAGETS DOMÄNKONTROLLANTER</value>
        <value selector="AccessThisComputerFromTheNetwork_swedish-selector-9">Administratörer</value>
        <value selector="AccessThisComputerFromTheNetwork_swedish-selector-10">Administratörer|Autentiserade användare</value>
        <value selector="AccessThisComputerFromTheNetwork_swedish-selector-11">Administratörer|Autentiserade användare|FÖRETAGETS DOMÄNKONTROLLANTER</value>
      </Value>
      <Value id="AccessThisComputerFromTheNetwork_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AccessThisComputerFromTheNetwork_turkish-selector-3">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_turkish-selector-4">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_turkish-selector-5">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_turkish-selector-7">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
        <value selector="AccessThisComputerFromTheNetwork_turkish-selector-9">Administrators</value>
        <value selector="AccessThisComputerFromTheNetwork_turkish-selector-10">Administrators|Authenticated Users</value>
        <value selector="AccessThisComputerFromTheNetwork_turkish-selector-11">Administrators|Authenticated Users|ENTERPRISE DOMAIN CONTROLLERS</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="ActAsPartOfTheOperatingSystem_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AddWorkstationsToDomain_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_english-selector">Administrators</value>
        <value selector="AddWorkstationsToDomain_english-selector-1">Administrators</value>
        <value selector="AddWorkstationsToDomain_english-selector-2">Administrators</value>
      </Value>
      <Value id="AddWorkstationsToDomain_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_italian-selector">Administrators</value>
        <value selector="AddWorkstationsToDomain_italian-selector-1">Administrators</value>
        <value selector="AddWorkstationsToDomain_italian-selector-2">Administrators</value>
      </Value>
      <Value id="AddWorkstationsToDomain_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_spanish-selector">Administradores</value>
        <value selector="AddWorkstationsToDomain_spanish-selector-1">Administradores</value>
        <value selector="AddWorkstationsToDomain_spanish-selector-2">Administradores</value>
      </Value>
      <Value id="AddWorkstationsToDomain_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_chinese-selector">Administrators</value>
        <value selector="AddWorkstationsToDomain_chinese-selector-1">Administrators</value>
        <value selector="AddWorkstationsToDomain_chinese-selector-2">Administrators</value>
      </Value>
      <Value id="AddWorkstationsToDomain_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_japanese-selector">Administrators</value>
        <value selector="AddWorkstationsToDomain_japanese-selector-1">Administrators</value>
        <value selector="AddWorkstationsToDomain_japanese-selector-2">Administrators</value>
      </Value>
      <Value id="AddWorkstationsToDomain_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_french-selector">Administrateurs</value>
        <value selector="AddWorkstationsToDomain_french-selector-1">Administrateurs</value>
        <value selector="AddWorkstationsToDomain_french-selector-2">Administrateurs</value>
      </Value>
      <Value id="AddWorkstationsToDomain_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_german-selector">Administratoren</value>
        <value selector="AddWorkstationsToDomain_german-selector-1">Administratoren</value>
        <value selector="AddWorkstationsToDomain_german-selector-2">Administratoren</value>
      </Value>
      <Value id="AddWorkstationsToDomain_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_polish-selector">Administratorzy</value>
        <value selector="AddWorkstationsToDomain_polish-selector-1">Administratorzy</value>
        <value selector="AddWorkstationsToDomain_polish-selector-2">Administratorzy</value>
      </Value>
      <Value id="AddWorkstationsToDomain_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_portuguese-selector">Administradores</value>
        <value selector="AddWorkstationsToDomain_portuguese-selector-1">Administradores</value>
        <value selector="AddWorkstationsToDomain_portuguese-selector-2">Administradores</value>
      </Value>
      <Value id="AddWorkstationsToDomain_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_swedish-selector">Administratörer</value>
        <value selector="AddWorkstationsToDomain_swedish-selector-1">Administratörer</value>
        <value selector="AddWorkstationsToDomain_swedish-selector-2">Administratörer</value>
      </Value>
      <Value id="AddWorkstationsToDomain_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AddWorkstationsToDomain_turkish-selector">Administrators</value>
        <value selector="AddWorkstationsToDomain_turkish-selector-1">Administrators</value>
        <value selector="AddWorkstationsToDomain_turkish-selector-2">Administrators</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="BackUpFilesAndDirectories_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="BypassTraverseChecking_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Users</value>
        <value selector="BypassTraverseChecking_english-selector-2">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_english-selector-5">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_english-selector-8">Administrators|Users|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_english-selector-9">Administrators|Users|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_english-selector-10">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_english-selector-11">Administrators|Authenticated Users|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="BypassTraverseChecking_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Users</value>
        <value selector="BypassTraverseChecking_italian-selector-2">Administrators|Authenticated Users|Backup Operators|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="BypassTraverseChecking_italian-selector-5">Administrators|Authenticated Users|Backup Operators|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="BypassTraverseChecking_italian-selector-8">Administrators|Users|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="BypassTraverseChecking_italian-selector-9">Administrators|Users|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="BypassTraverseChecking_italian-selector-10">Administrators|Authenticated Users|Backup Operators|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="BypassTraverseChecking_italian-selector-11">Administrators|Authenticated Users|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
      </Value>
      <Value id="BypassTraverseChecking_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Usuarios</value>
        <value selector="BypassTraverseChecking_spanish-selector-2">Administradores|Usuarios autentificados|Operadores de copia|SERVICIO LOCAL|Servicio de red</value>
        <value selector="BypassTraverseChecking_spanish-selector-5">Administradores|Usuarios autentificados|Operadores de copia|SERVICIO LOCAL|Servicio de red</value>
        <value selector="BypassTraverseChecking_spanish-selector-8">Administradores|Usuarios|SERVICIO LOCAL|Servicio de red</value>
        <value selector="BypassTraverseChecking_spanish-selector-9">Administradores|Usuarios|SERVICIO LOCAL|Servicio de red</value>
        <value selector="BypassTraverseChecking_spanish-selector-10">Administradores|Usuarios autentificados|Operadores de copia|SERVICIO LOCAL|Servicio de red</value>
        <value selector="BypassTraverseChecking_spanish-selector-11">Administradores|Usuarios autentificados|SERVICIO LOCAL|Servicio de red</value>
      </Value>
      <Value id="BypassTraverseChecking_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Users</value>
        <value selector="BypassTraverseChecking_chinese-selector-2">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_chinese-selector-5">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_chinese-selector-8">Administrators|Users|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_chinese-selector-9">Administrators|Users|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_chinese-selector-10">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_chinese-selector-11">Administrators|Authenticated Users|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="BypassTraverseChecking_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Users</value>
        <value selector="BypassTraverseChecking_japanese-selector-2">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_japanese-selector-5">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_japanese-selector-8">Administrators|Users|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_japanese-selector-9">Administrators|Users|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_japanese-selector-10">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_japanese-selector-11">Administrators|Authenticated Users|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="BypassTraverseChecking_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Utilisateurs</value>
        <value selector="BypassTraverseChecking_french-selector-2">Administrateurs|Utilisateurs authentifiés|Opérateurs de sauvegarde|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="BypassTraverseChecking_french-selector-5">Administrateurs|Utilisateurs authentifiés|Opérateurs de sauvegarde|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="BypassTraverseChecking_french-selector-8">Administrateurs|Utilisateurs|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="BypassTraverseChecking_french-selector-9">Administrateurs|Utilisateurs|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="BypassTraverseChecking_french-selector-10">Administrateurs|Utilisateurs authentifiés|Opérateurs de sauvegarde|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="BypassTraverseChecking_french-selector-11">Administrateurs|Utilisateurs authentifiés|SERVICE LOCAL|SERVICE RÉSEAU</value>
      </Value>
      <Value id="BypassTraverseChecking_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Benutzer</value>
        <value selector="BypassTraverseChecking_german-selector-2">Administratoren|Authentifizierte Benutzer|Sicherungs-Operatoren|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="BypassTraverseChecking_german-selector-5">Administratoren|Authentifizierte Benutzer|Sicherungs-Operatoren|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="BypassTraverseChecking_german-selector-8">Administratoren|Benutzer|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="BypassTraverseChecking_german-selector-9">Administratoren|Benutzer|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="BypassTraverseChecking_german-selector-10">Administratoren|Authentifizierte Benutzer|Sicherungs-Operatoren|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="BypassTraverseChecking_german-selector-11">Administratoren|Authentifizierte Benutzer|LOKALER DIENST|NETZWERKDIENST</value>
      </Value>
      <Value id="BypassTraverseChecking_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Użytkownicy</value>
        <value selector="BypassTraverseChecking_polish-selector-2">Administratorzy|Użytkownicy uwierzytelnieni|Operatorzy kopii zapasowych|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="BypassTraverseChecking_polish-selector-5">Administratorzy|Użytkownicy uwierzytelnieni|Operatorzy kopii zapasowych|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="BypassTraverseChecking_polish-selector-8">Administratorzy|Użytkownicy|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="BypassTraverseChecking_polish-selector-9">Administratorzy|Użytkownicy|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="BypassTraverseChecking_polish-selector-10">Administratorzy|Użytkownicy uwierzytelnieni|Operatorzy kopii zapasowych|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="BypassTraverseChecking_polish-selector-11">Administratorzy|Użytkownicy uwierzytelnieni|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
      </Value>
      <Value id="BypassTraverseChecking_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Usuários</value>
        <value selector="BypassTraverseChecking_portuguese-selector-2">Administradores|Usuários autenticados|Operadores de cópia|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="BypassTraverseChecking_portuguese-selector-5">Administradores|Usuários autenticados|Operadores de cópia|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="BypassTraverseChecking_portuguese-selector-8">Administradores|Usuários|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="BypassTraverseChecking_portuguese-selector-9">Administradores|Usuários|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="BypassTraverseChecking_portuguese-selector-10">Administradores|Usuários autenticados|Operadores de cópia|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="BypassTraverseChecking_portuguese-selector-11">Administradores|Usuários autenticados|LOCAL SERVICE|SERVIÇO DE REDE</value>
      </Value>
      <Value id="BypassTraverseChecking_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Användare</value>
        <value selector="BypassTraverseChecking_swedish-selector-2">Administratörer|Autentiserade användare|Ansvariga för säkerhetskopiering|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_swedish-selector-5">Administratörer|Autentiserade användare|Ansvariga för säkerhetskopiering|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_swedish-selector-8">Administratörer|Användare|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_swedish-selector-9">Administratörer|Användare|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_swedish-selector-10">Administratörer|Autentiserade användare|Ansvariga för säkerhetskopiering|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_swedish-selector-11">Administratörer|Autentiserade användare|LOKAL TJÄNST|NETWORK SERVICE</value>
      </Value>
      <Value id="BypassTraverseChecking_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Users</value>
        <value selector="BypassTraverseChecking_turkish-selector-2">Administrators|Authenticated Users|Backup Operators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_turkish-selector-5">Administrators|Authenticated Users|Backup Operators|Local Service|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_turkish-selector-8">Administrators|Users|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_turkish-selector-9">Administrators|Users|Local Service|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_turkish-selector-10">Administrators|Authenticated Users|Backup Operators|Local Service|NETWORK SERVICE</value>
        <value selector="BypassTraverseChecking_turkish-selector-11">Administrators|Authenticated Users|Local Service|NETWORK SERVICE</value>
      </Value>
      <Value id="ChangeTheSystemTime_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
      </Value>
      <Value id="ChangeTheSystemTime_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|SERVIZIO LOCALE</value>
      </Value>
      <Value id="ChangeTheSystemTime_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|SERVICIO LOCAL</value>
      </Value>
      <Value id="ChangeTheSystemTime_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
      </Value>
      <Value id="ChangeTheSystemTime_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
      </Value>
      <Value id="ChangeTheSystemTime_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs|SERVICE LOCAL</value>
      </Value>
      <Value id="ChangeTheSystemTime_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren|LOKALER DIENST</value>
      </Value>
      <Value id="ChangeTheSystemTime_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy|USŁUGA LOKALNA</value>
      </Value>
      <Value id="ChangeTheSystemTime_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|LOCAL SERVICE</value>
      </Value>
      <Value id="ChangeTheSystemTime_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer|LOKAL TJÄNST</value>
      </Value>
      <Value id="ChangeTheSystemTime_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
        <value selector="ChangeTheSystemTime_turkish-selector">Administrators|Local Service</value>
        <value selector="ChangeTheSystemTime_turkish-selector-3">Administrators|Local Service</value>
        <value selector="ChangeTheSystemTime_turkish-selector-4">Administrators|Local Service</value>
      </Value>
      <Value id="CreateAPagefile_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="CreateAPagefile_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="CreateAPagefile_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="CreateAPagefile_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="CreateAPagefile_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="CreateAPagefile_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="CreateAPagefile_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="CreateAPagefile_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="CreateAPagefile_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="CreateAPagefile_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="CreateAPagefile_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="CreateATokenObject_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreateATokenObject_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="CreatePermanentSharedObjects_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DebugPrograms_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_english-selector-0">Administrators</value>
        <value selector="DebugPrograms_english-selector-2">Administrators</value>
        <value selector="DebugPrograms_english-selector-4">Administrators</value>
        <value selector="DebugPrograms_english-selector-5">Administrators</value>
        <value selector="DebugPrograms_english-selector-6">Administrators</value>
        <value selector="DebugPrograms_english-selector-7">Administrators</value>
        <value selector="DebugPrograms_english-selector-8">Administrators</value>
        <value selector="DebugPrograms_english-selector-9">Administrators</value>
        <value selector="DebugPrograms_english-selector-10">Administrators</value>
      </Value>
      <Value id="DebugPrograms_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_italian-selector-0">Administrators</value>
        <value selector="DebugPrograms_italian-selector-2">Administrators</value>
        <value selector="DebugPrograms_italian-selector-4">Administrators</value>
        <value selector="DebugPrograms_italian-selector-5">Administrators</value>
        <value selector="DebugPrograms_italian-selector-6">Administrators</value>
        <value selector="DebugPrograms_italian-selector-7">Administrators</value>
        <value selector="DebugPrograms_italian-selector-8">Administrators</value>
        <value selector="DebugPrograms_italian-selector-9">Administrators</value>
        <value selector="DebugPrograms_italian-selector-10">Administrators</value>
      </Value>
      <Value id="DebugPrograms_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_spanish-selector-0">Administradores</value>
        <value selector="DebugPrograms_spanish-selector-2">Administradores</value>
        <value selector="DebugPrograms_spanish-selector-4">Administradores</value>
        <value selector="DebugPrograms_spanish-selector-5">Administradores</value>
        <value selector="DebugPrograms_spanish-selector-6">Administradores</value>
        <value selector="DebugPrograms_spanish-selector-7">Administradores</value>
        <value selector="DebugPrograms_spanish-selector-8">Administradores</value>
        <value selector="DebugPrograms_spanish-selector-9">Administradores</value>
        <value selector="DebugPrograms_spanish-selector-10">Administradores</value>
      </Value>
      <Value id="DebugPrograms_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_chinese-selector-0">Administrators</value>
        <value selector="DebugPrograms_chinese-selector-2">Administrators</value>
        <value selector="DebugPrograms_chinese-selector-4">Administrators</value>
        <value selector="DebugPrograms_chinese-selector-5">Administrators</value>
        <value selector="DebugPrograms_chinese-selector-6">Administrators</value>
        <value selector="DebugPrograms_chinese-selector-7">Administrators</value>
        <value selector="DebugPrograms_chinese-selector-8">Administrators</value>
        <value selector="DebugPrograms_chinese-selector-9">Administrators</value>
        <value selector="DebugPrograms_chinese-selector-10">Administrators</value>
      </Value>
      <Value id="DebugPrograms_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_japanese-selector-0">Administrators</value>
        <value selector="DebugPrograms_japanese-selector-2">Administrators</value>
        <value selector="DebugPrograms_japanese-selector-4">Administrators</value>
        <value selector="DebugPrograms_japanese-selector-5">Administrators</value>
        <value selector="DebugPrograms_japanese-selector-6">Administrators</value>
        <value selector="DebugPrograms_japanese-selector-7">Administrators</value>
        <value selector="DebugPrograms_japanese-selector-8">Administrators</value>
        <value selector="DebugPrograms_japanese-selector-9">Administrators</value>
        <value selector="DebugPrograms_japanese-selector-10">Administrators</value>
      </Value>
      <Value id="DebugPrograms_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_french-selector-0">Administrateurs</value>
        <value selector="DebugPrograms_french-selector-2">Administrateurs</value>
        <value selector="DebugPrograms_french-selector-4">Administrateurs</value>
        <value selector="DebugPrograms_french-selector-5">Administrateurs</value>
        <value selector="DebugPrograms_french-selector-6">Administrateurs</value>
        <value selector="DebugPrograms_french-selector-7">Administrateurs</value>
        <value selector="DebugPrograms_french-selector-8">Administrateurs</value>
        <value selector="DebugPrograms_french-selector-9">Administrateurs</value>
        <value selector="DebugPrograms_french-selector-10">Administrateurs</value>
      </Value>
      <Value id="DebugPrograms_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_german-selector-0">Administratoren</value>
        <value selector="DebugPrograms_german-selector-2">Administratoren</value>
        <value selector="DebugPrograms_german-selector-4">Administratoren</value>
        <value selector="DebugPrograms_german-selector-5">Administratoren</value>
        <value selector="DebugPrograms_german-selector-6">Administratoren</value>
        <value selector="DebugPrograms_german-selector-7">Administratoren</value>
        <value selector="DebugPrograms_german-selector-8">Administratoren</value>
        <value selector="DebugPrograms_german-selector-9">Administratoren</value>
        <value selector="DebugPrograms_german-selector-10">Administratoren</value>
      </Value>
      <Value id="DebugPrograms_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_polish-selector-0">Administratorzy</value>
        <value selector="DebugPrograms_polish-selector-2">Administratorzy</value>
        <value selector="DebugPrograms_polish-selector-4">Administratorzy</value>
        <value selector="DebugPrograms_polish-selector-5">Administratorzy</value>
        <value selector="DebugPrograms_polish-selector-6">Administratorzy</value>
        <value selector="DebugPrograms_polish-selector-7">Administratorzy</value>
        <value selector="DebugPrograms_polish-selector-8">Administratorzy</value>
        <value selector="DebugPrograms_polish-selector-9">Administratorzy</value>
        <value selector="DebugPrograms_polish-selector-10">Administratorzy</value>
      </Value>
      <Value id="DebugPrograms_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_portuguese-selector-0">Administradores</value>
        <value selector="DebugPrograms_portuguese-selector-2">Administradores</value>
        <value selector="DebugPrograms_portuguese-selector-4">Administradores</value>
        <value selector="DebugPrograms_portuguese-selector-5">Administradores</value>
        <value selector="DebugPrograms_portuguese-selector-6">Administradores</value>
        <value selector="DebugPrograms_portuguese-selector-7">Administradores</value>
        <value selector="DebugPrograms_portuguese-selector-8">Administradores</value>
        <value selector="DebugPrograms_portuguese-selector-9">Administradores</value>
        <value selector="DebugPrograms_portuguese-selector-10">Administradores</value>
      </Value>
      <Value id="DebugPrograms_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_swedish-selector-0">Administratörer</value>
        <value selector="DebugPrograms_swedish-selector-2">Administratörer</value>
        <value selector="DebugPrograms_swedish-selector-4">Administratörer</value>
        <value selector="DebugPrograms_swedish-selector-5">Administratörer</value>
        <value selector="DebugPrograms_swedish-selector-6">Administratörer</value>
        <value selector="DebugPrograms_swedish-selector-7">Administratörer</value>
        <value selector="DebugPrograms_swedish-selector-8">Administratörer</value>
        <value selector="DebugPrograms_swedish-selector-9">Administratörer</value>
        <value selector="DebugPrograms_swedish-selector-10">Administratörer</value>
      </Value>
      <Value id="DebugPrograms_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DebugPrograms_turkish-selector-0">Administrators</value>
        <value selector="DebugPrograms_turkish-selector-2">Administrators</value>
        <value selector="DebugPrograms_turkish-selector-4">Administrators</value>
        <value selector="DebugPrograms_turkish-selector-5">Administrators</value>
        <value selector="DebugPrograms_turkish-selector-6">Administrators</value>
        <value selector="DebugPrograms_turkish-selector-7">Administrators</value>
        <value selector="DebugPrograms_turkish-selector-8">Administrators</value>
        <value selector="DebugPrograms_turkish-selector-9">Administrators</value>
        <value selector="DebugPrograms_turkish-selector-10">Administrators</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Guests</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_english-selector-0">Guests|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Guests</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_italian-selector-0">Guests|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Invitados</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_spanish-selector-0">Invitados|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Guests</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_chinese-selector-0">Guests|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Guests</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_japanese-selector-0">Guests|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Invités</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_french-selector-0">Invités|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Gäste</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_german-selector-0">Gäste|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Goście</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_polish-selector-0">Goście|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Convidados</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_portuguese-selector-0">Convidados|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Gäster</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_swedish-selector-0">Gäster|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyAccessToThisComputerFromTheNetwork_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Guests</value>
        <value selector="DenyAccessToThisComputerFromTheNetwork_turkish-selector-0">Guests|SUPPORT_388945a0</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_english-selector">Guests</value>
        <value selector="DenyLogOnAsABatchJob_english-selector-0">Guests</value>
        <value selector="DenyLogOnAsABatchJob_english-selector-1">Guests</value>
        <value selector="DenyLogOnAsABatchJob_english-selector-2">Guests</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_italian-selector">Guests</value>
        <value selector="DenyLogOnAsABatchJob_italian-selector-0">Guests</value>
        <value selector="DenyLogOnAsABatchJob_italian-selector-1">Guests</value>
        <value selector="DenyLogOnAsABatchJob_italian-selector-2">Guests</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_spanish-selector">Invitados</value>
        <value selector="DenyLogOnAsABatchJob_spanish-selector-0">Invitados</value>
        <value selector="DenyLogOnAsABatchJob_spanish-selector-1">Invitados</value>
        <value selector="DenyLogOnAsABatchJob_spanish-selector-2">Invitados</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_chinese-selector">Guests</value>
        <value selector="DenyLogOnAsABatchJob_chinese-selector-0">Guests</value>
        <value selector="DenyLogOnAsABatchJob_chinese-selector-1">Guests</value>
        <value selector="DenyLogOnAsABatchJob_chinese-selector-2">Guests</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_japanese-selector">Guests</value>
        <value selector="DenyLogOnAsABatchJob_japanese-selector-0">Guests</value>
        <value selector="DenyLogOnAsABatchJob_japanese-selector-1">Guests</value>
        <value selector="DenyLogOnAsABatchJob_japanese-selector-2">Guests</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_french-selector">Invités</value>
        <value selector="DenyLogOnAsABatchJob_french-selector-0">Invités</value>
        <value selector="DenyLogOnAsABatchJob_french-selector-1">Invités</value>
        <value selector="DenyLogOnAsABatchJob_french-selector-2">Invités</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_german-selector">Gäste</value>
        <value selector="DenyLogOnAsABatchJob_german-selector-0">Gäste</value>
        <value selector="DenyLogOnAsABatchJob_german-selector-1">Gäste</value>
        <value selector="DenyLogOnAsABatchJob_german-selector-2">Gäste</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_polish-selector">Goście</value>
        <value selector="DenyLogOnAsABatchJob_polish-selector-0">Goście</value>
        <value selector="DenyLogOnAsABatchJob_polish-selector-1">Goście</value>
        <value selector="DenyLogOnAsABatchJob_polish-selector-2">Goście</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_portuguese-selector">Convidados</value>
        <value selector="DenyLogOnAsABatchJob_portuguese-selector-0">Convidados</value>
        <value selector="DenyLogOnAsABatchJob_portuguese-selector-1">Convidados</value>
        <value selector="DenyLogOnAsABatchJob_portuguese-selector-2">Convidados</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_swedish-selector">Gäster</value>
        <value selector="DenyLogOnAsABatchJob_swedish-selector-0">Gäster</value>
        <value selector="DenyLogOnAsABatchJob_swedish-selector-1">Gäster</value>
        <value selector="DenyLogOnAsABatchJob_swedish-selector-2">Gäster</value>
      </Value>
      <Value id="DenyLogOnAsABatchJob_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnAsABatchJob_turkish-selector">Guests</value>
        <value selector="DenyLogOnAsABatchJob_turkish-selector-0">Guests</value>
        <value selector="DenyLogOnAsABatchJob_turkish-selector-1">Guests</value>
        <value selector="DenyLogOnAsABatchJob_turkish-selector-2">Guests</value>
      </Value>
      <Value id="DenyLogOnAsAService_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnAsAService_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="DenyLogOnLocally_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_english-selector">Guests</value>
        <value selector="DenyLogOnLocally_english-selector-3">Guests</value>
        <value selector="DenyLogOnLocally_english-selector-4">Guests</value>
        <value selector="DenyLogOnLocally_english-selector-9">Guests</value>
        <value selector="DenyLogOnLocally_english-selector-10">Guests</value>
        <value selector="DenyLogOnLocally_english-selector-11">Guests</value>
        <value selector="DenyLogOnLocally_english-selector-12">Guests</value>
        <value selector="DenyLogOnLocally_english-selector-13">Guests</value>
        <value selector="DenyLogOnLocally_english-selector-14">Guests</value>
      </Value>
      <Value id="DenyLogOnLocally_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_italian-selector">Guests</value>
        <value selector="DenyLogOnLocally_italian-selector-3">Guests</value>
        <value selector="DenyLogOnLocally_italian-selector-4">Guests</value>
        <value selector="DenyLogOnLocally_italian-selector-9">Guests</value>
        <value selector="DenyLogOnLocally_italian-selector-10">Guests</value>
        <value selector="DenyLogOnLocally_italian-selector-11">Guests</value>
        <value selector="DenyLogOnLocally_italian-selector-12">Guests</value>
        <value selector="DenyLogOnLocally_italian-selector-13">Guests</value>
        <value selector="DenyLogOnLocally_italian-selector-14">Guests</value>
      </Value>
      <Value id="DenyLogOnLocally_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_spanish-selector">Invitados</value>
        <value selector="DenyLogOnLocally_spanish-selector-3">Invitados</value>
        <value selector="DenyLogOnLocally_spanish-selector-4">Invitados</value>
        <value selector="DenyLogOnLocally_spanish-selector-9">Invitados</value>
        <value selector="DenyLogOnLocally_spanish-selector-10">Invitados</value>
        <value selector="DenyLogOnLocally_spanish-selector-11">Invitados</value>
        <value selector="DenyLogOnLocally_spanish-selector-12">Invitados</value>
        <value selector="DenyLogOnLocally_spanish-selector-13">Invitados</value>
        <value selector="DenyLogOnLocally_spanish-selector-14">Invitados</value>
      </Value>
      <Value id="DenyLogOnLocally_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_chinese-selector">Guests</value>
        <value selector="DenyLogOnLocally_chinese-selector-3">Guests</value>
        <value selector="DenyLogOnLocally_chinese-selector-4">Guests</value>
        <value selector="DenyLogOnLocally_chinese-selector-9">Guests</value>
        <value selector="DenyLogOnLocally_chinese-selector-10">Guests</value>
        <value selector="DenyLogOnLocally_chinese-selector-11">Guests</value>
        <value selector="DenyLogOnLocally_chinese-selector-12">Guests</value>
        <value selector="DenyLogOnLocally_chinese-selector-13">Guests</value>
        <value selector="DenyLogOnLocally_chinese-selector-14">Guests</value>
      </Value>
      <Value id="DenyLogOnLocally_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_japanese-selector">Guests</value>
        <value selector="DenyLogOnLocally_japanese-selector-3">Guests</value>
        <value selector="DenyLogOnLocally_japanese-selector-4">Guests</value>
        <value selector="DenyLogOnLocally_japanese-selector-9">Guests</value>
        <value selector="DenyLogOnLocally_japanese-selector-10">Guests</value>
        <value selector="DenyLogOnLocally_japanese-selector-11">Guests</value>
        <value selector="DenyLogOnLocally_japanese-selector-12">Guests</value>
        <value selector="DenyLogOnLocally_japanese-selector-13">Guests</value>
        <value selector="DenyLogOnLocally_japanese-selector-14">Guests</value>
      </Value>
      <Value id="DenyLogOnLocally_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_french-selector">Invités</value>
        <value selector="DenyLogOnLocally_french-selector-3">Invités</value>
        <value selector="DenyLogOnLocally_french-selector-4">Invités</value>
        <value selector="DenyLogOnLocally_french-selector-9">Invités</value>
        <value selector="DenyLogOnLocally_french-selector-10">Invités</value>
        <value selector="DenyLogOnLocally_french-selector-11">Invités</value>
        <value selector="DenyLogOnLocally_french-selector-12">Invités</value>
        <value selector="DenyLogOnLocally_french-selector-13">Invités</value>
        <value selector="DenyLogOnLocally_french-selector-14">Invités</value>
      </Value>
      <Value id="DenyLogOnLocally_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_german-selector">Gäste</value>
        <value selector="DenyLogOnLocally_german-selector-3">Gäste</value>
        <value selector="DenyLogOnLocally_german-selector-4">Gäste</value>
        <value selector="DenyLogOnLocally_german-selector-9">Gäste</value>
        <value selector="DenyLogOnLocally_german-selector-10">Gäste</value>
        <value selector="DenyLogOnLocally_german-selector-11">Gäste</value>
        <value selector="DenyLogOnLocally_german-selector-12">Gäste</value>
        <value selector="DenyLogOnLocally_german-selector-13">Gäste</value>
        <value selector="DenyLogOnLocally_german-selector-14">Gäste</value>
      </Value>
      <Value id="DenyLogOnLocally_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_polish-selector">Goście</value>
        <value selector="DenyLogOnLocally_polish-selector-3">Goście</value>
        <value selector="DenyLogOnLocally_polish-selector-4">Goście</value>
        <value selector="DenyLogOnLocally_polish-selector-9">Goście</value>
        <value selector="DenyLogOnLocally_polish-selector-10">Goście</value>
        <value selector="DenyLogOnLocally_polish-selector-11">Goście</value>
        <value selector="DenyLogOnLocally_polish-selector-12">Goście</value>
        <value selector="DenyLogOnLocally_polish-selector-13">Goście</value>
        <value selector="DenyLogOnLocally_polish-selector-14">Goście</value>
      </Value>
      <Value id="DenyLogOnLocally_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_portuguese-selector">Convidados</value>
        <value selector="DenyLogOnLocally_portuguese-selector-3">Convidados</value>
        <value selector="DenyLogOnLocally_portuguese-selector-4">Convidados</value>
        <value selector="DenyLogOnLocally_portuguese-selector-9">Convidados</value>
        <value selector="DenyLogOnLocally_portuguese-selector-10">Convidados</value>
        <value selector="DenyLogOnLocally_portuguese-selector-11">Convidados</value>
        <value selector="DenyLogOnLocally_portuguese-selector-12">Convidados</value>
        <value selector="DenyLogOnLocally_portuguese-selector-13">Convidados</value>
        <value selector="DenyLogOnLocally_portuguese-selector-14">Convidados</value>
      </Value>
      <Value id="DenyLogOnLocally_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_swedish-selector">Gäster</value>
        <value selector="DenyLogOnLocally_swedish-selector-3">Gäster</value>
        <value selector="DenyLogOnLocally_swedish-selector-4">Gäster</value>
        <value selector="DenyLogOnLocally_swedish-selector-9">Gäster</value>
        <value selector="DenyLogOnLocally_swedish-selector-10">Gäster</value>
        <value selector="DenyLogOnLocally_swedish-selector-11">Gäster</value>
        <value selector="DenyLogOnLocally_swedish-selector-12">Gäster</value>
        <value selector="DenyLogOnLocally_swedish-selector-13">Gäster</value>
        <value selector="DenyLogOnLocally_swedish-selector-14">Gäster</value>
      </Value>
      <Value id="DenyLogOnLocally_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnLocally_turkish-selector">Guests</value>
        <value selector="DenyLogOnLocally_turkish-selector-3">Guests</value>
        <value selector="DenyLogOnLocally_turkish-selector-4">Guests</value>
        <value selector="DenyLogOnLocally_turkish-selector-9">Guests</value>
        <value selector="DenyLogOnLocally_turkish-selector-10">Guests</value>
        <value selector="DenyLogOnLocally_turkish-selector-11">Guests</value>
        <value selector="DenyLogOnLocally_turkish-selector-12">Guests</value>
        <value selector="DenyLogOnLocally_turkish-selector-13">Guests</value>
        <value selector="DenyLogOnLocally_turkish-selector-14">Guests</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_english-selector">Administrators</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_italian-selector">Administrators</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_spanish-selector">Administradores</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_chinese-selector">Administrators</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_japanese-selector">Administrators</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_french-selector">Administrateurs</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_german-selector">Administratoren</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_polish-selector">Administratorzy</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_portuguese-selector">Administradores</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_swedish-selector">Administratörer</value>
      </Value>
      <Value id="EnableComputerAndUserAccountsToBeTrustedForDelegation_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="EnableComputerAndUserAccountsToBeTrustedForDelegation_turkish-selector">Administrators</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="ForceShutdownFromARemoteSystem_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="GenerateSecurityAudits_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_english-selector-0">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_english-selector-6">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_english-selector-9">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_english-selector-14">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_english-selector-15">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_english-selector-16">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_english-selector-17">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_english-selector-18">LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="GenerateSecurityAudits_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_italian-selector-0">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="GenerateSecurityAudits_italian-selector-6">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="GenerateSecurityAudits_italian-selector-9">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="GenerateSecurityAudits_italian-selector-14">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="GenerateSecurityAudits_italian-selector-15">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="GenerateSecurityAudits_italian-selector-16">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="GenerateSecurityAudits_italian-selector-17">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="GenerateSecurityAudits_italian-selector-18">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
      </Value>
      <Value id="GenerateSecurityAudits_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_spanish-selector-0">SERVICIO LOCAL|Servicio de red</value>
        <value selector="GenerateSecurityAudits_spanish-selector-6">SERVICIO LOCAL|Servicio de red</value>
        <value selector="GenerateSecurityAudits_spanish-selector-9">SERVICIO LOCAL|Servicio de red</value>
        <value selector="GenerateSecurityAudits_spanish-selector-14">SERVICIO LOCAL|Servicio de red</value>
        <value selector="GenerateSecurityAudits_spanish-selector-15">SERVICIO LOCAL|Servicio de red</value>
        <value selector="GenerateSecurityAudits_spanish-selector-16">SERVICIO LOCAL|Servicio de red</value>
        <value selector="GenerateSecurityAudits_spanish-selector-17">SERVICIO LOCAL|Servicio de red</value>
        <value selector="GenerateSecurityAudits_spanish-selector-18">SERVICIO LOCAL|Servicio de red</value>
      </Value>
      <Value id="GenerateSecurityAudits_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_chinese-selector-0">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_chinese-selector-6">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_chinese-selector-9">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_chinese-selector-14">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_chinese-selector-15">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_chinese-selector-16">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_chinese-selector-17">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_chinese-selector-18">LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="GenerateSecurityAudits_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_japanese-selector-0">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_japanese-selector-6">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_japanese-selector-9">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_japanese-selector-14">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_japanese-selector-15">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_japanese-selector-16">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_japanese-selector-17">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_japanese-selector-18">LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="GenerateSecurityAudits_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_french-selector-0">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="GenerateSecurityAudits_french-selector-6">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="GenerateSecurityAudits_french-selector-9">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="GenerateSecurityAudits_french-selector-14">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="GenerateSecurityAudits_french-selector-15">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="GenerateSecurityAudits_french-selector-16">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="GenerateSecurityAudits_french-selector-17">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="GenerateSecurityAudits_french-selector-18">SERVICE LOCAL|SERVICE RÉSEAU</value>
      </Value>
      <Value id="GenerateSecurityAudits_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_german-selector-0">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="GenerateSecurityAudits_german-selector-6">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="GenerateSecurityAudits_german-selector-9">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="GenerateSecurityAudits_german-selector-14">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="GenerateSecurityAudits_german-selector-15">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="GenerateSecurityAudits_german-selector-16">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="GenerateSecurityAudits_german-selector-17">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="GenerateSecurityAudits_german-selector-18">LOKALER DIENST|NETZWERKDIENST</value>
      </Value>
      <Value id="GenerateSecurityAudits_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_polish-selector-0">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="GenerateSecurityAudits_polish-selector-6">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="GenerateSecurityAudits_polish-selector-9">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="GenerateSecurityAudits_polish-selector-14">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="GenerateSecurityAudits_polish-selector-15">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="GenerateSecurityAudits_polish-selector-16">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="GenerateSecurityAudits_polish-selector-17">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="GenerateSecurityAudits_polish-selector-18">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
      </Value>
      <Value id="GenerateSecurityAudits_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_portuguese-selector-0">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="GenerateSecurityAudits_portuguese-selector-6">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="GenerateSecurityAudits_portuguese-selector-9">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="GenerateSecurityAudits_portuguese-selector-14">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="GenerateSecurityAudits_portuguese-selector-15">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="GenerateSecurityAudits_portuguese-selector-16">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="GenerateSecurityAudits_portuguese-selector-17">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="GenerateSecurityAudits_portuguese-selector-18">LOCAL SERVICE|SERVIÇO DE REDE</value>
      </Value>
      <Value id="GenerateSecurityAudits_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_swedish-selector-0">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_swedish-selector-6">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_swedish-selector-9">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_swedish-selector-14">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_swedish-selector-15">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_swedish-selector-16">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_swedish-selector-17">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_swedish-selector-18">LOKAL TJÄNST|NETWORK SERVICE</value>
      </Value>
      <Value id="GenerateSecurityAudits_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="GenerateSecurityAudits_turkish-selector-0">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_turkish-selector-6">Local Service|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_turkish-selector-9">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_turkish-selector-14">Local Service|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_turkish-selector-15">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_turkish-selector-16">Local Service|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_turkish-selector-17">Local Service|NETWORK SERVICE</value>
        <value selector="GenerateSecurityAudits_turkish-selector-18">Local Service|NETWORK SERVICE</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="AdjustMemoryQuotasForAProcess_english-selector-8">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_english-selector-9">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_english-selector-10">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_english-selector-11">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="AdjustMemoryQuotasForAProcess_italian-selector-8">Administrators|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="AdjustMemoryQuotasForAProcess_italian-selector-9">Administrators|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="AdjustMemoryQuotasForAProcess_italian-selector-10">Administrators|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="AdjustMemoryQuotasForAProcess_italian-selector-11">Administrators|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
        <value selector="AdjustMemoryQuotasForAProcess_spanish-selector-8">Administradores|SERVICIO LOCAL|Servicio de red</value>
        <value selector="AdjustMemoryQuotasForAProcess_spanish-selector-9">Administradores|SERVICIO LOCAL|Servicio de red</value>
        <value selector="AdjustMemoryQuotasForAProcess_spanish-selector-10">Administradores|SERVICIO LOCAL|Servicio de red</value>
        <value selector="AdjustMemoryQuotasForAProcess_spanish-selector-11">Administradores|SERVICIO LOCAL|Servicio de red</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="AdjustMemoryQuotasForAProcess_chinese-selector-8">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_chinese-selector-9">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_chinese-selector-10">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_chinese-selector-11">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="AdjustMemoryQuotasForAProcess_japanese-selector-8">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_japanese-selector-9">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_japanese-selector-10">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_japanese-selector-11">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
        <value selector="AdjustMemoryQuotasForAProcess_french-selector-8">Administrateurs|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="AdjustMemoryQuotasForAProcess_french-selector-9">Administrateurs|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="AdjustMemoryQuotasForAProcess_french-selector-10">Administrateurs|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="AdjustMemoryQuotasForAProcess_french-selector-11">Administrateurs|SERVICE LOCAL|SERVICE RÉSEAU</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
        <value selector="AdjustMemoryQuotasForAProcess_german-selector-8">Administratoren|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="AdjustMemoryQuotasForAProcess_german-selector-9">Administratoren|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="AdjustMemoryQuotasForAProcess_german-selector-10">Administratoren|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="AdjustMemoryQuotasForAProcess_german-selector-11">Administratoren|LOKALER DIENST|NETZWERKDIENST</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
        <value selector="AdjustMemoryQuotasForAProcess_polish-selector-8">Administratorzy|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="AdjustMemoryQuotasForAProcess_polish-selector-9">Administratorzy|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="AdjustMemoryQuotasForAProcess_polish-selector-10">Administratorzy|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="AdjustMemoryQuotasForAProcess_polish-selector-11">Administratorzy|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
        <value selector="AdjustMemoryQuotasForAProcess_portuguese-selector-8">Administradores|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="AdjustMemoryQuotasForAProcess_portuguese-selector-9">Administradores|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="AdjustMemoryQuotasForAProcess_portuguese-selector-10">Administradores|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="AdjustMemoryQuotasForAProcess_portuguese-selector-11">Administradores|LOCAL SERVICE|SERVIÇO DE REDE</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
        <value selector="AdjustMemoryQuotasForAProcess_swedish-selector-8">Administratörer|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_swedish-selector-9">Administratörer|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_swedish-selector-10">Administratörer|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_swedish-selector-11">Administratörer|LOKAL TJÄNST|NETWORK SERVICE</value>
      </Value>
      <Value id="AdjustMemoryQuotasForAProcess_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="AdjustMemoryQuotasForAProcess_turkish-selector-8">Administrators|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_turkish-selector-9">Administrators|Local Service|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_turkish-selector-10">Administrators|Local Service|NETWORK SERVICE</value>
        <value selector="AdjustMemoryQuotasForAProcess_turkish-selector-11">Administrators|Local Service|NETWORK SERVICE</value>
      </Value>
            <Value id="IncreaseSchedulingPriority_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="IncreaseSchedulingPriority_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="LoadAndUnloadDeviceDrivers_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="LockPagesInMemory_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LockPagesInMemory_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsABatchJob_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_english-selector-2">Administrators</value>
        <value selector="LogOnAsABatchJob_english-selector-3">Administrators</value>
      </Value>
      <Value id="LogOnAsABatchJob_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_italian-selector-2">Administrators</value>
        <value selector="LogOnAsABatchJob_italian-selector-3">Administrators</value>
      </Value>
      <Value id="LogOnAsABatchJob_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_spanish-selector-2">Administradores</value>
        <value selector="LogOnAsABatchJob_spanish-selector-3">Administradores</value>
      </Value>
      <Value id="LogOnAsABatchJob_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_chinese-selector-2">Administrators</value>
        <value selector="LogOnAsABatchJob_chinese-selector-3">Administrators</value>
      </Value>
      <Value id="LogOnAsABatchJob_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_japanese-selector-2">Administrators</value>
        <value selector="LogOnAsABatchJob_japanese-selector-3">Administrators</value>
      </Value>
      <Value id="LogOnAsABatchJob_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_french-selector-2">Administrateurs</value>
        <value selector="LogOnAsABatchJob_french-selector-3">Administrateurs</value>
      </Value>
      <Value id="LogOnAsABatchJob_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_german-selector-2">Administratoren</value>
        <value selector="LogOnAsABatchJob_german-selector-3">Administratoren</value>
      </Value>
      <Value id="LogOnAsABatchJob_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_polish-selector-2">Administratorzy</value>
        <value selector="LogOnAsABatchJob_polish-selector-3">Administratorzy</value>
      </Value>
      <Value id="LogOnAsABatchJob_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_portuguese-selector-2">Administradores</value>
        <value selector="LogOnAsABatchJob_portuguese-selector-3">Administradores</value>
      </Value>
      <Value id="LogOnAsABatchJob_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_swedish-selector-2">Administratörer</value>
        <value selector="LogOnAsABatchJob_swedish-selector-3">Administratörer</value>
      </Value>
      <Value id="LogOnAsABatchJob_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="LogOnAsABatchJob_turkish-selector-2">Administrators</value>
        <value selector="LogOnAsABatchJob_turkish-selector-3">Administrators</value>
      </Value>
      <Value id="LogOnAsAService_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="LogOnAsAService_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowLogOnLocally_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AllowLogOnLocally_english-selector-1">Administrators</value>
        <value selector="AllowLogOnLocally_english-selector-4">Administrators</value>
        <value selector="AllowLogOnLocally_english-selector-8">Administrators</value>
        <value selector="AllowLogOnLocally_english-selector-9">Administrators</value>
        <value selector="AllowLogOnLocally_english-selector-10">Administrators</value>
        <value selector="AllowLogOnLocally_english-selector-11">Administrators</value>
        <value selector="AllowLogOnLocally_english-selector-14">Administrators</value>
        <value selector="AllowLogOnLocally_english-selector-15">Administrators</value>
      </Value>
      <Value id="AllowLogOnLocally_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AllowLogOnLocally_italian-selector-1">Administrators</value>
        <value selector="AllowLogOnLocally_italian-selector-4">Administrators</value>
        <value selector="AllowLogOnLocally_italian-selector-8">Administrators</value>
        <value selector="AllowLogOnLocally_italian-selector-9">Administrators</value>
        <value selector="AllowLogOnLocally_italian-selector-10">Administrators</value>
        <value selector="AllowLogOnLocally_italian-selector-11">Administrators</value>
        <value selector="AllowLogOnLocally_italian-selector-14">Administrators</value>
        <value selector="AllowLogOnLocally_italian-selector-15">Administrators</value>
      </Value>
      <Value id="AllowLogOnLocally_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|Usuarios</value>
        <value selector="AllowLogOnLocally_spanish-selector-1">Administradores</value>
        <value selector="AllowLogOnLocally_spanish-selector-4">Administradores</value>
        <value selector="AllowLogOnLocally_spanish-selector-8">Administradores</value>
        <value selector="AllowLogOnLocally_spanish-selector-9">Administradores</value>
        <value selector="AllowLogOnLocally_spanish-selector-10">Administradores</value>
        <value selector="AllowLogOnLocally_spanish-selector-11">Administradores</value>
        <value selector="AllowLogOnLocally_spanish-selector-14">Administradores</value>
        <value selector="AllowLogOnLocally_spanish-selector-15">Administradores</value>
      </Value>
      <Value id="AllowLogOnLocally_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AllowLogOnLocally_chinese-selector-1">Administrators</value>
        <value selector="AllowLogOnLocally_chinese-selector-4">Administrators</value>
        <value selector="AllowLogOnLocally_chinese-selector-8">Administrators</value>
        <value selector="AllowLogOnLocally_chinese-selector-9">Administrators</value>
        <value selector="AllowLogOnLocally_chinese-selector-10">Administrators</value>
        <value selector="AllowLogOnLocally_chinese-selector-11">Administrators</value>
        <value selector="AllowLogOnLocally_chinese-selector-14">Administrators</value>
        <value selector="AllowLogOnLocally_chinese-selector-15">Administrators</value>
      </Value>
      <Value id="AllowLogOnLocally_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AllowLogOnLocally_japanese-selector-1">Administrators</value>
        <value selector="AllowLogOnLocally_japanese-selector-4">Administrators</value>
        <value selector="AllowLogOnLocally_japanese-selector-8">Administrators</value>
        <value selector="AllowLogOnLocally_japanese-selector-9">Administrators</value>
        <value selector="AllowLogOnLocally_japanese-selector-10">Administrators</value>
        <value selector="AllowLogOnLocally_japanese-selector-11">Administrators</value>
        <value selector="AllowLogOnLocally_japanese-selector-14">Administrators</value>
        <value selector="AllowLogOnLocally_japanese-selector-15">Administrators</value>
      </Value>
      <Value id="AllowLogOnLocally_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs|Utilisateurs</value>
        <value selector="AllowLogOnLocally_french-selector-1">Administrateurs</value>
        <value selector="AllowLogOnLocally_french-selector-4">Administrateurs</value>
        <value selector="AllowLogOnLocally_french-selector-8">Administrateurs</value>
        <value selector="AllowLogOnLocally_french-selector-9">Administrateurs</value>
        <value selector="AllowLogOnLocally_french-selector-10">Administrateurs</value>
        <value selector="AllowLogOnLocally_french-selector-11">Administrateurs</value>
        <value selector="AllowLogOnLocally_french-selector-14">Administrateurs</value>
        <value selector="AllowLogOnLocally_french-selector-15">Administrateurs</value>
      </Value>
      <Value id="AllowLogOnLocally_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren|Benutzer</value>
        <value selector="AllowLogOnLocally_german-selector-1">Administratoren</value>
        <value selector="AllowLogOnLocally_german-selector-4">Administratoren</value>
        <value selector="AllowLogOnLocally_german-selector-8">Administratoren</value>
        <value selector="AllowLogOnLocally_german-selector-9">Administratoren</value>
        <value selector="AllowLogOnLocally_german-selector-10">Administratoren</value>
        <value selector="AllowLogOnLocally_german-selector-11">Administratoren</value>
        <value selector="AllowLogOnLocally_german-selector-14">Administratoren</value>
        <value selector="AllowLogOnLocally_german-selector-15">Administratoren</value>
      </Value>
      <Value id="AllowLogOnLocally_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy|Użytkownicy</value>
        <value selector="AllowLogOnLocally_polish-selector-1">Administratorzy</value>
        <value selector="AllowLogOnLocally_polish-selector-4">Administratorzy</value>
        <value selector="AllowLogOnLocally_polish-selector-8">Administratorzy</value>
        <value selector="AllowLogOnLocally_polish-selector-9">Administratorzy</value>
        <value selector="AllowLogOnLocally_polish-selector-10">Administratorzy</value>
        <value selector="AllowLogOnLocally_polish-selector-11">Administratorzy</value>
        <value selector="AllowLogOnLocally_polish-selector-14">Administratorzy</value>
        <value selector="AllowLogOnLocally_polish-selector-15">Administratorzy</value>
      </Value>
      <Value id="AllowLogOnLocally_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|Usuários</value>
        <value selector="AllowLogOnLocally_portuguese-selector-1">Administradores</value>
        <value selector="AllowLogOnLocally_portuguese-selector-4">Administradores</value>
        <value selector="AllowLogOnLocally_portuguese-selector-8">Administradores</value>
        <value selector="AllowLogOnLocally_portuguese-selector-9">Administradores</value>
        <value selector="AllowLogOnLocally_portuguese-selector-10">Administradores</value>
        <value selector="AllowLogOnLocally_portuguese-selector-11">Administradores</value>
        <value selector="AllowLogOnLocally_portuguese-selector-14">Administradores</value>
        <value selector="AllowLogOnLocally_portuguese-selector-15">Administradores</value>
      </Value>
      <Value id="AllowLogOnLocally_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer|Användare</value>
        <value selector="AllowLogOnLocally_swedish-selector-1">Administratörer</value>
        <value selector="AllowLogOnLocally_swedish-selector-4">Administratörer</value>
        <value selector="AllowLogOnLocally_swedish-selector-8">Administratörer</value>
        <value selector="AllowLogOnLocally_swedish-selector-9">Administratörer</value>
        <value selector="AllowLogOnLocally_swedish-selector-10">Administratörer</value>
        <value selector="AllowLogOnLocally_swedish-selector-11">Administratörer</value>
        <value selector="AllowLogOnLocally_swedish-selector-14">Administratörer</value>
        <value selector="AllowLogOnLocally_swedish-selector-15">Administratörer</value>
      </Value>
      <Value id="AllowLogOnLocally_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="AllowLogOnLocally_turkish-selector-1">Administrators</value>
        <value selector="AllowLogOnLocally_turkish-selector-4">Administrators</value>
        <value selector="AllowLogOnLocally_turkish-selector-8">Administrators</value>
        <value selector="AllowLogOnLocally_turkish-selector-9">Administrators</value>
        <value selector="AllowLogOnLocally_turkish-selector-10">Administrators</value>
        <value selector="AllowLogOnLocally_turkish-selector-11">Administrators</value>
        <value selector="AllowLogOnLocally_turkish-selector-14">Administrators</value>
        <value selector="AllowLogOnLocally_turkish-selector-15">Administrators</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="ManageAuditingAndSecurityLog_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="ModifyFirmwareEnvironmentValues_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ProfileASingleProcess_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ProfileASingleProcess_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ProfileASingleProcess_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="ProfileASingleProcess_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ProfileASingleProcess_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ProfileASingleProcess_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="ProfileASingleProcess_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="ProfileASingleProcess_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="ProfileASingleProcess_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="ProfileASingleProcess_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="ProfileASingleProcess_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="ProfileSystemPerformance_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="ProfileSystemPerformance_english-selector">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_english-selector-3">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_english-selector-4">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_english-selector-5">Administrators|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="ProfileSystemPerformance_italian-selector">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_italian-selector-3">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_italian-selector-4">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_italian-selector-5">Administrators|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
        <value selector="ProfileSystemPerformance_spanish-selector">Administradores|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_spanish-selector-3">Administradores|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_spanish-selector-4">Administradores|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_spanish-selector-5">Administradores|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="ProfileSystemPerformance_chinese-selector">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_chinese-selector-3">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_chinese-selector-4">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_chinese-selector-5">Administrators|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="ProfileSystemPerformance_japanese-selector">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_japanese-selector-3">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_japanese-selector-4">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_japanese-selector-5">Administrators|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
        <value selector="ProfileSystemPerformance_french-selector">Administrateurs|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_french-selector-3">Administrateurs|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_french-selector-4">Administrateurs|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_french-selector-5">Administrateurs|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
        <value selector="ProfileSystemPerformance_german-selector">Administratoren|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_german-selector-3">Administratoren|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_german-selector-4">Administratoren|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_german-selector-5">Administratoren|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
        <value selector="ProfileSystemPerformance_polish-selector">Administratorzy|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_polish-selector-3">Administratorzy|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_polish-selector-4">Administratorzy|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_polish-selector-5">Administratorzy|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
        <value selector="ProfileSystemPerformance_portuguese-selector">Administradores|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_portuguese-selector-3">Administradores|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_portuguese-selector-4">Administradores|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_portuguese-selector-5">Administradores|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
        <value selector="ProfileSystemPerformance_swedish-selector">Administratörer|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_swedish-selector-3">Administratörer|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_swedish-selector-4">Administratörer|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_swedish-selector-5">Administratörer|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="ProfileSystemPerformance_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="ProfileSystemPerformance_turkish-selector">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_turkish-selector-3">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_turkish-selector-4">Administrators|NT SERVICE\WdiServiceHost</value>
        <value selector="ProfileSystemPerformance_turkish-selector-5">Administrators|NT SERVICE\WdiServiceHost</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="RemoveComputerFromADockingStation_english-selector-2">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_english-selector-3">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_english-selector-6">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_english-selector-7">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_english-selector-8">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_english-selector-9">Administrators</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="RemoveComputerFromADockingStation_italian-selector-2">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_italian-selector-3">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_italian-selector-6">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_italian-selector-7">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_italian-selector-8">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_italian-selector-9">Administrators</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|Usuarios</value>
        <value selector="RemoveComputerFromADockingStation_spanish-selector-2">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_spanish-selector-3">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_spanish-selector-6">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_spanish-selector-7">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_spanish-selector-8">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_spanish-selector-9">Administradores</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="RemoveComputerFromADockingStation_chinese-selector-2">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_chinese-selector-3">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_chinese-selector-6">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_chinese-selector-7">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_chinese-selector-8">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_chinese-selector-9">Administrators</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="RemoveComputerFromADockingStation_japanese-selector-2">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_japanese-selector-3">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_japanese-selector-6">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_japanese-selector-7">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_japanese-selector-8">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_japanese-selector-9">Administrators</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs|Utilisateurs</value>
        <value selector="RemoveComputerFromADockingStation_french-selector-2">Administrateurs</value>
        <value selector="RemoveComputerFromADockingStation_french-selector-3">Administrateurs</value>
        <value selector="RemoveComputerFromADockingStation_french-selector-6">Administrateurs</value>
        <value selector="RemoveComputerFromADockingStation_french-selector-7">Administrateurs</value>
        <value selector="RemoveComputerFromADockingStation_french-selector-8">Administrateurs</value>
        <value selector="RemoveComputerFromADockingStation_french-selector-9">Administrateurs</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren|Benutzer</value>
        <value selector="RemoveComputerFromADockingStation_german-selector-2">Administratoren</value>
        <value selector="RemoveComputerFromADockingStation_german-selector-3">Administratoren</value>
        <value selector="RemoveComputerFromADockingStation_german-selector-6">Administratoren</value>
        <value selector="RemoveComputerFromADockingStation_german-selector-7">Administratoren</value>
        <value selector="RemoveComputerFromADockingStation_german-selector-8">Administratoren</value>
        <value selector="RemoveComputerFromADockingStation_german-selector-9">Administratoren</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy|Użytkownicy</value>
        <value selector="RemoveComputerFromADockingStation_polish-selector-2">Administratorzy</value>
        <value selector="RemoveComputerFromADockingStation_polish-selector-3">Administratorzy</value>
        <value selector="RemoveComputerFromADockingStation_polish-selector-6">Administratorzy</value>
        <value selector="RemoveComputerFromADockingStation_polish-selector-7">Administratorzy</value>
        <value selector="RemoveComputerFromADockingStation_polish-selector-8">Administratorzy</value>
        <value selector="RemoveComputerFromADockingStation_polish-selector-9">Administratorzy</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|Usuários</value>
        <value selector="RemoveComputerFromADockingStation_portuguese-selector-2">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_portuguese-selector-3">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_portuguese-selector-6">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_portuguese-selector-7">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_portuguese-selector-8">Administradores</value>
        <value selector="RemoveComputerFromADockingStation_portuguese-selector-9">Administradores</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer|Användare</value>
        <value selector="RemoveComputerFromADockingStation_swedish-selector-2">Administratörer</value>
        <value selector="RemoveComputerFromADockingStation_swedish-selector-3">Administratörer</value>
        <value selector="RemoveComputerFromADockingStation_swedish-selector-6">Administratörer</value>
        <value selector="RemoveComputerFromADockingStation_swedish-selector-7">Administratörer</value>
        <value selector="RemoveComputerFromADockingStation_swedish-selector-8">Administratörer</value>
        <value selector="RemoveComputerFromADockingStation_swedish-selector-9">Administratörer</value>
      </Value>
      <Value id="RemoveComputerFromADockingStation_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="RemoveComputerFromADockingStation_turkish-selector-2">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_turkish-selector-3">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_turkish-selector-6">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_turkish-selector-7">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_turkish-selector-8">Administrators</value>
        <value selector="RemoveComputerFromADockingStation_turkish-selector-9">Administrators</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-0">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-4">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-7">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-9">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-13">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-14">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-19">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-20">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-21">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-22">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-23">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_english-selector-24">LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-0">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-4">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-7">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-9">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-13">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-14">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-19">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-20">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-21">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-22">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-23">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ReplaceAProcessLevelToken_italian-selector-24">SERVIZIO LOCALE|SERVIZIO DI RETE</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-0">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-4">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-7">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-9">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-13">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-14">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-19">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-20">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-21">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-22">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-23">SERVICIO LOCAL|Servicio de red</value>
        <value selector="ReplaceAProcessLevelToken_spanish-selector-24">SERVICIO LOCAL|Servicio de red</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-0">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-4">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-7">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-9">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-13">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-14">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-19">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-20">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-21">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-22">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-23">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_chinese-selector-24">LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-0">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-4">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-7">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-9">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-13">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-14">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-19">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-20">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-21">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-22">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-23">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_japanese-selector-24">LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-0">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-4">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-7">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-9">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-13">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-14">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-19">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-20">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-21">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-22">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-23">SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ReplaceAProcessLevelToken_french-selector-24">SERVICE LOCAL|SERVICE RÉSEAU</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-0">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-4">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-7">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-9">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-13">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-14">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-19">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-20">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-21">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-22">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-23">LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ReplaceAProcessLevelToken_german-selector-24">LOKALER DIENST|NETZWERKDIENST</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-0">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-4">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-7">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-9">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-13">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-14">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-19">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-20">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-21">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-22">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-23">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ReplaceAProcessLevelToken_polish-selector-24">USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-0">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-4">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-7">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-9">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-13">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-14">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-19">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-20">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-21">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-22">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-23">LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ReplaceAProcessLevelToken_portuguese-selector-24">LOCAL SERVICE|SERVIÇO DE REDE</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-0">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-4">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-7">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-9">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-13">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-14">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-19">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-20">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-21">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-22">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-23">LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_swedish-selector-24">LOKAL TJÄNST|NETWORK SERVICE</value>
      </Value>
      <Value id="ReplaceAProcessLevelToken_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-0">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-4">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-7">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-9">Local Service|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-13">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-14">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-19">Local Service|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-20">Local Service|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-21">LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-22">Local Service|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-23">Local Service|NETWORK SERVICE</value>
        <value selector="ReplaceAProcessLevelToken_turkish-selector-24">Local Service|NETWORK SERVICE</value>
      </Value>
            <Value id="RestoreFilesAndDirectories_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="RestoreFilesAndDirectories_english-selector-0">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_english-selector-1">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_english-selector-2">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_english-selector-3">Administrators|Backup Operators</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="RestoreFilesAndDirectories_italian-selector-0">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_italian-selector-1">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_italian-selector-2">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_italian-selector-3">Administrators|Backup Operators</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
        <value selector="RestoreFilesAndDirectories_spanish-selector-0">Administradores|Operadores de copia</value>
        <value selector="RestoreFilesAndDirectories_spanish-selector-1">Administradores|Operadores de copia</value>
        <value selector="RestoreFilesAndDirectories_spanish-selector-2">Administradores|Operadores de copia</value>
        <value selector="RestoreFilesAndDirectories_spanish-selector-3">Administradores|Operadores de copia</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="RestoreFilesAndDirectories_chinese-selector-0">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_chinese-selector-1">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_chinese-selector-2">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_chinese-selector-3">Administrators|Backup Operators</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="RestoreFilesAndDirectories_japanese-selector-0">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_japanese-selector-1">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_japanese-selector-2">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_japanese-selector-3">Administrators|Backup Operators</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
        <value selector="RestoreFilesAndDirectories_french-selector-0">Administrateurs|Opérateurs de sauvegarde</value>
        <value selector="RestoreFilesAndDirectories_french-selector-1">Administrateurs|Opérateurs de sauvegarde</value>
        <value selector="RestoreFilesAndDirectories_french-selector-2">Administrateurs|Opérateurs de sauvegarde</value>
        <value selector="RestoreFilesAndDirectories_french-selector-3">Administrateurs|Opérateurs de sauvegarde</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
        <value selector="RestoreFilesAndDirectories_german-selector-0">Administratoren|Sicherungs-Operatoren</value>
        <value selector="RestoreFilesAndDirectories_german-selector-1">Administratoren|Sicherungs-Operatoren</value>
        <value selector="RestoreFilesAndDirectories_german-selector-2">Administratoren|Sicherungs-Operatoren</value>
        <value selector="RestoreFilesAndDirectories_german-selector-3">Administratoren|Sicherungs-Operatoren</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
        <value selector="RestoreFilesAndDirectories_polish-selector-0">Administratorzy|Operatorzy kopii zapasowych</value>
        <value selector="RestoreFilesAndDirectories_polish-selector-1">Administratorzy|Operatorzy kopii zapasowych</value>
        <value selector="RestoreFilesAndDirectories_polish-selector-2">Administratorzy|Operatorzy kopii zapasowych</value>
        <value selector="RestoreFilesAndDirectories_polish-selector-3">Administratorzy|Operatorzy kopii zapasowych</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
        <value selector="RestoreFilesAndDirectories_portuguese-selector-0">Administradores|Operadores de cópia</value>
        <value selector="RestoreFilesAndDirectories_portuguese-selector-1">Administradores|Operadores de cópia</value>
        <value selector="RestoreFilesAndDirectories_portuguese-selector-2">Administradores|Operadores de cópia</value>
        <value selector="RestoreFilesAndDirectories_portuguese-selector-3">Administradores|Operadores de cópia</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
        <value selector="RestoreFilesAndDirectories_swedish-selector-0">Administratörer|Ansvariga för säkerhetskopiering</value>
        <value selector="RestoreFilesAndDirectories_swedish-selector-1">Administratörer|Ansvariga för säkerhetskopiering</value>
        <value selector="RestoreFilesAndDirectories_swedish-selector-2">Administratörer|Ansvariga för säkerhetskopiering</value>
        <value selector="RestoreFilesAndDirectories_swedish-selector-3">Administratörer|Ansvariga för säkerhetskopiering</value>
      </Value>
      <Value id="RestoreFilesAndDirectories_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="RestoreFilesAndDirectories_turkish-selector-0">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_turkish-selector-1">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_turkish-selector-2">Administrators|Backup Operators</value>
        <value selector="RestoreFilesAndDirectories_turkish-selector-3">Administrators|Backup Operators</value>
      </Value>
      <Value id="ShutDownTheSystem_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="ShutDownTheSystem_english-selector-0">Administrators</value>
        <value selector="ShutDownTheSystem_english-selector-2">Administrators</value>
        <value selector="ShutDownTheSystem_english-selector-6">Administrators</value>
        <value selector="ShutDownTheSystem_english-selector-7">Administrators</value>
        <value selector="ShutDownTheSystem_english-selector-8">Administrators</value>
        <value selector="ShutDownTheSystem_english-selector-9">Administrators</value>
        <value selector="ShutDownTheSystem_english-selector-10">Administrators</value>
        <value selector="ShutDownTheSystem_english-selector-11">Administrators</value>
      </Value>
      <Value id="ShutDownTheSystem_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="ShutDownTheSystem_italian-selector-0">Administrators</value>
        <value selector="ShutDownTheSystem_italian-selector-2">Administrators</value>
        <value selector="ShutDownTheSystem_italian-selector-6">Administrators</value>
        <value selector="ShutDownTheSystem_italian-selector-7">Administrators</value>
        <value selector="ShutDownTheSystem_italian-selector-8">Administrators</value>
        <value selector="ShutDownTheSystem_italian-selector-9">Administrators</value>
        <value selector="ShutDownTheSystem_italian-selector-10">Administrators</value>
        <value selector="ShutDownTheSystem_italian-selector-11">Administrators</value>
      </Value>
      <Value id="ShutDownTheSystem_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|Usuarios</value>
        <value selector="ShutDownTheSystem_spanish-selector-0">Administradores</value>
        <value selector="ShutDownTheSystem_spanish-selector-2">Administradores</value>
        <value selector="ShutDownTheSystem_spanish-selector-6">Administradores</value>
        <value selector="ShutDownTheSystem_spanish-selector-7">Administradores</value>
        <value selector="ShutDownTheSystem_spanish-selector-8">Administradores</value>
        <value selector="ShutDownTheSystem_spanish-selector-9">Administradores</value>
        <value selector="ShutDownTheSystem_spanish-selector-10">Administradores</value>
        <value selector="ShutDownTheSystem_spanish-selector-11">Administradores</value>
      </Value>
      <Value id="ShutDownTheSystem_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="ShutDownTheSystem_chinese-selector-0">Administrators</value>
        <value selector="ShutDownTheSystem_chinese-selector-2">Administrators</value>
        <value selector="ShutDownTheSystem_chinese-selector-6">Administrators</value>
        <value selector="ShutDownTheSystem_chinese-selector-7">Administrators</value>
        <value selector="ShutDownTheSystem_chinese-selector-8">Administrators</value>
        <value selector="ShutDownTheSystem_chinese-selector-9">Administrators</value>
        <value selector="ShutDownTheSystem_chinese-selector-10">Administrators</value>
        <value selector="ShutDownTheSystem_chinese-selector-11">Administrators</value>
      </Value>
      <Value id="ShutDownTheSystem_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="ShutDownTheSystem_japanese-selector-0">Administrators</value>
        <value selector="ShutDownTheSystem_japanese-selector-2">Administrators</value>
        <value selector="ShutDownTheSystem_japanese-selector-6">Administrators</value>
        <value selector="ShutDownTheSystem_japanese-selector-7">Administrators</value>
        <value selector="ShutDownTheSystem_japanese-selector-8">Administrators</value>
        <value selector="ShutDownTheSystem_japanese-selector-9">Administrators</value>
        <value selector="ShutDownTheSystem_japanese-selector-10">Administrators</value>
        <value selector="ShutDownTheSystem_japanese-selector-11">Administrators</value>
      </Value>
      <Value id="ShutDownTheSystem_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs|Utilisateurs</value>
        <value selector="ShutDownTheSystem_french-selector-0">Administrateurs</value>
        <value selector="ShutDownTheSystem_french-selector-2">Administrateurs</value>
        <value selector="ShutDownTheSystem_french-selector-6">Administrateurs</value>
        <value selector="ShutDownTheSystem_french-selector-7">Administrateurs</value>
        <value selector="ShutDownTheSystem_french-selector-8">Administrateurs</value>
        <value selector="ShutDownTheSystem_french-selector-9">Administrateurs</value>
        <value selector="ShutDownTheSystem_french-selector-10">Administrateurs</value>
        <value selector="ShutDownTheSystem_french-selector-11">Administrateurs</value>
      </Value>
      <Value id="ShutDownTheSystem_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren|Benutzer</value>
        <value selector="ShutDownTheSystem_german-selector-0">Administratoren</value>
        <value selector="ShutDownTheSystem_german-selector-2">Administratoren</value>
        <value selector="ShutDownTheSystem_german-selector-6">Administratoren</value>
        <value selector="ShutDownTheSystem_german-selector-7">Administratoren</value>
        <value selector="ShutDownTheSystem_german-selector-8">Administratoren</value>
        <value selector="ShutDownTheSystem_german-selector-9">Administratoren</value>
        <value selector="ShutDownTheSystem_german-selector-10">Administratoren</value>
        <value selector="ShutDownTheSystem_german-selector-11">Administratoren</value>
      </Value>
      <Value id="ShutDownTheSystem_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy|Użytkownicy</value>
        <value selector="ShutDownTheSystem_polish-selector-0">Administratorzy</value>
        <value selector="ShutDownTheSystem_polish-selector-2">Administratorzy</value>
        <value selector="ShutDownTheSystem_polish-selector-6">Administratorzy</value>
        <value selector="ShutDownTheSystem_polish-selector-7">Administratorzy</value>
        <value selector="ShutDownTheSystem_polish-selector-8">Administratorzy</value>
        <value selector="ShutDownTheSystem_polish-selector-9">Administratorzy</value>
        <value selector="ShutDownTheSystem_polish-selector-10">Administratorzy</value>
        <value selector="ShutDownTheSystem_polish-selector-11">Administratorzy</value>
      </Value>
      <Value id="ShutDownTheSystem_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|Usuários</value>
        <value selector="ShutDownTheSystem_portuguese-selector-0">Administradores</value>
        <value selector="ShutDownTheSystem_portuguese-selector-2">Administradores</value>
        <value selector="ShutDownTheSystem_portuguese-selector-6">Administradores</value>
        <value selector="ShutDownTheSystem_portuguese-selector-7">Administradores</value>
        <value selector="ShutDownTheSystem_portuguese-selector-8">Administradores</value>
        <value selector="ShutDownTheSystem_portuguese-selector-9">Administradores</value>
        <value selector="ShutDownTheSystem_portuguese-selector-10">Administradores</value>
        <value selector="ShutDownTheSystem_portuguese-selector-11">Administradores</value>
      </Value>
      <Value id="ShutDownTheSystem_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer|Användare</value>
        <value selector="ShutDownTheSystem_swedish-selector-0">Administratörer</value>
        <value selector="ShutDownTheSystem_swedish-selector-2">Administratörer</value>
        <value selector="ShutDownTheSystem_swedish-selector-6">Administratörer</value>
        <value selector="ShutDownTheSystem_swedish-selector-7">Administratörer</value>
        <value selector="ShutDownTheSystem_swedish-selector-8">Administratörer</value>
        <value selector="ShutDownTheSystem_swedish-selector-9">Administratörer</value>
        <value selector="ShutDownTheSystem_swedish-selector-10">Administratörer</value>
        <value selector="ShutDownTheSystem_swedish-selector-11">Administratörer</value>
      </Value>
      <Value id="ShutDownTheSystem_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|Users</value>
        <value selector="ShutDownTheSystem_turkish-selector-0">Administrators</value>
        <value selector="ShutDownTheSystem_turkish-selector-2">Administrators</value>
        <value selector="ShutDownTheSystem_turkish-selector-6">Administrators</value>
        <value selector="ShutDownTheSystem_turkish-selector-7">Administrators</value>
        <value selector="ShutDownTheSystem_turkish-selector-8">Administrators</value>
        <value selector="ShutDownTheSystem_turkish-selector-9">Administrators</value>
        <value selector="ShutDownTheSystem_turkish-selector-10">Administrators</value>
        <value selector="ShutDownTheSystem_turkish-selector-11">Administrators</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="SynchronizeDirectoryServiceData_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="TakeOwnershipOfFilesAndOtherObjects_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_english-selector-0">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_english-selector-4">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_english-selector-6">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_english-selector-7">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_english-selector-12">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_english-selector-13">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_english-selector-14">Administrators|Remote Desktop Users</value>
        <value selector="AllowLogOnThroughTerminalServices_english-selector-15">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_english-selector-16">Administrators</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_italian-selector-0">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_italian-selector-4">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_italian-selector-6">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_italian-selector-7">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_italian-selector-12">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_italian-selector-13">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_italian-selector-14">Administrators|Utenti desktop remoto</value>
        <value selector="AllowLogOnThroughTerminalServices_italian-selector-15">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_italian-selector-16">Administrators</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_spanish-selector-0">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_spanish-selector-4">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_spanish-selector-6">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_spanish-selector-7">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_spanish-selector-12">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_spanish-selector-13">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_spanish-selector-14">Administradores|Usuarios de escritorio remoto</value>
        <value selector="AllowLogOnThroughTerminalServices_spanish-selector-15">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_spanish-selector-16">Administradores</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_chinese-selector-0">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_chinese-selector-4">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_chinese-selector-6">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_chinese-selector-7">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_chinese-selector-12">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_chinese-selector-13">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_chinese-selector-14">Administrators|Remote Desktop Users</value>
        <value selector="AllowLogOnThroughTerminalServices_chinese-selector-15">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_chinese-selector-16">Administrators</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_japanese-selector-0">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_japanese-selector-4">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_japanese-selector-6">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_japanese-selector-7">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_japanese-selector-12">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_japanese-selector-13">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_japanese-selector-14">Administrators|Remote Desktop Users</value>
        <value selector="AllowLogOnThroughTerminalServices_japanese-selector-15">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_japanese-selector-16">Administrators</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_french-selector-0">Administrateurs</value>
        <value selector="AllowLogOnThroughTerminalServices_french-selector-4">Administrateurs</value>
        <value selector="AllowLogOnThroughTerminalServices_french-selector-6">Administrateurs</value>
        <value selector="AllowLogOnThroughTerminalServices_french-selector-7">Administrateurs</value>
        <value selector="AllowLogOnThroughTerminalServices_french-selector-12">Administrateurs</value>
        <value selector="AllowLogOnThroughTerminalServices_french-selector-13">Administrateurs</value>
        <value selector="AllowLogOnThroughTerminalServices_french-selector-14">Administrateurs|Utilisateurs du Bureau ŕ distance</value>
        <value selector="AllowLogOnThroughTerminalServices_french-selector-15">Administrateurs</value>
        <value selector="AllowLogOnThroughTerminalServices_french-selector-16">Administrateurs</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_german-selector-0">Administratoren</value>
        <value selector="AllowLogOnThroughTerminalServices_german-selector-4">Administratoren</value>
        <value selector="AllowLogOnThroughTerminalServices_german-selector-6">Administratoren</value>
        <value selector="AllowLogOnThroughTerminalServices_german-selector-7">Administratoren</value>
        <value selector="AllowLogOnThroughTerminalServices_german-selector-12">Administratoren</value>
        <value selector="AllowLogOnThroughTerminalServices_german-selector-13">Administratoren</value>
        <value selector="AllowLogOnThroughTerminalServices_german-selector-14">Administratoren|Remotedesktopbenutzer</value>
        <value selector="AllowLogOnThroughTerminalServices_german-selector-15">Administratoren</value>
        <value selector="AllowLogOnThroughTerminalServices_german-selector-16">Administratoren</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_polish-selector-0">Administratorzy</value>
        <value selector="AllowLogOnThroughTerminalServices_polish-selector-4">Administratorzy</value>
        <value selector="AllowLogOnThroughTerminalServices_polish-selector-6">Administratorzy</value>
        <value selector="AllowLogOnThroughTerminalServices_polish-selector-7">Administratorzy</value>
        <value selector="AllowLogOnThroughTerminalServices_polish-selector-12">Administratorzy</value>
        <value selector="AllowLogOnThroughTerminalServices_polish-selector-13">Administratorzy</value>
        <value selector="AllowLogOnThroughTerminalServices_polish-selector-14">Administratorzy|Użytkownicy pulpitu zdalnego</value>
        <value selector="AllowLogOnThroughTerminalServices_polish-selector-15">Administratorzy</value>
        <value selector="AllowLogOnThroughTerminalServices_polish-selector-16">Administratorzy</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_portuguese-selector-0">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_portuguese-selector-4">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_portuguese-selector-6">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_portuguese-selector-7">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_portuguese-selector-12">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_portuguese-selector-13">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_portuguese-selector-14">Administradores|Usuários da área de trabalho remota</value>
        <value selector="AllowLogOnThroughTerminalServices_portuguese-selector-15">Administradores</value>
        <value selector="AllowLogOnThroughTerminalServices_portuguese-selector-16">Administradores</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_swedish-selector-0">Administratörer</value>
        <value selector="AllowLogOnThroughTerminalServices_swedish-selector-4">Administratörer</value>
        <value selector="AllowLogOnThroughTerminalServices_swedish-selector-6">Administratörer</value>
        <value selector="AllowLogOnThroughTerminalServices_swedish-selector-7">Administratörer</value>
        <value selector="AllowLogOnThroughTerminalServices_swedish-selector-12">Administratörer</value>
        <value selector="AllowLogOnThroughTerminalServices_swedish-selector-13">Administratörer</value>
        <value selector="AllowLogOnThroughTerminalServices_swedish-selector-14">Administratörer|Användare av fjärrskrivbord</value>
        <value selector="AllowLogOnThroughTerminalServices_swedish-selector-15">Administratörer</value>
        <value selector="AllowLogOnThroughTerminalServices_swedish-selector-16">Administratörer</value>
      </Value>
      <Value id="AllowLogOnThroughTerminalServices_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="AllowLogOnThroughTerminalServices_turkish-selector-0">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_turkish-selector-4">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_turkish-selector-6">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_turkish-selector-7">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_turkish-selector-12">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_turkish-selector-13">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_turkish-selector-14">Administrators|Remote Desktop Users</value>
        <value selector="AllowLogOnThroughTerminalServices_turkish-selector-15">Administrators</value>
        <value selector="AllowLogOnThroughTerminalServices_turkish-selector-16">Administrators</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_english-selector-3">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_english-selector-4">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_english-selector-5">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_english-selector-6">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_english-selector-9">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_english-selector-10">Guests</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_italian-selector-3">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_italian-selector-4">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_italian-selector-5">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_italian-selector-6">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_italian-selector-9">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_italian-selector-10">Guests</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_spanish-selector-3">Invitados</value>
        <value selector="DenyLogOnThroughTerminalServices_spanish-selector-4">Invitados</value>
        <value selector="DenyLogOnThroughTerminalServices_spanish-selector-5">Invitados</value>
        <value selector="DenyLogOnThroughTerminalServices_spanish-selector-6">Invitados</value>
        <value selector="DenyLogOnThroughTerminalServices_spanish-selector-9">Invitados</value>
        <value selector="DenyLogOnThroughTerminalServices_spanish-selector-10">Invitados</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_chinese-selector-3">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_chinese-selector-4">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_chinese-selector-5">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_chinese-selector-6">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_chinese-selector-9">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_chinese-selector-10">Guests</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_japanese-selector-3">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_japanese-selector-4">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_japanese-selector-5">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_japanese-selector-6">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_japanese-selector-9">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_japanese-selector-10">Guests</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_french-selector-3">Invités</value>
        <value selector="DenyLogOnThroughTerminalServices_french-selector-4">Invités</value>
        <value selector="DenyLogOnThroughTerminalServices_french-selector-5">Invités</value>
        <value selector="DenyLogOnThroughTerminalServices_french-selector-6">Invités</value>
        <value selector="DenyLogOnThroughTerminalServices_french-selector-9">Invités</value>
        <value selector="DenyLogOnThroughTerminalServices_french-selector-10">Invités</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_german-selector-3">Gäste</value>
        <value selector="DenyLogOnThroughTerminalServices_german-selector-4">Gäste</value>
        <value selector="DenyLogOnThroughTerminalServices_german-selector-5">Gäste</value>
        <value selector="DenyLogOnThroughTerminalServices_german-selector-6">Gäste</value>
        <value selector="DenyLogOnThroughTerminalServices_german-selector-9">Gäste</value>
        <value selector="DenyLogOnThroughTerminalServices_german-selector-10">Gäste</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_polish-selector-3">Goście</value>
        <value selector="DenyLogOnThroughTerminalServices_polish-selector-4">Goście</value>
        <value selector="DenyLogOnThroughTerminalServices_polish-selector-5">Goście</value>
        <value selector="DenyLogOnThroughTerminalServices_polish-selector-6">Goście</value>
        <value selector="DenyLogOnThroughTerminalServices_polish-selector-9">Goście</value>
        <value selector="DenyLogOnThroughTerminalServices_polish-selector-10">Goście</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_portuguese-selector-3">Convidados</value>
        <value selector="DenyLogOnThroughTerminalServices_portuguese-selector-4">Convidados</value>
        <value selector="DenyLogOnThroughTerminalServices_portuguese-selector-5">Convidados</value>
        <value selector="DenyLogOnThroughTerminalServices_portuguese-selector-6">Convidados</value>
        <value selector="DenyLogOnThroughTerminalServices_portuguese-selector-9">Convidados</value>
        <value selector="DenyLogOnThroughTerminalServices_portuguese-selector-10">Convidados</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_swedish-selector-3">Gäster</value>
        <value selector="DenyLogOnThroughTerminalServices_swedish-selector-4">Gäster</value>
        <value selector="DenyLogOnThroughTerminalServices_swedish-selector-5">Gäster</value>
        <value selector="DenyLogOnThroughTerminalServices_swedish-selector-6">Gäster</value>
        <value selector="DenyLogOnThroughTerminalServices_swedish-selector-9">Gäster</value>
        <value selector="DenyLogOnThroughTerminalServices_swedish-selector-10">Gäster</value>
      </Value>
      <Value id="DenyLogOnThroughTerminalServices_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
        <value selector="DenyLogOnThroughTerminalServices_turkish-selector-3">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_turkish-selector-4">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_turkish-selector-5">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_turkish-selector-6">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_turkish-selector-9">Guests</value>
        <value selector="DenyLogOnThroughTerminalServices_turkish-selector-10">Guests</value>
      </Value>
            <Value id="PerformVolumeMaintenanceTasks_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="PerformVolumeMaintenanceTasks_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="CreateGlobalObjects_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="CreateGlobalObjects_english-selector-6">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_english-selector-7">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_english-selector-8">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_english-selector-9">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="CreateGlobalObjects_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="CreateGlobalObjects_italian-selector-6">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="CreateGlobalObjects_italian-selector-7">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="CreateGlobalObjects_italian-selector-8">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="CreateGlobalObjects_italian-selector-9">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
      </Value>
      <Value id="CreateGlobalObjects_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
        <value selector="CreateGlobalObjects_spanish-selector-6">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="CreateGlobalObjects_spanish-selector-7">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="CreateGlobalObjects_spanish-selector-8">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="CreateGlobalObjects_spanish-selector-9">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
      </Value>
      <Value id="CreateGlobalObjects_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="CreateGlobalObjects_chinese-selector-6">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_chinese-selector-7">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_chinese-selector-8">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_chinese-selector-9">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="CreateGlobalObjects_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="CreateGlobalObjects_japanese-selector-6">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_japanese-selector-7">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_japanese-selector-8">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_japanese-selector-9">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="CreateGlobalObjects_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
        <value selector="CreateGlobalObjects_french-selector-6">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="CreateGlobalObjects_french-selector-7">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="CreateGlobalObjects_french-selector-8">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="CreateGlobalObjects_french-selector-9">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
      </Value>
      <Value id="CreateGlobalObjects_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
        <value selector="CreateGlobalObjects_german-selector-6">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="CreateGlobalObjects_german-selector-7">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="CreateGlobalObjects_german-selector-8">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="CreateGlobalObjects_german-selector-9">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
      </Value>
      <Value id="CreateGlobalObjects_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
        <value selector="CreateGlobalObjects_polish-selector-6">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="CreateGlobalObjects_polish-selector-7">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="CreateGlobalObjects_polish-selector-8">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="CreateGlobalObjects_polish-selector-9">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
      </Value>
      <Value id="CreateGlobalObjects_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
        <value selector="CreateGlobalObjects_portuguese-selector-6">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="CreateGlobalObjects_portuguese-selector-7">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="CreateGlobalObjects_portuguese-selector-8">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="CreateGlobalObjects_portuguese-selector-9">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
      </Value>
      <Value id="CreateGlobalObjects_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
        <value selector="CreateGlobalObjects_swedish-selector-6">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_swedish-selector-7">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_swedish-selector-8">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_swedish-selector-9">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
      </Value>
      <Value id="CreateGlobalObjects_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
        <value selector="CreateGlobalObjects_turkish-selector-6">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_turkish-selector-7">Administrators|SERVICE|Local Service|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_turkish-selector-8">Administrators|SERVICE|Local Service|NETWORK SERVICE</value>
        <value selector="CreateGlobalObjects_turkish-selector-9">Administrators|SERVICE|Local Service|NETWORK SERVICE</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_english-selector">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_english-selector-5">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_english-selector-6">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_english-selector-9">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_english-selector-10">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_english-selector-11">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_english-selector-12">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_english-selector-13">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_english-selector-14">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|SERVIZIO</value>
        <value selector="ImpersonateAClientAfterAuthentication_italian-selector">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ImpersonateAClientAfterAuthentication_italian-selector-5">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ImpersonateAClientAfterAuthentication_italian-selector-6">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ImpersonateAClientAfterAuthentication_italian-selector-9">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ImpersonateAClientAfterAuthentication_italian-selector-10">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ImpersonateAClientAfterAuthentication_italian-selector-11">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ImpersonateAClientAfterAuthentication_italian-selector-12">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ImpersonateAClientAfterAuthentication_italian-selector-13">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
        <value selector="ImpersonateAClientAfterAuthentication_italian-selector-14">Administrators|SERVIZIO|SERVIZIO LOCALE|SERVIZIO DI RETE</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|SERVICIO</value>
        <value selector="ImpersonateAClientAfterAuthentication_spanish-selector">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="ImpersonateAClientAfterAuthentication_spanish-selector-5">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="ImpersonateAClientAfterAuthentication_spanish-selector-6">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="ImpersonateAClientAfterAuthentication_spanish-selector-9">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="ImpersonateAClientAfterAuthentication_spanish-selector-10">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="ImpersonateAClientAfterAuthentication_spanish-selector-11">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="ImpersonateAClientAfterAuthentication_spanish-selector-12">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="ImpersonateAClientAfterAuthentication_spanish-selector-13">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
        <value selector="ImpersonateAClientAfterAuthentication_spanish-selector-14">Administradores|SERVICIO|SERVICIO LOCAL|Servicio de red</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_chinese-selector">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_chinese-selector-5">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_chinese-selector-6">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_chinese-selector-9">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_chinese-selector-10">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_chinese-selector-11">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_chinese-selector-12">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_chinese-selector-13">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_chinese-selector-14">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_japanese-selector">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_japanese-selector-5">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_japanese-selector-6">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_japanese-selector-9">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_japanese-selector-10">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_japanese-selector-11">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_japanese-selector-12">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_japanese-selector-13">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_japanese-selector-14">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs|SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_french-selector">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ImpersonateAClientAfterAuthentication_french-selector-5">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ImpersonateAClientAfterAuthentication_french-selector-6">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ImpersonateAClientAfterAuthentication_french-selector-9">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ImpersonateAClientAfterAuthentication_french-selector-10">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ImpersonateAClientAfterAuthentication_french-selector-11">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ImpersonateAClientAfterAuthentication_french-selector-12">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ImpersonateAClientAfterAuthentication_french-selector-13">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
        <value selector="ImpersonateAClientAfterAuthentication_french-selector-14">Administrateurs|SERVICE|SERVICE LOCAL|SERVICE RÉSEAU</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren|DIENST</value>
        <value selector="ImpersonateAClientAfterAuthentication_german-selector">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ImpersonateAClientAfterAuthentication_german-selector-5">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ImpersonateAClientAfterAuthentication_german-selector-6">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ImpersonateAClientAfterAuthentication_german-selector-9">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ImpersonateAClientAfterAuthentication_german-selector-10">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ImpersonateAClientAfterAuthentication_german-selector-11">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ImpersonateAClientAfterAuthentication_german-selector-12">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ImpersonateAClientAfterAuthentication_german-selector-13">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
        <value selector="ImpersonateAClientAfterAuthentication_german-selector-14">Administratoren|DIENST|LOKALER DIENST|NETZWERKDIENST</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy|USŁUGA</value>
        <value selector="ImpersonateAClientAfterAuthentication_polish-selector">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ImpersonateAClientAfterAuthentication_polish-selector-5">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ImpersonateAClientAfterAuthentication_polish-selector-6">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ImpersonateAClientAfterAuthentication_polish-selector-9">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ImpersonateAClientAfterAuthentication_polish-selector-10">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ImpersonateAClientAfterAuthentication_polish-selector-11">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ImpersonateAClientAfterAuthentication_polish-selector-12">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ImpersonateAClientAfterAuthentication_polish-selector-13">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
        <value selector="ImpersonateAClientAfterAuthentication_polish-selector-14">Administratorzy|USŁUGA|USŁUGA LOKALNA|USŁUGA SIECIOWA</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|SERVIÇO</value>
        <value selector="ImpersonateAClientAfterAuthentication_portuguese-selector">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ImpersonateAClientAfterAuthentication_portuguese-selector-5">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ImpersonateAClientAfterAuthentication_portuguese-selector-6">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ImpersonateAClientAfterAuthentication_portuguese-selector-9">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ImpersonateAClientAfterAuthentication_portuguese-selector-10">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ImpersonateAClientAfterAuthentication_portuguese-selector-11">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ImpersonateAClientAfterAuthentication_portuguese-selector-12">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ImpersonateAClientAfterAuthentication_portuguese-selector-13">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
        <value selector="ImpersonateAClientAfterAuthentication_portuguese-selector-14">Administradores|SERVIÇO|LOCAL SERVICE|SERVIÇO DE REDE</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer|TJÄNST</value>
        <value selector="ImpersonateAClientAfterAuthentication_swedish-selector">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_swedish-selector-5">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_swedish-selector-6">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_swedish-selector-9">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_swedish-selector-10">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_swedish-selector-11">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_swedish-selector-12">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_swedish-selector-13">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_swedish-selector-14">Administratörer|TJÄNST|LOKAL TJÄNST|NETWORK SERVICE</value>
      </Value>
      <Value id="ImpersonateAClientAfterAuthentication_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_turkish-selector">Administrators|SERVICE|Local Service|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_turkish-selector-5">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_turkish-selector-6">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_turkish-selector-9">Administrators|SERVICE|Local Service|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_turkish-selector-10">Administrators|SERVICE|Local Service|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_turkish-selector-11">Administrators|SERVICE|LOCAL SERVICE|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_turkish-selector-12">Administrators|SERVICE|Local Service|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_turkish-selector-13">Administrators|SERVICE|Local Service|NETWORK SERVICE</value>
        <value selector="ImpersonateAClientAfterAuthentication_turkish-selector-14">Administrators|SERVICE|Local Service|NETWORK SERVICE</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToModifyAnObjectLabel_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">|</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer</value>
      </Value>
      <Value id="AllowedToCreateSymbolicLinks_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|SERVIZIO LOCALE</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|SERVICIO LOCAL</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs|SERVICE LOCAL</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren|LOKALER DIENST</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy|USŁUGA LOKALNA</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|LOCAL SERVICE</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer|LOKAL TJÄNST</value>
      </Value>
      <Value id="AllowedToIncreaseProcessWorkSet_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_english" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_english-selector">Administrators|Users|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_english-selector-0">Administrators|Users|LOCAL SERVICE</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_italian" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|SERVIZIO LOCALE</value>
        <value selector="AllowedToChangeTheTimeZone_italian-selector">Administrators|Users|SERVIZIO LOCALE</value>
        <value selector="AllowedToChangeTheTimeZone_italian-selector-0">Administrators|Users|SERVIZIO LOCALE</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_spanish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|SERVICIO LOCAL</value>
        <value selector="AllowedToChangeTheTimeZone_spanish-selector">Administradores|Usuarios|SERVICIO LOCAL</value>
        <value selector="AllowedToChangeTheTimeZone_spanish-selector-0">Administradores|Usuarios|SERVICIO LOCAL</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_chinese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_chinese-selector">Administrators|Users|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_chinese-selector-0">Administrators|Users|LOCAL SERVICE</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_japanese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_japanese-selector">Administrators|Users|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_japanese-selector-0">Administrators|Users|LOCAL SERVICE</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_french" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrateurs|SERVICE LOCAL</value>
        <value selector="AllowedToChangeTheTimeZone_french-selector">Administrateurs|Utilisateurs|SERVICE LOCAL</value>
        <value selector="AllowedToChangeTheTimeZone_french-selector-0">Administrateurs|Utilisateurs|SERVICE LOCAL</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_german" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratoren|LOKALER DIENST</value>
        <value selector="AllowedToChangeTheTimeZone_german-selector">Administratoren|Benutzer|LOKALER DIENST</value>
        <value selector="AllowedToChangeTheTimeZone_german-selector-0">Administratoren|Benutzer|LOKALER DIENST</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_polish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratorzy|USŁUGA LOKALNA</value>
        <value selector="AllowedToChangeTheTimeZone_polish-selector">Administratorzy|Użytkownicy|USŁUGA LOKALNA</value>
        <value selector="AllowedToChangeTheTimeZone_polish-selector-0">Administratorzy|Użytkownicy|USŁUGA LOKALNA</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_portuguese" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administradores|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_portuguese-selector">Administradores|Usuários|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_portuguese-selector-0">Administradores|Usuários|LOCAL SERVICE</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_swedish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administratörer|LOKAL TJÄNST</value>
        <value selector="AllowedToChangeTheTimeZone_swedish-selector">Administratörer|Användare|LOKAL TJÄNST</value>
        <value selector="AllowedToChangeTheTimeZone_swedish-selector-0">Administratörer|Användare|LOKAL TJÄNST</value>
      </Value>
      <Value id="AllowedToChangeTheTimeZone_turkish" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Administrators|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_turkish-selector">Administrators|Users|LOCAL SERVICE</value>
        <value selector="AllowedToChangeTheTimeZone_turkish-selector-0">Administrators|Local Service</value>
        <value selector="AllowedToChangeTheTimeZone_turkish-selector-1">Administrators|Local Service</value>
        <value selector="AllowedToChangeTheTimeZone_turkish-selector-4">Administrators|Users|Local Service</value>
      </Value>
            <Rule id="UserRight_AccessThisComputerFromTheNetwork" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Access this computer from the network</title>
        <description xml:lang="en">This user right determines which users and groups are allowed to connect to the computer over the network.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_english" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_italian" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_spanish" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_chinese" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_japanese" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_french" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_german" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_polish" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_portuguese" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_swedish" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AccessThisComputerFromTheNetwork_turkish" export-name="oval:com.mcafee.oval:var:54609" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:54419" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ActAsPartOfTheOperatingSystem" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Act as part of the operating system</title>
        <description xml:lang="en">This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_english" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_italian" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_spanish" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_chinese" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_japanese" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_french" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_german" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_polish" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_portuguese" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_swedish" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ActAsPartOfTheOperatingSystem_turkish" export-name="oval:com.mcafee.oval:var:60022" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60020" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_AddWorkstationsToDomain" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Add workstations to domain</title>
        <description xml:lang="en">This security setting determines which groups or users can add workstations to a domain.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_english" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_italian" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_spanish" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_chinese" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_japanese" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_french" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_german" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_polish" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_portuguese" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_swedish" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AddWorkstationsToDomain_turkish" export-name="oval:com.mcafee.oval:var:60004" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60002" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_BackUpFilesAndDirectories" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Back up files and directories</title>
        <description xml:lang="en">This user right determines which users can bypass file and directory, registry, and other persistent object permissions for the purposes of backing up the system.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_english" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_italian" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_spanish" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_chinese" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_japanese" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_french" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_german" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_polish" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_portuguese" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_swedish" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BackUpFilesAndDirectories_turkish" export-name="oval:com.mcafee.oval:var:60070" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60068" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_BypassTraverseChecking" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Bypass traverse checking</title>
        <description xml:lang="en">This user right determines which users can traverse directory trees even though the user may not have permissions on the traversed directory.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_english" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_italian" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_spanish" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_chinese" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_japanese" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_french" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_german" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_polish" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_portuguese" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_swedish" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="BypassTraverseChecking_turkish" export-name="oval:com.mcafee.oval:var:60154" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60152" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ChangeTheSystemTime" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Change the system time</title>
        <description xml:lang="en">This user right determines which users and groups can change the time and date on the internal clock of this Workstation computer.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_english" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_italian" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_spanish" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_chinese" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_japanese" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_french" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_german" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_polish" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_portuguese" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_swedish" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ChangeTheSystemTime_turkish" export-name="oval:com.mcafee.oval:var:59974" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59972" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_CreateAPagefile" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Create a pagefile</title>
        <description xml:lang="en">This user right determines which users and groups can call an internal application programming interface (API) to create a page file.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_english" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_italian" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_spanish" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_chinese" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_japanese" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_french" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_german" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_polish" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_portuguese" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_swedish" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateAPagefile_turkish" export-name="oval:com.mcafee.oval:var:60064" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60062" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_CreateATokenObject" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Create a token object</title>
        <description xml:lang="en">This user right determines which accounts can be used by processes to create a token that can then be used to get access to any local resources when the process uses an internal application programming interface (API) to create an access token.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_english" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_italian" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_spanish" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_chinese" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_japanese" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_french" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_german" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_polish" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_portuguese" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_swedish" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateATokenObject_turkish" export-name="oval:com.mcafee.oval:var:60052" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60050" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_CreatePermanentSharedObjects" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Create permanent shared objects</title>
        <description xml:lang="en">This user right determines which accounts can be used by processes to create a directory object in the Windows 2000 Server, Windows 2000 Professional, Windows XP Professional, and Windows Server 2003 family object manager.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_english" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_italian" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_spanish" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_chinese" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_japanese" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_french" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_german" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_polish" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_portuguese" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_swedish" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreatePermanentSharedObjects_turkish" export-name="oval:com.mcafee.oval:var:60058" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60056" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_DebugPrograms" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Debug programs</title>
        <description xml:lang="en">This user right determines which users can attach a debugger to any process or to the kernel.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_english" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_italian" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_spanish" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_chinese" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_japanese" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_french" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_german" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_polish" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_portuguese" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_swedish" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DebugPrograms_turkish" export-name="oval:com.mcafee.oval:var:60040" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60038" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_DenyAccessToThisComputerFromTheNetwork" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Deny access to this computer from the network</title>
        <description xml:lang="en">This security setting determines which users are prevented from accessing a computer over the network.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_english" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_italian" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_spanish" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_chinese" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_japanese" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_french" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_german" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_polish" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_portuguese" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_swedish" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyAccessToThisComputerFromTheNetwork_turkish" export-name="oval:com.mcafee.oval:var:60136" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60134" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_DenyLogOnAsABatchJob" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Deny log on as a batch job</title>
        <description xml:lang="en">This security setting determines which accounts are prevented from being able to log on as a batch job.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_english" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_italian" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_spanish" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_chinese" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_japanese" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_french" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_german" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_polish" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_portuguese" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_swedish" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsABatchJob_turkish" export-name="oval:com.mcafee.oval:var:60010" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60008" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_DenyLogOnAsAService" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Deny log on as a service</title>
        <description xml:lang="en">This security setting determines which service accounts are prevented from registering a process as a service.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_english" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_italian" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_spanish" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_chinese" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_japanese" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_french" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_german" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_polish" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_portuguese" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_swedish" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnAsAService_turkish" export-name="oval:com.mcafee.oval:var:60130" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60128" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_DenyLogOnLocally" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Deny log on locally</title>
        <description xml:lang="en">This security setting determines which users are prevented from logging on at the computer.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_english" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_italian" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_spanish" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_chinese" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_japanese" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_french" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_german" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_polish" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_portuguese" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_swedish" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnLocally_turkish" export-name="oval:com.mcafee.oval:var:59950" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59948" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_EnableComputerAndUserAccountsToBeTrustedForDelegation" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Enable computer and user accounts to be trusted for delegation</title>
        <description xml:lang="en">This user right determines which users can set the Trusted for Delegation setting on a user or computer object.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_english" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_italian" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_spanish" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_chinese" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_japanese" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_french" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_german" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_polish" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_portuguese" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_swedish" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="EnableComputerAndUserAccountsToBeTrustedForDelegation_turkish" export-name="oval:com.mcafee.oval:var:60124" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60122" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ForceShutdownFromARemoteSystem" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Force shutdown from a remote system</title>
        <description xml:lang="en">This security setting determines which users are allowed to shut down a computer from a remote location on the network.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_english" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_italian" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_spanish" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_chinese" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_japanese" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_french" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_german" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_polish" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_portuguese" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_swedish" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ForceShutdownFromARemoteSystem_turkish" export-name="oval:com.mcafee.oval:var:59992" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59990" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_GenerateSecurityAudits" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Generate security audits</title>
        <description xml:lang="en">This security setting determines which accounts can be used by a process to add entries to the security log.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_english" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_italian" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_spanish" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_chinese" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_japanese" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_french" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_german" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_polish" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_portuguese" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_swedish" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="GenerateSecurityAudits_turkish" export-name="oval:com.mcafee.oval:var:60094" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60092" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_AdjustMemoryQuotasForAProcess" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Adjust memory quotas for a process</title>
        <description xml:lang="en">This privilege determines who can change the maximum memory that can be consumed by a process.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_english" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_italian" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_spanish" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_chinese" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_japanese" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_french" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_german" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_polish" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_portuguese" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_swedish" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AdjustMemoryQuotasForAProcess_turkish" export-name="oval:com.mcafee.oval:var:60046" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60044" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_IncreaseSchedulingPriority" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Increase scheduling priority</title>
        <description xml:lang="en">This security setting determines which accounts can use a process with Write Property access to another process to increase the execution priority assigned to the other process.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_english" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_italian" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_spanish" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_chinese" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_japanese" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_french" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_german" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_polish" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_portuguese" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_swedish" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="IncreaseSchedulingPriority_turkish" export-name="oval:com.mcafee.oval:var:59956" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59954" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_LoadAndUnloadDeviceDrivers" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Load and unload device drivers</title>
        <description xml:lang="en">This user right determines which users can dynamically load and unload device drivers or other code in to kernel mode.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_english" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_italian" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_spanish" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_chinese" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_japanese" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_french" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_german" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_polish" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_portuguese" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_swedish" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LoadAndUnloadDeviceDrivers_turkish" export-name="oval:com.mcafee.oval:var:60148" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60146" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_LockPagesInMemory" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Lock pages in memory</title>
        <description xml:lang="en">This security setting determines which accounts can use a process to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_english" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_italian" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_spanish" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_chinese" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_japanese" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_french" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_german" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_polish" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_portuguese" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_swedish" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LockPagesInMemory_turkish" export-name="oval:com.mcafee.oval:var:60088" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60086" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
            <Rule id="UserRight_LogOnAsABatchJob" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Log on as a batch job</title>
        <description xml:lang="en">This security setting allows a user to be logged on by means of a batch-queue facility.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_english" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_italian" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_spanish" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_chinese" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_japanese" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_french" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_german" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_polish" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_portuguese" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_swedish" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsABatchJob_turkish" export-name="oval:com.mcafee.oval:var:59962" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59960" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_LogOnAsAService" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Log on as a service</title>
        <description xml:lang="en">This security setting determines which service accounts can register a process as a service.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_english" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_italian" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_spanish" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_chinese" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_japanese" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_french" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_german" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_polish" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_portuguese" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_swedish" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="LogOnAsAService_turkish" export-name="oval:com.mcafee.oval:var:60142" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60140" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_AllowLogonLocally" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Allow logon locally</title>
        <description xml:lang="en">This logon right determines which users can interactively log on to this Workstation computer.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_english" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_italian" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_spanish" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_chinese" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_japanese" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_french" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_german" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_polish" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_portuguese" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_swedish" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnLocally_turkish" export-name="oval:com.mcafee.oval:var:54611" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56204" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ManageAuditingAndSecurityLog" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Manage auditing and security log</title>
        <description xml:lang="en">This security setting determines which users can specify object access auditing options for individual resources, such as files, Active Directory objects, and registry keys.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_english" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_italian" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_spanish" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_chinese" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_japanese" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_french" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_german" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_polish" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_portuguese" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_swedish" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ManageAuditingAndSecurityLog_turkish" export-name="oval:com.mcafee.oval:var:59968" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59966" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ModifyFirmwareEnvironmentValues" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Modify firmware environment values</title>
        <description xml:lang="en">This security setting determines who can modify firmware environment values.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_english" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_italian" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_spanish" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_chinese" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_japanese" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_french" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_german" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_polish" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_portuguese" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_swedish" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ModifyFirmwareEnvironmentValues_turkish" export-name="oval:com.mcafee.oval:var:60112" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60110" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ProfileSingleProcess" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Profile single process</title>
        <description xml:lang="en">This security setting determines which users can use performance monitoring tools to monitor the performance of nonsystem processes.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_english" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_italian" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_spanish" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_chinese" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_japanese" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_french" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_german" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_polish" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_portuguese" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_swedish" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileASingleProcess_turkish" export-name="oval:com.mcafee.oval:var:60028" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60026" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ProfileSystemPerformance" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Profile system performance</title>
        <description xml:lang="en">This security setting determines which users can use performance monitoring tools to monitor the performance of system processes.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_english" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_italian" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_spanish" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_chinese" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_japanese" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_french" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_german" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_polish" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_portuguese" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_swedish" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ProfileSystemPerformance_turkish" export-name="oval:com.mcafee.oval:var:60106" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60104" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_RemoveComputerFromDockingStation" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Remove computer from docking station</title>
        <description xml:lang="en">This security setting determines whether a user can undock a portable computer from its docking station without logging on.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_english" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_italian" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_spanish" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_chinese" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_japanese" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_french" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_german" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_polish" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_portuguese" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_swedish" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RemoveComputerFromADockingStation_turkish" export-name="oval:com.mcafee.oval:var:60082" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60080" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ReplaceAProcessLevelToken" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Replace a process level token</title>
        <description xml:lang="en">This security setting determines which user accounts can call the CreateProcessAsUser() application programming interface (API) so that one service can start another.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_english" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_italian" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_spanish" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_chinese" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_japanese" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_french" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_german" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_polish" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_portuguese" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_swedish" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ReplaceAProcessLevelToken_turkish" export-name="oval:com.mcafee.oval:var:60076" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60074" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_RestoreFilesAndDirectories" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Restore files and directories</title>
        <description xml:lang="en">This security setting determines which users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and directories, and determines which users can set any valid security principal as the owner of an object.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_english" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_italian" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_spanish" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_chinese" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_japanese" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_french" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_german" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_polish" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_portuguese" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_swedish" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="RestoreFilesAndDirectories_turkish" export-name="oval:com.mcafee.oval:var:59986" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59984" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ShutDownTheSystem" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Shut down the system</title>
        <description xml:lang="en">This security setting determines which users who are logged on locally to the computer can shut down the operating system using the Shut Down command.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_english" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_italian" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_spanish" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_chinese" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_japanese" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_french" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_german" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_polish" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_portuguese" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_swedish" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ShutDownTheSystem_turkish" export-name="oval:com.mcafee.oval:var:60118" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60116" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_SynchronizeDirectoryServiceData" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Synchronize directory service data</title>
        <description xml:lang="en">This security setting determines which users and groups have the authority to synchronize all directory service data.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_english" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_italian" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_spanish" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_chinese" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_japanese" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_french" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_german" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_polish" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_portuguese" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_swedish" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="SynchronizeDirectoryServiceData_turkish" export-name="oval:com.mcafee.oval:var:59980" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59978" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_TakeOwnershipOfFilesOrOtherObjects" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Take ownership of files or other objects</title>
        <description xml:lang="en">This security setting determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, printers, registry keys, processes, and threads.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_english" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_italian" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_spanish" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_chinese" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_japanese" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_french" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_german" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_polish" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_portuguese" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_swedish" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="TakeOwnershipOfFilesAndOtherObjects_turkish" export-name="oval:com.mcafee.oval:var:60100" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60098" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_AllowLogOnThroughTerminalServices" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Allow log on through Terminal Services</title>
        <description xml:lang="en">This security setting determines which users or groups have permission to log on as a Terminal Services client.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_english" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_italian" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_spanish" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_chinese" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_japanese" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_french" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_german" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_polish" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_portuguese" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_swedish" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowLogOnThroughTerminalServices_turkish" export-name="oval:com.mcafee.oval:var:59998" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59996" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_DenyLogOnThroughTerminalServices" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Deny log on through Terminal Services</title>
        <description xml:lang="en">This security setting determines which users and groups are prohibited from logging on as a Terminal Services client.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_english" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_italian" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_spanish" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_chinese" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_japanese" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_french" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_german" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_polish" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_portuguese" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_swedish" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="DenyLogOnThroughTerminalServices_turkish" export-name="oval:com.mcafee.oval:var:60034" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60032" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_PerformVolumeMaintenanceTasks" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Perform volume maintenance tasks</title>
        <description xml:lang="en">This security setting determines which users and groups can run maintenance tasks on a volume, such as remote defragmentation.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_english" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_italian" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_spanish" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_chinese" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_japanese" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_french" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_german" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_polish" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_portuguese" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_swedish" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="PerformVolumeMaintenanceTasks_turkish" export-name="oval:com.mcafee.oval:var:59944" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59942" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_CreateGlobalObjects" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Create global objects</title>
        <description xml:lang="en">This check verifies which users are allowed to Create global objects (secreateglobalprivilege) based off a set of usernames provided by the user.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_english" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_italian" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_spanish" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_chinese" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_japanese" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_french" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_german" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_polish" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_portuguese" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_swedish" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="CreateGlobalObjects_turkish" export-name="oval:com.mcafee.oval:var:59107" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56811" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ImpersonateAClientAfterAuthentication" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Impersonate a client after authentication</title>
        <description xml:lang="en">This check verifies which users are allowed to Impersonate a client after authentication (seimpersonateprivilege) based off a set of usernames provided by the user.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_english" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_italian" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_spanish" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_chinese" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_japanese" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_french" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_german" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_polish" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_portuguese" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_swedish" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="ImpersonateAClientAfterAuthentication_turkish" export-name="oval:com.mcafee.oval:var:56772" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:56810" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
            <Rule id="UserRight_ModifyAnObjectLabel" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Modify an Object Label</title>
        <description xml:lang="en">This check verifies which users are allowed to Modify an Object Label (serelabelprivilege) based off a set of usernames provided by the user.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_english" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_italian" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_spanish" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_chinese" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_japanese" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_french" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_german" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_polish" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_portuguese" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_swedish" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToModifyAnObjectLabel_turkish" export-name="oval:com.mcafee.oval:var:59794" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59792" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_CreateSymbolicLinks" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Create symbolic links</title>
        <description xml:lang="en">This check verifies which users are allowed to Create Symbolic Links (SeCreateSymbolicLinkPrivilege) based off a set of usernames provided by the user.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_english" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_italian" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_spanish" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_chinese" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_japanese" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_french" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_german" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_polish" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_portuguese" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_swedish" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToCreateSymbolicLinks_turkish" export-name="oval:com.mcafee.oval:var:79465" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:101084" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_IncreaseAProcessWorkingSet" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Increase a Process Working Set</title>
        <description xml:lang="en">This check verifies which users are allowed to Increase a Process Working Set (seincreaseworkingsetprivilege) based off a set of usernames provided by the user.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_english" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_italian" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_spanish" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_chinese" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_japanese" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_french" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_german" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_polish" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_portuguese" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_swedish" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToIncreaseProcessWorkSet_turkish" export-name="oval:com.mcafee.oval:var:59806" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59804" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
      <Rule id="UserRight_ChangeTheTimeZone" xml:lang="en" selected="false">
        <title xml:lang="en">User Right: Change the Time Zone</title>
        <description xml:lang="en">This check verifies which users are allowed to Change the Time Zone (setimezoneprivilege) based off a set of usernames provided by the user.</description>
        <complex-check operator="OR" negate="false">
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_english" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61443" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_italian" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61440" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_spanish" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61437" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_chinese" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61445" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_japanese" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:60942" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_french" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61442" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_german" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61441" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_polish" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61002" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_portuguese" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61439" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_swedish" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61438" />
            </check>
          </complex-check>
          <complex-check operator="AND" negate="false">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-export value-id="AllowedToChangeTheTimeZone_turkish" export-name="oval:com.mcafee.oval:var:59800" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:59798" />
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" selector="">
              <check-content-ref href="" name="oval:com.mcafee.oval:def:61166" />
            </check>
          </complex-check>
        </complex-check>
      </Rule>
    </Group>
    <Group id="SecurityOptions" xml:lang="en">
      <title xml:lang="en">Security Options</title>
      <Value id="AdministratorAccountStatus_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="GuestAccountStatus_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="LimitBlankPasswords_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="BlockMicrosoftAccounts_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">3</value>
      </Value>
      <Value id="SelectARestrictionLevelBelow_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
        <value selector="SelectARestrictionLevelBelow_var-selector">2</value>
      </Value>
      <Value id="AuditTheAccessOfGlobalSystemObjects_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="AuditTheUseOfBackupAndRestorePrivilege_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">00</value>
      </Value>
      <Value id="ShutDownImmediately_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ForceAuditPolicySubcategorySettings_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="PreventUsersFromInstallingPrinterDrivers_var1" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
        <value selector="PreventUsersFromInstallingPrinterDrivers_var1-selector">0</value>
      </Value>
      <Value id="RestrictAccessToCDROMDriveToLocallyLoggedonUsers_var1" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
        <value selector="RestrictAccessToCDROMDriveToLocallyLoggedonUsers_var1-selector-0">0</value>
      </Value>
      <Value id="RestrictAccessToFloppyDriveToLocallyLoggedonUsers_var1" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
        <value selector="RestrictAccessToFloppyDriveToLocallyLoggedonUsers_var1-selector-0">0</value>
      </Value>
      <Value id="UnsignedDriverInstallationBehavior_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">01</value>
      </Value>
      <Value id="UnsignedNondriverInstallationBehavior_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">01</value>
      </Value>
      <Value id="AllowedToFormatAndEjectRemovableMedia_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="AllowedToFormatAndEjectRemovableMedia_var-selector-0">2</value>
        <value selector="AllowedToFormatAndEjectRemovableMedia_var-selector-2">2</value>
        <value selector="AllowedToFormatAndEjectRemovableMedia_var-selector-4">2</value>
        <value selector="AllowedToFormatAndEjectRemovableMedia_var-selector-5">2</value>
      </Value>
      <Value id="AllowUndockWithoutHavingToLogOn_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="AllowServerOperatorsToScheduleTasks_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="LDAPServerSigningRequirements_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="RefuseMachineAccountPasswordChanges_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="RequireStrongSessionKey_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DisableMachineAccountPasswordChanges_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="MaxMachineAccountPwdAge_inDays__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">30</value>
      </Value>
      <Value id="DigitallyEncryptOrSignSecureChannelData_always__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DigitallyEncryptSecureChannelData_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DigitallySignSecureChannelData_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DoNotRequireCTRLALTDEL_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="MessageTextForUsersAttemptingToLogOn_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel. In the course of monitoring individuals improperly using this system, or in the course of system maintenance, the activities of authorized users may also be monitored. Anyone using this system expressly consents to such monitoring and is advised that if such monitoring reveals possible evidence of criminal activity, system personnel may provide the evidence of such monitoring to law enforcement officials.</value>
      </Value>
      <Value id="MessageTitleForUsersAttemptingToLogOn_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">-- WARNING --</value>
      </Value>
      <Value id="NumberOfDaysToPromptUserToChangePasswordBeforeExpiration_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">14</value>
      </Value>
      <Value id="DoNotDisplayLastUserName_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="NumberOfPreviousLogonsToCache_var1" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-1">2</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-6">2</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-10">0</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-11">0</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-16">0</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-17">0</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-18">2</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-19">4</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-20">4</value>
        <value selector="NumberOfPreviousLogonsToCache_var1-selector-21">4</value>
      </Value>
      <Value id="SmartCardRemovalBehavior_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DomainControllerRequiredToUnlock_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
        <value selector="DomainControllerRequiredToUnlock_var-selector-3">0</value>
        <value selector="DomainControllerRequiredToUnlock_var-selector-4">0</value>
        <value selector="DomainControllerRequiredToUnlock_var-selector-5">0</value>
        <value selector="DomainControllerRequiredToUnlock_var-selector-6">0</value>
      </Value>
      <Value id="RequireSmartCard_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="NumberOfInvalidLogonAttempts_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">10</value>
      </Value>
      <Value id="MachineInactivityLimit_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">900</value>
      </Value>
      <Value id="ClientSignCommunications_always__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SignCommunications_ifServerAgrees__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SendUnencryptedPasswords_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="DisconnectClientsWhenLogonHoursExpire_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="AmountOfIdleTime_inMinutes_RequiredBeforeSusendingSession_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">15</value>
        <value selector="AmountOfIdleTime_inMinutes_RequiredBeforeSusendingSession_var-selector">30</value>
      </Value>
      <Value id="ServerSignCommunications_always__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SignCommunications_ifClientAgrees__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DisableAutorun_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">255</value>
      </Value>
      <Value id="AutomaticLogonSetting_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="AutomaticRestart_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="WorkstationAdministrativeShares_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="IPSourceRoutingProtectionLevel_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="AllowAutomaticDetectionOfDeadNetworkGateways_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="AllowICMPRedirects_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="HowOftenKeepalivePacketsAreSentInMilliseconds_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">300000</value>
      </Value>
      <Value id="IgnoreNetBIOSNameReleaseRequests_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="PerformRouterDiscovery_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="SynAttackProtectionLevel_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="IPSecExemptions_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
        <value selector="IPSecExemptions_var-selector-1">3</value>
        <value selector="IPSecExemptions_var-selector-2">3</value>
        <value selector="IPSecExemptions_var-selector-5">3</value>
        <value selector="IPSecExemptions_var-selector-6">3</value>
      </Value>
      <Value id="HideComputerFromTheBrowseList_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="EnableSafeDLLSearchMode_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ServerAdministrativeShares_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="NumberOfConnections_10Recommended__var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">10</value>
      </Value>
      <Value id="EnableDynamicBacklog_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="MaxNumberOfQuasifreeConnections_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">20000</value>
      </Value>
      <Value id="MinimumNumberOfFreeConnections_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">20</value>
      </Value>
      <Value id="MaximumNumberOfResponseRetransmissions_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="HowManyTimesUnacknowledgedDataIsRetransmitted_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">3</value>
      </Value>
      <Value id="EnableTheComputerToStopGenerating8.3StyleFilenames_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
        <value selector="EnableTheComputerToStopGenerating8.3StyleFilenames_var-selector">0</value>
      </Value>
      <Value id="ThresholdPercentage_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">90</value>
      </Value>
      <Value id="ScreenSaverGracePeriod_inSeconds__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="ScreenSaverGracePeriod_inSeconds__var-selector">5</value>
      </Value>
      <Value id="IPv6SourceRoutingProtectionLevel_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="HowManyTimesUnacknowledgedIPv6DataIsRetransmitted_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">3</value>
      </Value>
      <Value id="RestrictclientsallowedtomakeremotecallsSAM_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">O:BAG:BAD:(A;;RC;;;LA)</value>
      </Value>
      <Value id="DoNotAllowAnonymousEnumerationOfSAMAccounts_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="LetEveryonePermissionsApplyToAnonymousUsers_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">COMNAP|COMNODE|SQL\QUERY|SPOOLSS|LLSRPC|browser</value>
        <value selector="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var-selector-0">|</value>
        <value selector="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var-selector-3">|</value>
        <value selector="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var-selector-11">netlogon|lsarpc|samr|browser</value>
      </Value>
      <Value id="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">System\CurrentControlSet\Control\ProductOptions|System\CurrentControlSet\Control\Print\Printers|System\CurrentControlSet\Control\Server Applications|System\CurrentControlSet\Services\Eventlog|Software\Microsoft\OLAP Server|Software\Microsoft\Windows NT\CurrentVersion|System\CurrentControlSet\Control\ContentIndex|System\CurrentControlSet\Control\Terminal Server|System\CurrentControlSet\Control\Terminal Server\UserConfig|System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration</value>
        <value selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-5">System\CurrentControlSet\Control\ProductOptions|System\CurrentControlSet\Control\Server Applications|Software\Microsoft\Windows NT\CurrentVersion</value>
        <value selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-6">System\CurrentControlSet\Control\ProductOptions|System\CurrentControlSet\Control\Server Applications|Software\Microsoft\Windows NT\CurrentVersion</value>
        <value selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-7">System\CurrentControlSet\Control\ProductOptions|System\CurrentControlSet\Control\Server Applications|Software\Microsoft\Windows NT\CurrentVersion</value>
        <value selector="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var-selector-8">System\CurrentControlSet\Control\ProductOptions|System\CurrentControlSet\Control\Server Applications|Software\Microsoft\Windows NT\CurrentVersion</value>
      </Value>
      <Value id="PipeDelimitedListOfShares_exShare1share2share3__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">COMCFG|DFS$</value>
        <value selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-0">|</value>
        <value selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-3">|</value>
        <value selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-9">|</value>
        <value selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-10">|</value>
        <value selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-13">|</value>
        <value selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-14">|</value>
        <value selector="PipeDelimitedListOfShares_exShare1share2share3__var-selector-15">|</value>
      </Value>
      <Value id="SharingAndSecurityModelForLocalAccounts_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="PipeDelimitedListOfRegistryPathsAndSubpaths_exPath1path2path3__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">System\CurrentControlSet\Control\Print\Printers|System\CurrentControlSet\Services\Eventlog|Software\Microsoft\OLAP Server|Software\Microsoft\Windows NT\CurrentVersion\Print|Software\Microsoft\Windows NT\CurrentVersion\Windows|System\CurrentControlSet\Control\ContentIndex|System\CurrentControlSet\Control\Terminal Server|System\CurrentControlSet\Control\Terminal Server\UserConfig|System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration|Software\Microsoft\Windows NT\CurrentVersion\Perflib|System\CurrentControlSet\Services\SysmonLog</value>
      </Value>
      <Value id="RestrictAnonymousAccessToNamedPipesAndShares_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="AuthenticationLevel_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">3</value>
        <value selector="AuthenticationLevel_var-selector">4</value>
        <value selector="AuthenticationLevel_var-selector-2">4</value>
        <value selector="AuthenticationLevel_var-selector-4">4</value>
        <value selector="AuthenticationLevel_var-selector-8">4</value>
        <value selector="AuthenticationLevel_var-selector-9">4</value>
        <value selector="AuthenticationLevel_var-selector-14">4</value>
        <value selector="AuthenticationLevel_var-selector-15">4</value>
        <value selector="AuthenticationLevel_var-selector-16">5</value>
        <value selector="AuthenticationLevel_var-selector-17">5</value>
        <value selector="AuthenticationLevel_var-selector-18">5</value>
        <value selector="AuthenticationLevel_var-selector-19">5</value>
      </Value>
      <Value id="DoNotStoreLANManagerHashValue_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ForceLogoffWhenLogonHoursExpire_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="LDAPClientSigningRequirements_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="MinimumSessionSecurityClients_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">537395248</value>
        <value selector="MinimumSessionSecurityClients_var-selector">537395200</value>
        <value selector="MinimumSessionSecurityClients_var-selector-3">537395200</value>
        <value selector="MinimumSessionSecurityClients_var-selector-4">537395200</value>
        <value selector="MinimumSessionSecurityClients_var-selector-7">537395200</value>
        <value selector="MinimumSessionSecurityClients_var-selector-8">537395200</value>
        <value selector="MinimumSessionSecurityClients_var-selector-11">537395200</value>
        <value selector="MinimumSessionSecurityClients_var-selector-12">537395200</value>
        <value selector="MinimumSessionSecurityClients_var-selector-13">537395200</value>
        <value selector="MinimumSessionSecurityClients_var-selector-14">537395200</value>
      </Value>
      <Value id="MinimumSessionSecurityForServers_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">537395248</value>
        <value selector="MinimumSessionSecurityForServers_var-selector">537395200</value>
        <value selector="MinimumSessionSecurityForServers_var-selector-3">537395200</value>
        <value selector="MinimumSessionSecurityForServers_var-selector-4">537395200</value>
        <value selector="MinimumSessionSecurityForServers_var-selector-7">537395200</value>
        <value selector="MinimumSessionSecurityForServers_var-selector-8">537395200</value>
        <value selector="MinimumSessionSecurityForServers_var-selector-11">537395200</value>
        <value selector="MinimumSessionSecurityForServers_var-selector-12">537395200</value>
        <value selector="MinimumSessionSecurityForServers_var-selector-13">537395200</value>
        <value selector="MinimumSessionSecurityForServers_var-selector-14">537395200</value>
      </Value>
      <Value id="AllowLocalSystemNULLSessionFallback_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="AllowLocalSystemToUseComputerIdentityForNTLM_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="AllowPKU2UAuthenticationRequests_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="AllowAutomaticAdministrativeLogon_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="RecoveryConsoleFullAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShutDownWithoutLogon_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="ShutDownWithoutLogon_var-selector">1</value>
        <value selector="ShutDownWithoutLogon_var-selector-0">1</value>
      </Value>
      <Value id="ClearPagefileAtShutdown_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
        <value selector="ClearPagefileAtShutdown_var0-selector-1">0</value>
        <value selector="ClearPagefileAtShutdown_var0-selector-2">0</value>
        <value selector="ClearPagefileAtShutdown_var0-selector-3">0</value>
        <value selector="ClearPagefileAtShutdown_var0-selector-4">0</value>
        <value selector="ClearPagefileAtShutdown_var0-selector-7">0</value>
        <value selector="ClearPagefileAtShutdown_var0-selector-8">0</value>
        <value selector="ClearPagefileAtShutdown_var0-selector-9">0</value>
        <value selector="ClearPagefileAtShutdown_var0-selector-10">0</value>
      </Value>
      <Value id="UseFIPSCompliantAlgorithms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="UseFIPSCompliantAlgorithms_var-selector-1">1</value>
        <value selector="UseFIPSCompliantAlgorithms_var-selector-2">1</value>
        <value selector="UseFIPSCompliantAlgorithms_var-selector-3">1</value>
        <value selector="UseFIPSCompliantAlgorithms_var-selector-4">1</value>
      </Value>
      <Value id="ForceKeyProtection_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
        <value selector="ForceKeyProtection_var-selector-0">1</value>
        <value selector="ForceKeyProtection_var-selector-2">1</value>
        <value selector="ForceKeyProtection_var-selector-3">1</value>
        <value selector="ForceKeyProtection_var-selector-4">1</value>
        <value selector="ForceKeyProtection_var-selector-5">1</value>
      </Value>
      <Value id="StrengthenDefaultPermissions_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DefaultOwnerForObjects_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="RequireCaseInsensitivity_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="UseCertificateRules_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="UseCertificateRules_var-selector-5">1</value>
        <value selector="UseCertificateRules_var-selector-6">1</value>
      </Value>
      <Value id="AdminApprovalMode_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="BehaviorOfTheElevationPromptForAdministrators_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">PromptCredsNew</value>
        <value selector="BehaviorOfTheElevationPromptForAdministrators_var-selector">PromptCredsOld</value>
        <value selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-0">PromptCredsOld</value>
        <value selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-3">PromptConsentOld</value>
        <value selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-4">SecureConsent</value>
        <value selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-5">PromptBinaries</value>
        <value selector="BehaviorOfTheElevationPromptForAdministrators_var-selector-6">PromptBinaries</value>
      </Value>
      <Value id="BehaviorOfTheElevationPromptForStandardUsers_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">AutoDeny</value>
        <value selector="BehaviorOfTheElevationPromptForStandardUsers_var-selector">PromptCredsOld</value>
        <value selector="BehaviorOfTheElevationPromptForStandardUsers_var-selector-0">PromptCredsNew</value>
        <value selector="BehaviorOfTheElevationPromptForStandardUsers_var-selector-1">PromptCredsNew</value>
      </Value>
      <Value id="DetectApplicationInstallationsAndPromptForElevation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="RunAllAdministratorsInAdminApprovalMode_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SwitchToTheSecureDesktopWhenPromptingForElevation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="VirtualizeFileAndRegistryWriteFailuresToPer-userLocations_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="AllowUIAccessApplicationsToPromptForElevationWoSecureDesktop_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="OnlyElevateExecutablesThatAreSignedAndValidated_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="Messageforusersattemptingtologon_Thisshouldbearegexformat__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">^Authorized\susers\sonly\.\sAll\sactivity\smay\sbe\smonitored\sand\sreported.$</value>
      </Value>
      <Value id="DoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="NumberOfDaysToPromptUserToChangePasswordBeforeExpiration_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">5</value>
      </Value>
      <Value id="ServerSPNTargetNameValidationLevel_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Accepted</value>
      </Value>
      <Value id="ConfigureencryptiontypesallowedforKerberos_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2147483644</value>
      </Value>
      <Value id="ForceKeyProtectionwin10_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Rule id="SetSystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" xml:lang="en" selected="false">
        <title xml:lang="en">Set System Cryptography: Force strong key protection for user keys stored on the computer</title>
        <description xml:lang="en">This security setting determines if users' private keys require a password to be used. The options are:
          0 - User input is not required when new keys are stored and used
          1 - User is prompted when the key is first used
          2 - User must enter a password each time they use a key</description>
        <rationale>
          If a user’s account is compromised or their computer is inadvertently left unsecured the malicious user can use the keys stored for the user to access protected resources. You can configure this policy setting so that users must provide a password that is distinct from their domain password every time they use a key. 
          This configuration makes it more difficult for an attacker to access locally stored user keys, even if the attacker takes control of the user's computer and determines their logon password.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35007-4</ident>
        <fixtext fixref="F-SetSystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer_fix">
          Configure the following Group Policy setting in a manner that is consistent with the security and operational requirements of your organization: 
          Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\System cryptography: Force strong key protection for user keys stored on the computer
        </fixtext>
        <fix id="F-SetSystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ForceKeyProtectionwin10_var" export-name="oval:com.mcafee.oval.windows:var:5014" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486382" />
        </check>
      </Rule>
      <Rule id="SetNetworkSecurity_ConfigureencryptiontypesallowedforKerberos" xml:lang="en" selected="false">
        <title xml:lang="en">Set Network security: Configure encryption types allowed for Kerberos</title>
        <description xml:lang="en">This policy setting allows you to set the encryption types that Kerberos is allowed to use.</description>
        <rationale>
          The strength of each encryption algorithm varies from one to the next, choosing stronger algorithms will reduce the risk of compromise however doing so may cause issues when the computer attempts to authenticate 
          with systems that do not support them.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35786-3</ident>
        <fixtext fixref="F-SetNetworkSecurity_ConfigureencryptiontypesallowedforKerberos_fix">
          Configure the following Group Policy setting in a manner that is consistent with the security and operational requirements of your organization: 
          Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network Security: Configure encryption types allowed for Kerberos
        </fixtext>
        <fix id="F-SetNetworkSecurity_ConfigureencryptiontypesallowedforKerberos_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureencryptiontypesallowedforKerberos_var" export-name="oval:com.mcafee.oval:var:72022" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71673" />
        </check>
      </Rule>
      <Rule id="SetMicrosoftNetworkServer_ServerSPNTargetNameValidationLevel" xml:lang="en" selected="false">
        <title xml:lang="en">Set Microsoft Network Server: Server SPN target name validation level</title>
        <description xml:lang="en">This policy setting controls the level of validation a computer with shared folders or printers (the server) performs on the service principal name (SPN) that is provided by the client computer when it establishes a session using the server message block (SMB) protocol. The server message block (SMB) protocol provides the basis for file and print sharing and other networking operations, such as remote Windows administration. The SMB protocol supports validating the SMB server service principal name (SPN) within the authentication blob provided by a SMB client to prevent a class of attacks against SMB servers referred to
          as SMB relay attacks. This setting will affect both SMB1 and SMB2. This security setting determines the level of validation a SMB server performs on the service principal name (SPN) provided by the SMB client when trying to establish a session to an SMB server. The recommended state for this setting is: Accept if provided by client. Configuring this setting to Required from client also conforms with the benchmark.</description>
        <rationale>
          The identity of a computer can be spoofed to gain unauthorized access to network resources.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35299-7</ident>
        <fixtext fixref="F-SetMicrosoftNetworkServer_ServerSPNTargetNameValidationLevel_fix">
          To establish the recommended configuration via GP, set the following UI path to Accept if provided by client. 
          Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level
        </fixtext>
        <fix id="F-SetMicrosoftNetworkServer_ServerSPNTargetNameValidationLevel_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ServerSPNTargetNameValidationLevel_var" export-name="oval:com.mcafee.oval:var:72018" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486379" />
        </check>
      </Rule>
      <Rule id="SetInteractiveLogon_PromptUserToChangePasswordBeforeExpiration" xml:lang="en" selected="false">
        <title xml:lang="en">Set Interactive logon: Prompt user to change password before expiration</title>
        <description xml:lang="en">This policy setting determines how far in advance users are warned that their password will expire. It is recommended that you configure this policy setting to at least 5 days but no more than 14 days to sufficiently warn users when their passwords will expire. The recommended state for this setting is between 5 and 14 days.</description>
        <rationale>
          Users will need to be warned that their passwords are going to expire, or they may inadvertently be locked out of the computer when their passwords expire. This condition could lead to confusion for users who access the network locally, or make it impossible for users to access your organization's network through dial-up or virtual private network (VPN) connections.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35274-0</ident>
        <fixtext fixref="F-SetInteractiveLogon_PromptUserToChangePasswordBeforeExpiration_fix">
          To establish the recommended configuration via GP, set the following UI path to between 5 and 14 day(s). 
          Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Interactive logon: Prompt user to change password before expiration
        </fixtext>
        <fix id="F-SetInteractiveLogon_PromptUserToChangePasswordBeforeExpiration_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NumberOfDaysToPromptUserToChangePasswordBeforeExpiration_var" export-name="oval:com.mcafee.oval:var:1295174" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1295169" />
        </check>
      </Rule>
      <Rule id="NetworkAccessDoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Do not allow storage of passwords and credentials for network authentication</title>
        <description xml:lang="en">This policy setting determines whether the Stored User Names and Passwords feature may save passwords or credentials for later use when it gains domain authentication</description>
        <rationale>
          Passwords that are cached can be accessed by the user when logged on to the computer. Although this information may sound obvious, a problem can arise if the user unknowingly executes hostile code
          that reads the passwords and forwards them to another, unauthorized user.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33718-8</ident>
        <fixtext fixref="F-NetworkAccessDoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication_fix">
          Configure the following Group Policy setting in a manner that is consistent with the security and operational requirements of your organization:
          Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network access: Do not allow storage of passwords and credentials for network authentication
        </fixtext>
        <fix id="F-NetworkAccessDoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication_var" export-name="oval:com.mcafee.oval:var:525462" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:525458" />
        </check>
      </Rule>
      <Rule id="Accounts_AdministratorAccountStatus" xml:lang="en" selected="false">
        <title xml:lang="en">Accounts: Administrator account status</title>
        <description xml:lang="en">This security setting determines whether the local Administrator account is enabled or disabled.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AdministratorAccountStatus_var" export-name="oval:com.mcafee.oval:var:244470" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6019" />
        </check>
      </Rule>
      <Rule id="Accounts_GuestAccountStatus" xml:lang="en" selected="false">
        <title xml:lang="en">Accounts: Guest account status</title>
        <description xml:lang="en">This security setting determines if the Guest account is enabled or disabled.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="GuestAccountStatus_var" export-name="oval:com.mcafee.oval:var:244469" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6020" />
        </check>
      </Rule>
      <Rule id="Accounts_RenameAdministratorAccount" xml:lang="en" selected="false">
        <title xml:lang="en">Accounts: Rename Administrator Account</title>
        <description xml:lang="en">This security setting determines whether a different account name is associated with the security identifier (SID) for the account Administrator.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:16022" />
        </check>
      </Rule>
      <Rule id="Accounts_RenameGuestAccount" xml:lang="en" selected="false">
        <title xml:lang="en">Accounts: Rename Guest Account</title>
        <description xml:lang="en">This security setting determines whether a different account name is associated with the security identifier (SID) for the account Guest.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6023" />
        </check>
      </Rule>
      <Rule id="Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly" xml:lang="en" selected="false">
        <title xml:lang="en">Accounts: Limit local account use of blank passwords to console logon only</title>
        <description xml:lang="en">This security setting determines whether local accounts that are not password protected can be used to logon from locations other than the physical computer console.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LimitBlankPasswords_var" export-name="oval:com.mcafee.oval.windows:var:60211" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6021" />
        </check>
      </Rule>
      <Rule id="Accounts_BlockMicrosoftAccounts" xml:lang="en" selected="false">
        <title xml:lang="en">Accounts: Block Microsoft Accounts</title>
        <description xml:lang="en">This policy setting prevents users from adding new Microsoft accounts on this computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="BlockMicrosoftAccounts_var" export-name="oval:com.mcafee.oval:var:230084" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:229984" />
        </check>
      </Rule>
      <Rule id="AdditionalRestrictionsForAnonymousConnections" xml:lang="en" selected="false">
        <title xml:lang="en">Additional resctrictions for anonymous connections</title>
        <description xml:lang="en">This setting determines whether to use any additional restrictions for anonymous connections.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SelectARestrictionLevelBelow_var" export-name="oval:com.mcafee.oval:var:54615" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56207" />
        </check>
      </Rule>
      <Rule id="Audit_AuditTheAccessOfGlobalSystemObjects" xml:lang="en" selected="false">
        <title xml:lang="en">Audit: Audit the access of global system objects</title>
        <description xml:lang="en">This security setting determines whether to audit the access of global system objects.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditTheAccessOfGlobalSystemObjects_var" export-name="oval:com.mcafee.oval.windows:var:60241" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:16024" />
        </check>
      </Rule>
      <Rule id="Audit_AuditTheUseOfBackupAndRestorePrivilege" xml:lang="en" selected="false">
        <title xml:lang="en">Audit: Audit the use of Backup and Restore privilege</title>
        <description xml:lang="en">This security setting determines whether to audit the use of all user privileges, including Backup and Restore, when the Audit privilege use policy is in effect.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuditTheUseOfBackupAndRestorePrivilege_var" export-name="oval:com.mcafee.oval.windows:var:60251" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:16025" />
        </check>
      </Rule>
      <Rule id="Audit_ShutDownSystemImmediatelyIfUnableToLogSecurityAudits" xml:lang="en" selected="false">
        <title xml:lang="en">Audit: Shut down system immediately if unable to log security audits</title>
        <description xml:lang="en">This security setting determines whether the system shuts down if it is unable to log security events.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ShutDownImmediately_var" export-name="oval:com.mcafee.oval.windows:var:5000" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:5000" />
        </check>
      </Rule>
      <Rule id="Audit_ForceAuditPolicySubcategorySettings_WindowsVistaOrLater_ToOverrideAuditPolicyCategorySettings" xml:lang="en" selected="false">
        <title xml:lang="en">Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings</title>
        <description xml:lang="en">This security setting determines whether windows will force audit policy subcategory settings to override audit policy category settings.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ForceAuditPolicySubcategorySettings_var" export-name="oval:com.mcafee.oval.1:var:60261" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:16026" />
        </check>
      </Rule>
      <Rule id="Devices_PreventUsersFromInstallingPrinterDrivers" xml:lang="en" selected="false">
        <title xml:lang="en">Devices: Prevent users from installing printer drivers</title>
        <description xml:lang="en">This security setting determines who is allowed to install a printer driver as part of adding a network printer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventUsersFromInstallingPrinterDrivers_var1" export-name="oval:com.mcafee.oval.windows:var:60301" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6030" />
        </check>
      </Rule>
      <Rule id="Devices_RestrictCD-ROMAccessToLocallyLogged-onUserOnly" xml:lang="en" selected="false">
        <title xml:lang="en">Devices: Restrict CD-ROM access to locally logged-on user only</title>
        <description xml:lang="en">This security setting determines whether a CD-ROM is accessible to both local and remote users simultaneously.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RestrictAccessToCDROMDriveToLocallyLoggedonUsers_var1" export-name="oval:com.mcafee.oval.windows:var:281" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:58" />
        </check>
      </Rule>
      <Rule id="Devices_RestrictFloppyAccessToLocallyLogged-onUserOnly" xml:lang="en" selected="false">
        <title xml:lang="en">Devices: Restrict floppy access to locally logged-on user only</title>
        <description xml:lang="en">This security setting determines whether removable floppy media are accessible to both local and remote users simultaneously.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RestrictAccessToFloppyDriveToLocallyLoggedonUsers_var1" export-name="oval:com.mcafee.oval.windows:var:282" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:59" />
        </check>
      </Rule>
      <Rule id="Devices_UnsignedDriverInstallationBehavior" xml:lang="en" selected="false">
        <title xml:lang="en">Devices: Unsigned driver installation behavior</title>
        <description xml:lang="en">This security setting determines what happens when an attempt is made to install a device driver (by means of Setup API) that has not been tested by the Windows Hardware Quality Lab (WHQL).</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="UnsignedDriverInstallationBehavior_var" export-name="oval:com.mcafee.oval.windows:var:287" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:60" />
        </check>
      </Rule>
      <Rule id="Devices_UnsignedNon-driverInstallationBehavior" xml:lang="en" selected="false">
        <title xml:lang="en">Devices: Unsigned non-driver installation behavior</title>
        <description xml:lang="en">This security setting determines what happens when an attempt is made to install a non-device driver (by means of Setup API) that has not been tested by the Windows Hardware Quality Lab (WHQL).</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="UnsignedNondriverInstallationBehavior_var" export-name="oval:com.mcafee.oval.windows:var:54601" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54415" />
        </check>
      </Rule>
      <Rule id="Devices_AllowedToFormatAndEjectRemovableMediaSetting" xml:lang="en" selected="false">
        <title xml:lang="en">Devices: Allowed to format and eject removable media setting</title>
        <description xml:lang="en">This security setting determines who is allowed to format and eject removable NTFS media.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowedToFormatAndEjectRemovableMedia_var" export-name="oval:com.mcafee.oval.windows:var:60291" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6029" />
        </check>
      </Rule>
      <Rule id="Devices_AllowUndockWithoutHavingToLogOn" xml:lang="en" selected="false">
        <title xml:lang="en">Devices: Allow undock without having to log on</title>
        <description xml:lang="en">This security setting determines whether a portable computer can be undocked without having to log on.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowUndockWithoutHavingToLogOn_var" export-name="oval:com.mcafee.oval.windows:var:60281" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6028" />
        </check>
      </Rule>
      <Rule id="DomainController_AllowServerOperatorsToScheduleTasks" xml:lang="en" selected="false">
        <title xml:lang="en">Domain controller: Allow server operators to schedule tasks</title>
        <description xml:lang="en">This security setting determines if Server Operators are allowed to submit jobs by means of the AT schedule facility.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowServerOperatorsToScheduleTasks_var" export-name="oval:com.mcafee.oval.windows:var:5500" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:5500" />
        </check>
      </Rule>
      <Rule id="DomainController_LDAPServerSigningRequirements" xml:lang="en" selected="false">
        <title xml:lang="en">Domain controller: LDAP server signing requirements</title>
        <description xml:lang="en">This security setting determines whether the LDAP server requires signing to be negotiated with LDAP clients.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LDAPServerSigningRequirements_var" export-name="oval:com.mcafee.oval.windows:var:5501" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:5501" />
        </check>
      </Rule>
      <Rule id="DomainController_RefuseMachineAccountPasswordChanges" xml:lang="en" selected="false">
        <title xml:lang="en">Domain controller: Refuse machine account password changes</title>
        <description xml:lang="en">This security setting determines whether domain controllers will refuse requests from member computers to change computer account passwords.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RefuseMachineAccountPasswordChanges_var" export-name="oval:com.mcafee.oval:var:56434" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56572" />
        </check>
      </Rule>
      <Rule id="DomainMember_RequireStrong_Windows2000OrLater_SessionKey" xml:lang="en" selected="false">
        <title xml:lang="en">Domain member: Require strong (Windows 2000 or later) session key</title>
        <description xml:lang="en">This security setting determines whether 128-bit key strength is required for encrypted secure channel data.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequireStrongSessionKey_var" export-name="oval:com.mcafee.oval.windows:var:278" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:66" />
        </check>
      </Rule>
      <Rule id="DomainMember_DisableMachineAccountPasswordChanges" xml:lang="en" selected="false">
        <title xml:lang="en">Domain member: Disable machine account password changes</title>
        <description xml:lang="en">This security setting determines whether a domain member periodically changes its computer account password.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisableMachineAccountPasswordChanges_var" export-name="oval:com.mcafee.oval.windows:var:60361" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6036" />
        </check>
      </Rule>
      <Rule id="DomainMember_MaximumMachineAccountPasswordAge" xml:lang="en" selected="false">
        <title xml:lang="en">Domain member: Maximum machine account password age</title>
        <description xml:lang="en">This security setting determines how often a domain member will attempt to change its computer account password.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MaxMachineAccountPwdAge_inDays__var" export-name="oval:com.mcafee.oval.windows:var:30" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:65" />
        </check>
      </Rule>
      <Rule id="DomainMember_DigitallyEncryptOrSignSecureChannelData_Always_" xml:lang="en" selected="false">
        <title xml:lang="en">Domain member: Digitally encrypt or sign secure channel data (always)</title>
        <description xml:lang="en">This security setting determines whether all secure channel traffic initiated by the domain member must be signed or encrypted.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DigitallyEncryptOrSignSecureChannelData_always__var" export-name="oval:com.mcafee.oval.windows:var:6111" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:61" />
        </check>
      </Rule>
      <Rule id="DomainMember_DigitallyEncryptSecureChannelData_WhenPossible_" xml:lang="en" selected="false">
        <title xml:lang="en">Domain member: Digitally encrypt secure channel data (when possible)</title>
        <description xml:lang="en">This security setting determines whether a domain member attempts to negotiate encryption for all secure channel traffic that it initiates.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DigitallyEncryptSecureChannelData_var" export-name="oval:com.mcafee.oval.windows:var:60331" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6033" />
        </check>
      </Rule>
      <Rule id="DomainMember_DigitallySignSecureChannelData_WhenPossible_" xml:lang="en" selected="false">
        <title xml:lang="en">Domain member: Digitally sign secure channel data (when possible)</title>
        <description xml:lang="en">This security setting determines whether a domain member attempts to negotiate signing for all secure channel traffic that it initiates.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DigitallySignSecureChannelData_var" export-name="oval:com.mcafee.oval.windows:var:60351" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6035" />
        </check>
      </Rule>
      <Rule id="ConfigureInteractiveLogon_MessageTextForUsersAttemptingToLogOn" xml:lang="en" selected="false">
        <title xml:lang="en">Configure Interactive logon: Message text for users attempting to log on</title>
        <description xml:lang="en">This policy setting specifies a text message that displays to users when they log on. Configure this setting in a manner that is consistent with the security and operational requirements of your organization.</description>
        <rationale>
          Displaying a warning message before logon may help prevent an attack by warning the attacker about the consequences of their misconduct before it happens. It may also help to reinforce corporate policy by notifying employees of the appropriate policy during the logon process. This text is often used for legal reasons—for example, to warn users about the ramifications of misusing company information or to warn them that their actions may be audited. Note: Any warning that you display should first be approved by your organization's legal and human resources representatives.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35064-5</ident>
        <fixtext fixref="F-ConfigureInteractiveLogon_MessageTextForUsersAttemptingToLogOn_fix">
          Set the following group policy to a value that is consistent with the security and operational requirements of your organization. 
          Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Interactive logon: Message text for users attempting to log on
        </fixtext>
        <fix id="F-ConfigureInteractiveLogon_MessageTextForUsersAttemptingToLogOn_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Messageforusersattemptingtologon_Thisshouldbearegexformat__var" export-name="oval:com.mcafee.oval:var:1282155" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1282158" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_DoNotRequireCTRL_ALT_DEL" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive logon: Do not require CTRL+ALT+DEL</title>
        <description xml:lang="en">This security setting determines whether pressing CTRL+ALT+DEL is required before a user can log on.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotRequireCTRLALTDEL_var" export-name="oval:com.mcafee.oval.windows:var:60401" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6040" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_MessageTextForUsersAttemptingToLogOn" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive logon: Message text for users attempting to log on</title>
        <description xml:lang="en">This security setting specifies a text message that is displayed to users when they log on.
          
          This text is often used for legal reasons, for example, to warn users about the ramifications of misusing company information or to warn them that their actions may be audited.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MessageTextForUsersAttemptingToLogOn_var" export-name="oval:com.mcafee.oval.windows:var:60411" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6041" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_MessageTitleForUsersAttemptingToLogOn" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive logon: Message title for users attempting to log on</title>
        <description xml:lang="en">This security setting allows the specification of a title to appear in the title bar of the window that contains the Interactive logon: Message text for users attempting to log on.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MessageTitleForUsersAttemptingToLogOn_var" export-name="oval:com.mcafee.oval.windows:var:60421" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6042" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_PromptUserToChangePasswordBeforeExpiration" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive logon: Prompt user to change password before expiration</title>
        <description xml:lang="en">This security setting determines how far in advance (in days) users are warned that their password is about to expire.
          
          With this advance warning, the user has time to construct a password that is sufficiently strong.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NumberOfDaysToPromptUserToChangePasswordBeforeExpiration_var0" export-name="oval:com.mcafee.oval.windows:var:14" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:74" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_DoNotDisplayLastUserName" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive logon: Do not display last user name</title>
        <description xml:lang="en">This security setting determines whether the name of the last user to log on to the computer is displayed in the Windows logon screen.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotDisplayLastUserName_var" export-name="oval:com.mcafee.oval.windows:var:60391" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6039" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_NumberOfPreviousLogonsToCache" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive logon: Number of previous logons to cache</title>
        <description xml:lang="en">All previous users' logon information is cached locally so that, in the event that a domain controller is unavailable during subsequent logon attempts, they are able to log on.
          
          This policy setting determines how many previous logons to cache in case a domain controller is not available.
          
          In this policy setting, a value of 0 disables logon caching.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NumberOfPreviousLogonsToCache_var1" export-name="oval:com.mcafee.oval.windows:var:102" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:72" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_SmartCardRemovalBehavior" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive logon: Smart card removal behavior</title>
        <description xml:lang="en">This security setting determines what happens when the smart card for a logged-on user is removed from the smart card reader.
          
          The options are:
          
          -No Action
          -Lock Workstation
          -Force Logoff
          -Disconnect if a remote Terminal Services session</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SmartCardRemovalBehavior_var" export-name="oval:com.mcafee.oval.windows:var:60461" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6046" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_RequireDomainControllerAuthenticationToUnlock" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive logon: Require Domain Controller authentication to unlock</title>
        <description xml:lang="en">This security setting determines whether a domain controller must be contacted to unlock a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DomainControllerRequiredToUnlock_var" export-name="oval:com.mcafee.oval.windows:var:60451" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6045" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_RequireSmartCard" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive logon: Require smart card</title>
        <description xml:lang="en">This security setting requires users to log on to a computer using a smart card.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequireSmartCard_var" export-name="oval:com.mcafee.oval.windows:var:60821" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6082" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_MachineAccountLockoutThreshold" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive Logon: Machine Account lockout threshold</title>
        <description xml:lang="en">This security setting determines the number of failed logon attempts that causes the machine to be locked out..NOTE: This check assumes the threshold is not set to 0 and will fail if the threshold is set to 0.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NumberOfInvalidLogonAttempts_var" export-name="oval:com.mcafee.oval:var:230078" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:229985" />
        </check>
      </Rule>
      <Rule id="InteractiveLogon_MachineInactivityLimit" xml:lang="en" selected="false">
        <title xml:lang="en">Interactive Logon: Machine inactivity limit</title>
        <description xml:lang="en">This security setting determines the inactivity of a logon session, and if amount of inactive time exceeds the inactivity limit, then the screensaver will run, locking the session.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MachineInactivityLimit_var" export-name="oval:com.mcafee.oval:var:230077" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:229986" />
        </check>
      </Rule>
      <Rule id="MicrosoftNetworkClient_DigitallySignCommunications_Always_" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft network client: Digitally sign communications (always)</title>
        <description xml:lang="en">This security setting determines whether packet signing is required by the SMB client component.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ClientSignCommunications_always__var" export-name="oval:com.mcafee.oval.windows:var:60471" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6047" />
        </check>
      </Rule>
      <Rule id="MicrosoftNetworkClient_DigitallySignCommunications_IfServerAgrees_" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft network client: Digitally sign communications (if server agrees)</title>
        <description xml:lang="en">This security setting determines whether the SMB client attempts to negotiate SMB packet signing.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SignCommunications_ifServerAgrees__var" export-name="oval:com.mcafee.oval.windows:var:60481" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6048" />
        </check>
      </Rule>
      <Rule id="MicrosoftNetworkClient_SendUnencryptedPasswordToConnectToThird-partySMBServers" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft network client: Send unencrypted password to connect to third-party SMB servers</title>
        <description xml:lang="en">This security setting determines whether the Server Message Block (SMB) redirector is allowed to send plaintext passwords to non-Microsoft SMB servers that do not support password encryption during authentication.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SendUnencryptedPasswords_var" export-name="oval:com.mcafee.oval.windows:var:60491" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6049" />
        </check>
      </Rule>
      <Rule id="MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Network Server: Disconnect clients when logon hours expire</title>
        <description xml:lang="en">This security setting determines whether to disconnect users who are connected to the local computer outside their user account's valid logon hours.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisconnectClientsWhenLogonHoursExpire_var" export-name="oval:com.mcafee.oval.windows:var:216" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:86" />
        </check>
      </Rule>
      <Rule id="MicrosoftNetworkServer_ServerSPNTargetNameValidationLevel" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Network Server: Server SPN target name validation level</title>
        <description xml:lang="en">This policy setting controls the level of validation a computer with shared folders or printers (the server) performs on the service principal name (SPN) that is provided by the client computer when it establishes a session using the server message block (SMB) protocol.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ServerSPNTargetNameValidationLevel_var" export-name="oval:com.mcafee.oval:var:72018" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65871" />
        </check>
      </Rule>
      <Rule id="MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingASession" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Network Server: Amount of idle time required before suspending a session</title>
        <description xml:lang="en">This security setting determines the amount of continuous idle time that must pass in a Server Message Block (SMB) session before the session is suspended due to inactivity.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AmountOfIdleTime_inMinutes_RequiredBeforeSusendingSession_var" export-name="oval:com.mcafee.oval.windows:var:215" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:83" />
        </check>
      </Rule>
      <Rule id="MicrosoftNetworkServer_DigitallySignCommunications_Always_" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Network Server: Digitally sign communications (always)</title>
        <description xml:lang="en">This security setting determines whether packet signing is required by the SMB server component.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ServerSignCommunications_always__var" export-name="oval:com.mcafee.oval.windows:var:60511" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6051" />
        </check>
      </Rule>
      <Rule id="MicrosoftNetworkServer_DigitallySignCommunications_IfClientAgrees_" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Network Server: Digitally sign communications (if client agrees)</title>
        <description xml:lang="en">This security setting determines whether the SMB server will negotiate SMB packet signing with clients that request it.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SignCommunications_ifClientAgrees__var" export-name="oval:com.mcafee.oval.windows:var:60521" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6052" />
        </check>
      </Rule>
      <Rule id="MSS_NoDriveTypeAutorun" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: No drive type autorun</title>
        <description xml:lang="en">This security setting determines whether autorun features are disabled for all drives.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisableAutorun_var" export-name="oval:com.mcafee.oval:var:59108" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56812" />
        </check>
      </Rule>
      <Rule id="MSS_EnableAutomaticAdminLogon" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Enable automatic admin logon</title>
        <description xml:lang="en">This security setting determines whether the system will automatically login with administrator credentials.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AutomaticLogonSetting_var" export-name="oval:com.mcafee.oval.windows:var:293" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:110" />
        </check>
      </Rule>
      <Rule id="MSS_AutoReboot" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Auto reboot</title>
        <description xml:lang="en">This security setting determines whether the system will automatically restart after a blue screen error occurs.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AutomaticRestart_var" export-name="oval:com.mcafee.oval.windows:var:5018" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:5018" />
        </check>
      </Rule>
      <Rule id="MSS_EnableAdministrativeShares-Workstations" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Enable administrative shares - Workstations</title>
        <description xml:lang="en">This security setting determines whether administrative shares are allowed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WorkstationAdministrativeShares_var" export-name="oval:com.mcafee.oval.windows:var:5019" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:5019" />
        </check>
      </Rule>
      <Rule id="MSS_DisableIPSourceRouting" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Disable IP source routing</title>
        <description xml:lang="en">This security setting determines whether IP source routing is allowed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IPSourceRoutingProtectionLevel_var0" export-name="oval:com.mcafee.oval.windows:var:289" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:111" />
        </check>
      </Rule>
      <Rule id="MSS_EnableDeadGatewayDetection" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Enable dead gateway detection</title>
        <description xml:lang="en">This security setting determines whether dead gateway detection is allowed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowAutomaticDetectionOfDeadNetworkGateways_var" export-name="oval:com.mcafee.oval.windows:var:292" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:112" />
        </check>
      </Rule>
      <Rule id="MSS_EnableICMPRedirects" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Enable ICMP redirects</title>
        <description xml:lang="en">This security setting determines whether ICMP data can be redirected.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowICMPRedirects_var" export-name="oval:com.mcafee.oval.windows:var:290" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:113" />
        </check>
      </Rule>
      <Rule id="MSS_KeepAliveTime" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Keep alive time</title>
        <description xml:lang="en">This security setting determines how often keep-alive packets are sent.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="HowOftenKeepalivePacketsAreSentInMilliseconds_var0" export-name="oval:com.mcafee.oval.windows:var:5" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:115" />
        </check>
      </Rule>
      <Rule id="MSS_NoNameReleaseOnDemand" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: No name release on demand</title>
        <description xml:lang="en">This security setting determines whether NetBIOS name release requests are ignored.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IgnoreNetBIOSNameReleaseRequests_var" export-name="oval:com.mcafee.oval.windows:var:291" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:118" />
        </check>
      </Rule>
      <Rule id="MSS_PerformRouterDiscovery" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Perform router discovery</title>
        <description xml:lang="en">This security setting determines whether router discoveries are allowed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PerformRouterDiscovery_var" export-name="oval:com.mcafee.oval.windows:var:60631" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6063" />
        </check>
      </Rule>
      <Rule id="MSS_SYNAttackProtectionLevel" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: SYN attack protection level</title>
        <description xml:lang="en">This security setting determines the level of security used to protect against SYN attacks.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SynAttackProtectionLevel_var0" export-name="oval:com.mcafee.oval.windows:var:288" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:124" />
        </check>
      </Rule>
      <Rule id="MSS_NoDefaultExempt" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: No default exempt</title>
        <description xml:lang="en">This security setting determines the IPSec exemptions for various types of network traffic.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IPSecExemptions_var" export-name="oval:com.mcafee.oval:var:59111" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56813" />
        </check>
      </Rule>
      <Rule id="MSS_HideComputerFromTheBrowseList" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Hide computer from the browse list</title>
        <description xml:lang="en">This security setting determines whether the system is shown in the computer browse list.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="HideComputerFromTheBrowseList_var" export-name="oval:com.mcafee.oval.windows:var:60581" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6058" />
        </check>
      </Rule>
      <Rule id="MSS_SafeDLLSearchMode" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Safe DLL search mode</title>
        <description xml:lang="en">The Safe DLL search registry setting is used to enable or disable safe searching that helps avoid path-related attacks.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableSafeDLLSearchMode_var" export-name="oval:com.mcafee.oval.windows:var:60641" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6064" />
        </check>
      </Rule>
      <Rule id="MSS_EnableAdministrativeShares-Servers" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Enable administrative shares - Servers</title>
        <description xml:lang="en">This check determines whether administrative shares are enabled for Servers.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ServerAdministrativeShares_var" export-name="oval:com.mcafee.oval:var:72010" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65862" />
        </check>
      </Rule>
      <Rule id="MSS_AFD-DynamicBacklogGrowthDelta" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: AFD - Dynamic Backlog Growth Delta</title>
        <description xml:lang="en">This security setting determines the number of connections to create when additional connections are necessary for Winsock applications.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NumberOfConnections_10Recommended__var0" export-name="oval:com.mcafee.oval.windows:var:54592" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54406" />
        </check>
      </Rule>
      <Rule id="MSS_AFD-EnableDynamicBacklog" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: AFD - Enable Dynamic Backlog</title>
        <description xml:lang="en">This security setting determines whether to enable the Dynamic Backlog for Winsock applications.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableDynamicBacklog_var0" export-name="oval:com.mcafee.oval.windows:var:54593" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54407" />
        </check>
      </Rule>
      <Rule id="MSS_AFD-MaximumDynamicBacklog" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: AFD - Maximum Dynamic Backlog</title>
        <description xml:lang="en">This security setting determines the maximum number of quasi-free connections for Winsock applications.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MaxNumberOfQuasifreeConnections_var0" export-name="oval:com.mcafee.oval.windows:var:54594" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54408" />
        </check>
      </Rule>
      <Rule id="MSS_AFD-MinimumDynamicBacklog" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: AFD - Minimum Dynamic Backlog</title>
        <description xml:lang="en">This security setting determines the minimum number of free connections for Winsock applications (20 recommended for systems under attack, 10 otherwise).</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MinimumNumberOfFreeConnections_var0" export-name="oval:com.mcafee.oval.windows:var:54595" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54409" />
        </check>
      </Rule>
      <Rule id="MSS_TCPMaxConnectResponseRetransmissions" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: TCP max connect response retransmissions</title>
        <description xml:lang="en">This security setting determines the maximum number of response retransmissions.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MaximumNumberOfResponseRetransmissions_var" export-name="oval:com.mcafee.oval.windows:var:60671" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6067" />
        </check>
      </Rule>
      <Rule id="MSS_TCPMaxDataRetransmissions" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: TCP max data retransmissions</title>
        <description xml:lang="en">This security setting determines how many times unacknowledged data is retransmitted.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="HowManyTimesUnacknowledgedDataIsRetransmitted_var" export-name="oval:com.mcafee.oval.windows:var:103" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:126" />
        </check>
      </Rule>
      <Rule id="MSS_Disable8.3NameCreation" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Disable 8.3 name creation</title>
        <description xml:lang="en">This security setting determines whether 8.3 style filenames are allowed to be created.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableTheComputerToStopGenerating8.3StyleFilenames_var" export-name="oval:com.mcafee.oval.windows:var:711" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:119" />
        </check>
      </Rule>
      <Rule id="MSS_WarningLevel" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Warning level</title>
        <description xml:lang="en">This security setting determines the percentage of the threshold at which the Security Log will start generating warnings.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ThresholdPercentage_var" export-name="oval:com.mcafee.oval.windows:var:91" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:127" />
        </check>
      </Rule>
      <Rule id="MSS_ScreenSaverGracePeriod" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Screen saver grace period</title>
        <description xml:lang="en">This security setting determines how long (in seconds) Windows is configured to have password protection take effect after the screen saver becomes active.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ScreenSaverGracePeriod_inSeconds__var" export-name="oval:com.mcafee.oval.windows:var:60651" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6065" />
        </check>
      </Rule>
      <Rule id="MSS_DisableIPSourceRoutingIPv6" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: Disable IP source routing IPv6</title>
        <description xml:lang="en">This security setting determines the IPv6 source routing protection level.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IPv6SourceRoutingProtectionLevel_var" export-name="oval:com.mcafee.oval:var:79473" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101090" />
        </check>
      </Rule>
      <Rule id="MSS_TCPMaxDataRetransmissionsIPv6" xml:lang="en" selected="false">
        <title xml:lang="en">MSS: TCP max data retransmissions IPv6</title>
        <description xml:lang="en">This security setting determines how many times unacknowledged IPv6 data is retransmitted.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="HowManyTimesUnacknowledgedIPv6DataIsRetransmitted_var" export-name="oval:com.mcafee.oval:var:79474" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101091" />
        </check>
      </Rule>
      <Rule id="NetworkAccessRestrictClientsAllowedToMakeRemoteCallsToSAM" xml:lang="en" selected="false">
        <title xml:lang="en">Set Network access: Restrict clients allowed to make remote calls to SAM</title>
        <description xml:lang="en">To ensure that an unauthorized user cannot anonymously list local account names or groups and use the information to attempt to guess passwords or perform social
          engineering attacks.</description>
        <rationale>To ensure that an unauthorized user cannot anonymously list local account names or
          groups and use the information to attempt to guess passwords or perform social
          engineering attacks</rationale>
        <fixtext fixref="F-NetworkAccessRestrictClientsAllowedToMakeRemoteCallsToSAM_fix">To establish the recommended configuration via GP, set the following UI path to
          Administrators: Remote Access: Allow:
          Computer Configuration\Policies\Windows Settings\Security Settings\Local
          Policies\Security Options\Network access: Restrict clients allowed to make
          remote calls to SAM</fixtext>
        <fix id="F-NetworkAccessRestrictClientsAllowedToMakeRemoteCallsToSAM_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RestrictclientsallowedtomakeremotecallsSAM_var" export-name="oval:com.mcafee.oval:var:2899194" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899190" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Do not allow anonymous enumeration of SAM accounts</title>
        <description xml:lang="en">This security setting determines what additional permissions will be granted for anonymous connections to the computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowAnonymousEnumerationOfSAMAccounts_var" export-name="oval:com.mcafee.oval.windows:var:60701" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6070" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Do not allow anonymous enumeration of SAM accounts and shares</title>
        <description xml:lang="en">This security setting determines whether anonymous enumeration of SAM accounts and shares is allowed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares_var" export-name="oval:com.mcafee.oval.windows:var:60711" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6071" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Do not allow storage of credentials or .NET Passports for network authentication</title>
        <description xml:lang="en">This security setting determines whether Stored User Names and Passwords saves passwords, credentials, or .NET Passports for later use when it gains domain authentication.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowStorageOfCredentialsOr.NETPassportsForNetworkAuthentication_var" export-name="oval:com.mcafee.oval.windows:var:60721" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6072" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Let Everyone permissions apply to anonymous users</title>
        <description xml:lang="en">This security setting determines what additional permissions are granted for anonymous connections to the computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LetEveryonePermissionsApplyToAnonymousUsers_var" export-name="oval:com.mcafee.oval.windows:var:60731" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6073" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_NamedPipesThatCanBeAccessedAnonymously" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Named pipes that can be accessed anonymously</title>
        <description xml:lang="en">This security setting determines which communication sessions (pipes) will have attributes and permissions that allow anonymous access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PipeDelimitedListOfPipes_exPipe1pipe2pipe3__var" export-name="oval:com.mcafee.oval:var:66079" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65841" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_RemotelyAccessibleRegistryPaths" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Remotely accessible registry paths</title>
        <description xml:lang="en">This security setting determines which registry paths can be accessed over the network, regardless of the users or groups listed in the access control list (ACL) of the winreg registry key.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PipeDelimitedListOfRegistryPaths_exPath1path2path3__var" export-name="oval:com.mcafee.oval:var:66075" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65839" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_SharesThatCanBeAccessedAnonymously" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Shares that can be accessed anonymously</title>
        <description xml:lang="en">This security setting determines which network shares can accessed by anonymous users.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PipeDelimitedListOfShares_exShare1share2share3__var" export-name="oval:com.mcafee.oval:var:66081" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65842" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_SharingAndSecurityModelForLocalAccounts" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Sharing and security model for local accounts</title>
        <description xml:lang="en">This security setting determines how network logons using local accounts are authenticated.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SharingAndSecurityModelForLocalAccounts_var" export-name="oval:com.mcafee.oval.windows:var:6079" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6079" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Remotely accessible registry paths and subpaths</title>
        <description xml:lang="en">This security setting determines which registry paths and subpaths can be accessed over the network, regardless of the users or groups listed in the access control list (ACL) of the winreg registry key.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PipeDelimitedListOfRegistryPathsAndSubpaths_exPath1path2path3__var" export-name="oval:com.mcafee.oval:var:66077" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65840" />
        </check>
      </Rule>
      <Rule id="NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares" xml:lang="en" selected="false">
        <title xml:lang="en">Network access: Restrict anonymous access to Named Pipes and Shares</title>
        <description xml:lang="en">When enabled, this security setting restricts anonymous access to shares and pipes to the settings for:
          
          "Network access: Named pipes that can be accessed anonymously"
          "Network access: Shares that can be accessed anonymously"</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RestrictAnonymousAccessToNamedPipesAndShares_var" export-name="oval:com.mcafee.oval.windows:var:6077" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6077" />
        </check>
      </Rule>
      <Rule id="NetworkSecurity_LANManagerAuthenticationLevelSetting" xml:lang="en" selected="false">
        <title xml:lang="en">Network security: LAN Manager authentication level setting</title>
        <description xml:lang="en">This security setting determines which challenge/response authentication protocol is used for network logons.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AuthenticationLevel_var" export-name="oval:com.mcafee.oval:var:54616" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56208" />
        </check>
      </Rule>
      <Rule id="NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange" xml:lang="en" selected="false">
        <title xml:lang="en">Network security: Do not store LAN Manager hash value on next password change</title>
        <description xml:lang="en">This security setting determines if, at the next password change, the LAN Manager (LM) hash value for the new password is stored.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotStoreLANManagerHashValue_var" export-name="oval:com.mcafee.oval:var:59113" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56816" />
        </check>
      </Rule>
      <Rule id="NetworkSecurity_ForceLogoffWhenLogonHoursExpire" xml:lang="en" selected="false">
        <title xml:lang="en">Network security: Force logoff when logon hours expire</title>
        <description xml:lang="en">This security setting determines whether to disconnect users who are connected to the local computer outside their user account's valid logon hours.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ForceLogoffWhenLogonHoursExpire_var" export-name="oval:com.mcafee.oval.windows:var:6081" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6081" />
        </check>
      </Rule>
      <Rule id="NetworkSecurity_LDAPClientSigningRequirements" xml:lang="en" selected="false">
        <title xml:lang="en">Network security: LDAP client signing requirements</title>
        <description xml:lang="en">This security setting determines the level of data signing that is requested on behalf of clients issuing LDAP BIND requests.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LDAPClientSigningRequirements_var" export-name="oval:com.mcafee.oval.windows:var:609511" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6095" />
        </check>
      </Rule>
      <Rule id="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Clients" xml:lang="en" selected="false">
        <title xml:lang="en">Network security: Minimum session security for NTLM SSP based (including secure RPC) clients</title>
        <description xml:lang="en">This security setting allows a client to require the negotiation of message confidentiality (encryption), message integrity, 128-bit encryption, or NTLMv2 session security.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MinimumSessionSecurityClients_var" export-name="oval:com.mcafee.oval.windows:var:284" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:99" />
        </check>
      </Rule>
      <Rule id="NetworkSecurity_MinimumSessionSecurityForNTLMSSPBased_IncludingSecureRPC_Servers" xml:lang="en" selected="false">
        <title xml:lang="en">Network security: Minimum session security for NTLM SSP based (including secure RPC) servers</title>
        <description xml:lang="en">This security setting allows a server to require the negotiation of message confidentiality (encryption), message integrity, 128-bit encryption, or NTLMv2 session security.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MinimumSessionSecurityForServers_var" export-name="oval:com.mcafee.oval.windows:var:285" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:100" />
        </check>
      </Rule>
      <Rule id="NetworkSecurity_AllowLocalSystemNULLSessionFallback" xml:lang="en" selected="false">
        <title xml:lang="en">Network security: Allow LocalSystem NULL session fallback</title>
        <description xml:lang="en">This policy setting allows NTLM to fall back to NULL session when used with LocalSystem.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowLocalSystemNULLSessionFallback_var" export-name="oval:com.mcafee.oval:var:72020" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65873" />
        </check>
      </Rule>
      <Rule id="NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM" xml:lang="en" selected="false">
        <title xml:lang="en">Network security: Allow Local System to use computer identity for NTLM</title>
        <description xml:lang="en">This policy setting allows Local System services that use Negotiate to use the computer identity when reverting to NTLM authentication.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowLocalSystemToUseComputerIdentityForNTLM_var" export-name="oval:com.mcafee.oval:var:72019" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65872" />
        </check>
      </Rule>
      <Rule id="NetworkSecurity_AllowPKU2UAuthenticationRequestsToThisComputerToUseOnlineIdentities" xml:lang="en" selected="false">
        <title xml:lang="en">Network security: Allow PKU2U authentication requests to this computer to use online identities</title>
        <description xml:lang="en">This policy setting allows PKU2U authentication requests to this computer to use online identities.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowPKU2UAuthenticationRequests_var" export-name="oval:com.mcafee.oval:var:72021" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71672" />
        </check>
      </Rule>
      <Rule id="RecoveryConsole_AllowAutomaticAdministrativeLogon" xml:lang="en" selected="false">
        <title xml:lang="en">Recovery console: Allow automatic administrative logon</title>
        <description xml:lang="en">This security setting determines if the password for the Administrator account must be given before access to the system is granted.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowAutomaticAdministrativeLogon_var" export-name="oval:com.mcafee.oval.windows:var:609811" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6098" />
        </check>
      </Rule>
      <Rule id="RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFolders" xml:lang="en" selected="false">
        <title xml:lang="en">Recovery console: Allow floppy copy and access to all drives and all folders</title>
        <description xml:lang="en">Enabling this security option makes the Recovery Console SET command available, which allows you to set the following Recovery Console environment variables:
          
          AllowWildCards: Enable wildcard support for some commands (such as the DEL command).
          AllowAllPaths: Allow access to all files and folders on the computer.
          AllowRemovableMedia: Allow files to be copied to removable media, such as a floppy disk.
          NoCopyPrompt: Do not prompt when overwriting an existing file.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RecoveryConsoleFullAccess_var" export-name="oval:com.mcafee.oval.windows:var:5013" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:102" />
        </check>
      </Rule>
      <Rule id="Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnSetting" xml:lang="en" selected="false">
        <title xml:lang="en">Shutdown: Allow system to be shut down without having to log on setting</title>
        <description xml:lang="en">This security setting determines whether a computer can be shut down without having to log on to Windows.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ShutDownWithoutLogon_var" export-name="oval:com.mcafee.oval.windows:var:10311" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:103" />
        </check>
      </Rule>
      <Rule id="Shutdown_ClearVirtualMemoryPagefileSetting" xml:lang="en" selected="false">
        <title xml:lang="en">Shutdown: Clear virtual memory pagefile setting</title>
        <description xml:lang="en">Make sure this setting is configured appropriately for your company's security policy.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ClearPagefileAtShutdown_var0" export-name="oval:com.mcafee.oval.windows:var:54602" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:104" />
        </check>
      </Rule>
      <Rule id="SystemCryptography_UseFIPSCompliantAlgorithmsForEncryption_HashingAndSigning" xml:lang="en" selected="false">
        <title xml:lang="en">System Cryptography: Use FIPS compliant algorithms for encryption, hashing and signing</title>
        <description xml:lang="en">This security setting determines if the Transport Layer Security/Secure Sockets Layer (TL/SS) Security Provider supports only the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher suite.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="UseFIPSCompliantAlgorithms_var" export-name="oval:com.mcafee.oval.windows:var:610211" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6102" />
        </check>
      </Rule>
      <Rule id="SystemCryptography_ForceStrongKeyProtectionForUserKeysStoredOnTheComputer" xml:lang="en" selected="false">
        <title xml:lang="en">System Cryptography: Force strong key protection for user keys stored on the computer</title>
        <description xml:lang="en">This security setting determines if users' private keys require a password to be used.
          
          The options are:
          
          0 - User input is not required when new keys are stored and used
          1 - User is prompted when the key is first used
          2 - User must enter a password each time they use a key</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ForceKeyProtection_var" export-name="oval:com.mcafee.oval.windows:var:5014" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:73" />
        </check>
      </Rule>
      <Rule id="SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects_E.g._SymbolicLinks_" xml:lang="en" selected="false">
        <title xml:lang="en">System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)</title>
        <description xml:lang="en">This security setting determines the strength of the default discretionary access control list (DACL) for objects.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="StrengthenDefaultPermissions_var" export-name="oval:com.mcafee.oval.windows:var:610511" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6105" />
        </check>
      </Rule>
      <Rule id="SystemObjects_DefaultOwnerForObjectsCreatedByMembersOfTheAdministratorsGroup" xml:lang="en" selected="false">
        <title xml:lang="en">System objects: Default owner for objects created by members of the Administrators group</title>
        <description xml:lang="en">This security setting determines which users and groups have the authority to run volume maintenance tasks, such as Disk Cleanup and Disk Defragmenter.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DefaultOwnerForObjects_var" export-name="oval:com.mcafee.oval:var:59112" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56815" />
        </check>
      </Rule>
      <Rule id="SystemObjects_RequireCaseInsensitivityForNon-WindowsSubsystems" xml:lang="en" selected="false">
        <title xml:lang="en">System objects: Require case insensitivity for non-Windows subsystems</title>
        <description xml:lang="en">This security setting determines whether case insensitivity is enforced for all subsystems.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequireCaseInsensitivity_var" export-name="oval:com.mcafee.oval.windows:var:610411" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6104" />
        </check>
      </Rule>
      <Rule id="SystemSettings_OptionalSubsystems" xml:lang="en" selected="false">
        <title xml:lang="en">System settings: Optional subsystems</title>
        <description xml:lang="en">This security setting determines which subsystems are used to support your applications.
          
          With this security setting, you can specify as many subsytems to support as your environment demands.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:5016" />
        </check>
      </Rule>
      <Rule id="SystemSettings_UseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies" xml:lang="en" selected="false">
        <title xml:lang="en">System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies</title>
        <description xml:lang="en">This security setting determines if digital certificates are processed when a user or process attempts to run software with an .exe file name extension.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="UseCertificateRules_var" export-name="oval:com.mcafee.oval.windows:var:5017" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:5017" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_AdminApprovalModeForTheBuilt-inAdministratorAccount" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Admin Approval Mode for the Built-in Administrator account</title>
        <description xml:lang="en">This security setting determines the behavior of Admin Approval mode for the Built-in Administrator account.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AdminApprovalMode_var" export-name="oval:com.mcafee.oval.vista:var:8081" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8081" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode</title>
        <description xml:lang="en">This security setting determines the behavior of the elevation prompt for administrators.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="BehaviorOfTheElevationPromptForAdministrators_var" export-name="oval:com.mcafee.oval.vista:var:8082" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8082" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Behavior of the elevation prompt for standard users</title>
        <description xml:lang="en">This security setting determines the behavior of the elevation prompt for standard users.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="BehaviorOfTheElevationPromptForStandardUsers_var" export-name="oval:com.mcafee.oval.vista:var:8083" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8083" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_DetectApplicationInstallationsAndPromptForElevation" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Detect application installations and prompt for elevation</title>
        <description xml:lang="en">This security setting determines the behavior of application installation detection for the entire system.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DetectApplicationInstallationsAndPromptForElevation_var" export-name="oval:com.mcafee.oval.vista:var:8084" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8084" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Only elevate UIAccess applications that are installed in secure locations</title>
        <description xml:lang="en">This security setting will enforce the requirement that applications that request execution with a UIAccess integrity level (via a marking of UIAccess=true in their application manifest) must reside in a secure location on the file system.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations_var" export-name="oval:com.mcafee.oval.vista:var:8086" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8086" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_RunAllAdministratorsInAdminApprovalMode" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Run all administrators in Admin Approval Mode</title>
        <description xml:lang="en">This security setting determines the behavior of all UAC policies for the entire system.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RunAllAdministratorsInAdminApprovalMode_var" export-name="oval:com.mcafee.oval.vista:var:8087" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8087" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Switch to the secure desktop when prompting for elevation</title>
        <description xml:lang="en">This security setting determines whether the elevation request will prompt on the interactive users desktop or the Secure Desktop.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SwitchToTheSecureDesktopWhenPromptingForElevation_var" export-name="oval:com.mcafee.oval.vista:var:8088" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8088" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPer-userLocations" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Virtualize file and registry write failures to per-user locations</title>
        <description xml:lang="en">This security setting enables the redirection of legacy application write failures to defined locations in both the registry and file system.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="VirtualizeFileAndRegistryWriteFailuresToPer-userLocations_var" export-name="oval:com.mcafee.oval.vista:var:8089" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8089" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_AllowUIAccessApplicationsToPromptForElevationWithoutUsingTheSecureDesktop" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop</title>
        <description xml:lang="en">This security setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts being used by a standard user.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowUIAccessApplicationsToPromptForElevationWoSecureDesktop_var" export-name="oval:com.mcafee.oval:var:79404" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:79003" />
        </check>
      </Rule>
      <Rule id="UserAccountControl_OnlyElevateExecutablesThatAreSignedAndValidated" xml:lang="en" selected="false">
        <title xml:lang="en">User Account Control: Only elevate executables that are signed and validated</title>
        <description xml:lang="en">This security setting will enforce PKI signature checks on any interactive application that requests elevation of privilege.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OnlyElevateExecutablesThatAreSignedAndValidated_var" export-name="oval:com.mcafee.oval.vista:var:8085" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:8085" />
        </check>
      </Rule>
    </Group>
  </Group>
  <Group id="AdministrativeTemplates" xml:lang="en">
    <title xml:lang="en">Administrative Templates</title>
    <Group id="EdgeUI" xml:lang="en">
      <title xml:lang="en">Edge UI</title>
      <Value id="DisableHelpTips_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DisableHelpTips_var-selector-0">Not Configured</value>
        <value selector="DisableHelpTips_var-selector-1">Not Configured</value>
        <value selector="DisableHelpTips_var-selector-2">Not Configured</value>
      </Value>
      <Rule id="WindowsComponents-EdgeUIDisableHelpTips" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Edge UI: Disable help tips</title>
        <description xml:lang="en">This policy setting disables help tips that Windows shows to the user.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisableHelpTips_var" export-name="oval:com.mcafee.oval:var:244572" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215851" />
        </check>
      </Rule>
    </Group>
    <Group id="EMET" xml:lang="en">
      <title xml:lang="en">EMET</title>
      <Value id="DefaultActionAndMitigationSettingsExploitAction_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="DefaultActionAndMitigationSettingsDeepHooks_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DefaultActionAndMitigationSettingsAntiDetours_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DefaultActionAndMitigationSettingsBannedFunctions_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DefaultProtectionsforInternetExplorer_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DefaultProtectionsforPopularSoftware_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DefaultProtectionsforPopularRecommended_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SystemASLR_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">3</value>
      </Value>
      <Value id="SystemDEP_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="SystemSEHOP_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Rule id="EMET_DefaultActionandMitigationSettings" xml:lang="en" selected="false">
        <title xml:lang="en">EMET: Default Action and Mitigation Settings</title>
        <description xml:lang="en">This setting configures the default action after detection and advanced ROP mitigation. The recommended state for this setting is:
          Default Action and Mitigation Settings - Enabled, Deep Hooks - Enabled, Anti Detours - Enabled, Banned Functions - Enabled, Exploit Action - User Configured.
        </description>
        <rationale>
          These advanced mitigations for ROP mitigations apply to all configured software in EMET.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35473-8</ident>
        <fixtext fixref="F-EMET_DefaultActionandMitigationSettings_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\EMET\Default Action and Mitigation Settings
        </fixtext>
        <fix id="F-EMET_DefaultActionandMitigationSettings_fix"/>
        <complex-check operator="AND">
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="DefaultActionAndMitigationSettingsAntiDetours_var" export-name="oval:com.mcafee.oval:var:2486739" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2486736" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="DefaultActionAndMitigationSettingsBannedFunctions_var" export-name="oval:com.mcafee.oval:var:2486754" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2486753" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="DefaultActionAndMitigationSettingsDeepHooks_var" export-name="oval:com.mcafee.oval:var:2486752" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2486744" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="DefaultActionAndMitigationSettingsExploitAction_var" export-name="oval:com.mcafee.oval:var:2486763" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2486761" />
          </check>
        </complex-check>
      </Rule>
      <Rule id="EMET_SetDefaultProtectionsforInternetExplorer" xml:lang="en" selected="false">
        <title xml:lang="en">EMET: Set Default Protections for Internet Explorer</title>
        <description xml:lang="en">This settings determine if EMET mitigations are applied to Internet Explorer.</description>
        <rationale>
          Applying EMET mitigations to Internet Explorer will help reduce the reliability of exploits that target it.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35474-6</ident>
        <fixtext fixref="F-EMET_SetDefaultProtectionsforInternetExplorer_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. Computer Configuration\Administrative Templates\Windows Components\EMET\Default Protections for Internet Explorer
        </fixtext>
        <fix id="F-EMET_SetDefaultProtectionsforInternetExplorer_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DefaultProtectionsforInternetExplorer_var" export-name="oval:com.mcafee.oval:var:1126594" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1126570" />
        </check>
      </Rule>
      <Rule id="EMET_SetDefaultProtectionsforPopularSoftware" xml:lang="en" selected="false">
        <title xml:lang="en">EMET: Set Default Protections for Popular Software</title>
        <description xml:lang="en">This settings determine if EMET mitigations are applied to other popular software.</description>
        <rationale>
          Applying EMET mitigations to popular software packages will help reduce the reliability of exploits that target them.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35476-1</ident>
        <fixtext fixref="F-EMET_SetDefaultProtectionsforPopularSoftware_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. Computer Configuration\Administrative Templates\Windows Components\EMET\Default Protections for Popular Explorer
        </fixtext>
        <fix id="F-EMET_SetDefaultProtectionsforPopularSoftware_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DefaultProtectionsforPopularSoftware_var" export-name="oval:com.mcafee.oval:var:1154356" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1153524" />
        </check>
      </Rule>
      <Rule id="EMET_SetDefaultProtectionsforRecommendedSoftware" xml:lang="en" selected="false">
        <title xml:lang="en">EMET: Set Default Protections for Recommended Software</title>
        <description xml:lang="en">This settings determine if recommended EMET mitigations are applied to WordPad, applications that are part of the Microsoft Office suite, Adobe Acrobat, Adobe Reader, and Oracle Java.</description>
        <rationale>
          Applying EMET mitigations to Internet Explorer will help reduce the reliability of exploits that target it.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35479-5</ident>
        <fixtext fixref="F-EMET_SetDefaultProtectionsforRecommendedSoftware_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. Computer Configuration\Administrative Templates\Windows Components\EMET\Default Protections for Recommended Software
        </fixtext>
        <fix id="F-EMET_SetDefaultProtectionsforRecommendedSoftware_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DefaultProtectionsforPopularRecommended_var" export-name="oval:com.mcafee.oval:var:1154364" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1154363" />
        </check>
      </Rule>
      <Rule id="EMET_SetSystemASLR" xml:lang="en" selected="false">
        <title xml:lang="en">EMET: Set System ASLR</title>
        <description xml:lang="en">This setting determines how applications become enrolled in address space layout randomization (ASLR).</description>
        <rationale>
          ASLR reduces the predictability of process memory, which in-turn helps reduce the reliability of exploits targeting memory corruption vulnerabilities.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35483-7</ident>
        <fixtext fixref="F-EMET_SetSystemASLR_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled:Application Opt-In. Computer Configuration\Administrative Templates\Windows Components\EMET\System ASLR
        </fixtext>
        <fix id="F-EMET_SetSystemASLR_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SystemASLR_var" export-name="oval:com.mcafee.oval:var:1157593" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1154381" />
        </check>
      </Rule>
      <Rule id="EMET_SetSystemDEP" xml:lang="en" selected="false">
        <title xml:lang="en">EMET: Set System DEP</title>
        <description xml:lang="en">This setting determines how applications become enrolled in data execution protection (DEP).</description>
        <rationale>
          DEP marks pages of application memory as non-executable, which reduces a given exploit's ability to run attacker-controlled code.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35484-5</ident>
        <fixtext fixref="F-EMET_SetSystemDEP_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled:Application Opt-Out. Computer Configuration\Administrative Templates\Windows Components\EMET\System DEP
        </fixtext>
        <fix id="F-EMET_SetSystemDEP_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SystemDEP_var" export-name="oval:com.mcafee.oval:var:1158456" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1158106" />
        </check>
      </Rule>
      <Rule id="EMET_SetSystemSEHOP" xml:lang="en" selected="false">
        <title xml:lang="en">EMET: Set System SEHOP</title>
        <description xml:lang="en">This setting determines how applications become enrolled in structured exception handler overwrite protection (SEHOP).</description>
        <rationale>
          When a software component suffers from a memory corruption vulnerability, an exploit may be able to overwrite memory that contains data structures that control how the software handles exceptions. By corrupting these structures in a controlled manner, an exploit may be able to execute arbitrary code. SEHOP verifies the integrity of those structures before they are use to handle exceptions, which reduces the reliability of exploits that leverage structured exception handler overwrites.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35485-2</ident>
        <fixtext fixref="F-EMET_SetSystemSEHOP_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled:Application Opt-Out. Computer Configuration\Administrative Templates\Windows Components\EMET\System SEHOP
        </fixtext>
        <fix id="F-EMET_SetSystemSEHOP_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SystemSEHOP_var" export-name="oval:com.mcafee.oval:var:1158939" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1158724" />
        </check>
      </Rule>
    </Group>
    <Group id="AppRuntime" xml:lang="en">
      <title xml:lang="en">App Runtime</title>
      <Value id="AllowMicrosoftAccountsToBeOptional_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="AllowMicrosoftAccountsToBeOptional_var-selector-0">Enabled</value>
        <value selector="AllowMicrosoftAccountsToBeOptional_var-selector-1">Enabled</value>
        <value selector="AllowMicrosoftAccountsToBeOptional_var-selector-2">Enabled</value>
      </Value>
      <Value id="BlocklaunchingWindowsStoreappswithWindowsRuntimeAPIaccessfromhostedcontent_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="AppRuntime_SetBlocklaunchingWindowsStoreappswithWindowsRuntimeAPIaccessfromhostedcontent" xml:lang="en" selected="false">
        <title xml:lang="en">App runtime: Set Block launching Windows Store apps with Windows Runtime API access from hosted content</title>
        <description xml:lang="en">This policy setting controls whether Windows Store apps with Windows Runtime API access directly from web content can be launched.</description>
        <rationale>Blocking Apps from the web with direct access to the Windows API can prevent malicious apps from being run on a system. Only system administrators should be installing approved applications.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41399-7</ident>
        <fixtext fixref="F-AppRuntime_SetBlocklaunchingWindowsStoreappswithWindowsRuntimeAPIaccessfromhostedcontent_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App runtime\Block launching Windows Store apps with Windows Runtime API access from hosted content.
        </fixtext>
        <fix id="F-AppRuntime_SetBlocklaunchingWindowsStoreappswithWindowsRuntimeAPIaccessfromhostedcontent_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="BlocklaunchingWindowsStoreappswithWindowsRuntimeAPIaccessfromhostedcontent_var" export-name="oval:com.mcafee.oval:var:1415870" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415869" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-AppRuntimeAllowMicrosoftAccountsToBeOptional" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - App runtime: Allow Microsoft accounts to be optional</title>
        <description xml:lang="en">This policy setting lets you control whether Microsoft accounts are optional for Windows Store apps that require an account to sign in.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowMicrosoftAccountsToBeOptional_var" export-name="oval:com.mcafee.oval:var:244571" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215850" />
        </check>
      </Rule>
    </Group>
    <Group id="AppPackageDeployment" xml:lang="en">
      <title xml:lang="en">App Package Deployment</title>
      <Value id="AllowDevelopmentOfWindowsStoreApps_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="AllowDevelopmentOfWindowsStoreApps_var-selector-0">Not Configured</value>
        <value selector="AllowDevelopmentOfWindowsStoreApps_var-selector-1">Not Configured</value>
        <value selector="AllowDevelopmentOfWindowsStoreApps_var-selector-2">Not Configured</value>
      </Value>
      <Value id="AllowaWindowsapptoshareapplicationdatabetweenusers_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="AppPackageDeployment_SetAllowaWindowsapptoshareapplicationdatabetweenusers" xml:lang="en" selected="false">
        <title xml:lang="en">App Package Deployment: Set Allow a Windows app to share application data between users</title>
        <description xml:lang="en">This policy setting Manages a Windows app's ability to share data between users who have installed the app.</description>
        <rationale>
          Users of a system could accidentally share sensitive data with other users on the same system.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41397-1</ident>
        <fixtext fixref="F-AppPackageDeployment_SetAllowaWindowsapptoshareapplicationdatabetweenusers_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Package Deployment\Allow a Windows app to share application data between users
        </fixtext>
        <fix id="F-AppPackageDeployment_SetAllowaWindowsapptoshareapplicationdatabetweenusers_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowaWindowsapptoshareapplicationdatabetweenusers_var" export-name="oval:com.mcafee.oval:var:1415862" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415861" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-AppPackageDeploymentAllowDevelopmentOfWindowsStoreAppsWithoutInstallingADeveloperLicense" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - App Package Deployment: Allow development of Windows Store apps without installing a developer license</title>
        <description xml:lang="en">This policy setting allows or denies development of Windows Store applications without installing a developer license.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowDevelopmentOfWindowsStoreApps_var" export-name="oval:com.mcafee.oval:var:244570" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215849" />
        </check>
      </Rule>
    </Group>
    <Group id="AppPrivacy" xml:lang="en">
      <title xml:lang="en">App Privacy</title>
      <Value id="LetWindowsappsaccessaccountinformation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccessthecalendar_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccesscallhistory_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccessthecamera_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccesscontacts_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccessemail_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccesslocation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccessmessaging_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccessthemicrophone_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccessmotion_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappscontrolradios_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappsaccesstrusteddevices_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="LetWindowsappssyncwithdevices_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Rule id="AppPrivacy_LetWindowsapps" xml:lang="en" selected="false">
        <title xml:lang="en">App Privacy: Let Windows apps *</title>
        <description xml:lang="en">These policy settings specify whether Windows apps can access personal data, resources or other applications. 
          The following 13 settings are in scope: 
          Let Windows apps access account information 
          Let Windows apps access call history 
          Let Windows apps access contacts 
          Let Windows apps access email 
          Let Windows apps access location 
          Let Windows apps access messaging 
          Let Windows apps access motion 
          Let Windows apps access the calendar 
          Let Windows apps access the camera 
          Let Windows apps access the microphone 
          LetWindows apps access trusted devices 
          Let Windows apps control radios 
          Let Windows apps sync with devices
          The recommended state for these settings is: Enabled: Force Deny
        </description>
        <rationale>
          In an enterprise environment where you want to maintain user privacy, windows apps should not need or require access to personal data, resources or other applications.
        </rationale>
        <fixtext fixref="F-AppPrivacy_LetWindowsapps_fix">
          To establish the recommended configuration via GP, set the following UI paths to Enabled: Force Deny: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access account information 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access call history 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access contacts 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access email 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access location 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access messaging 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access motion 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access the calendar 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access the camera 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access the microphone 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps access trusted devices 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps control radios 
          Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy\Let Windows apps sync with devices
        </fixtext>
        <fix id="F-AppPrivacy_LetWindowsapps_fix"/>
        <complex-check operator="AND">
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccessaccountinformation_var" export-name="oval:com.mcafee.oval:var:2894643" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894642" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccessthecalendar_var" export-name="oval:com.mcafee.oval:var:2894651" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894650" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccesscallhistory_var" export-name="oval:com.mcafee.oval:var:2894659" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894658" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccessthecamera_var" export-name="oval:com.mcafee.oval:var:2894668" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894666" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccesscontacts_var" export-name="oval:com.mcafee.oval:var:2894675" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894674" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccessemail_var" export-name="oval:com.mcafee.oval:var:2894683" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894682" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccesslocation_var" export-name="oval:com.mcafee.oval:var:2894691" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894690" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccessmessaging_var" export-name="oval:com.mcafee.oval:var:2894699" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894698" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccessthemicrophone_var" export-name="oval:com.mcafee.oval:var:2894707" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894706" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccessmotion_var" export-name="oval:com.mcafee.oval:var:2894715" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894714" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappscontrolradios_var" export-name="oval:com.mcafee.oval:var:2894723" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894722" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappsaccesstrusteddevices_var" export-name="oval:com.mcafee.oval:var:2894731" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894730" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="LetWindowsappssyncwithdevices_var" export-name="oval:com.mcafee.oval:var:2894740" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894738" />
          </check>
        </complex-check>
      </Rule>
      </Group>   
    <Group id="AttachmentManager" xml:lang="en">
      <title xml:lang="en">Attachment Manager</title>
      <Value id="ConfigureZoneInformationInFileAttachments_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="ConfigureNotifyAntivirusPrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">3</value>
      </Value>
      <Rule id="AttachmentManager_SetDoNotPreserveZoneInformationInFileAttachments" xml:lang="en" selected="false">
        <title xml:lang="en">Attachment Manager: Set Do not preserve zone information in file attachments</title>
        <description xml:lang="en">This policy setting allows you to manage whether Windows marks file attachments from Internet Explorer or Microsoft Outlook® Express with information about their zone of origin (such as restricted, Internet, intranet, or local).</description>
        <rationale xml:lang="en">A file that is downloaded from a computer in the Internet or Restricted Sites zone may be moved to a location that makes it appear safe, like an intranet file share, and executed by an unsuspecting user.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34810-2</ident>
        <fixtext fixref="F-AttachmentManager_SetDoNotPreserveZoneInformationInFileAttachments_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled. User Configuration\Administrative Templates\Windows Components\Attachment Manager\Do not preserve zone information in file attachments
        </fixtext>
        <fix id="F-AttachmentManager_SetDoNotPreserveZoneInformationInFileAttachments_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureZoneInformationInFileAttachments_var" export-name="oval:com.mcafee.oval:var:525476" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:525473" />
        </check>
      </Rule>
      <Rule id="AttachmentManager_SetNotifyAntivirusProgramsWhenOpeningAttachments" xml:lang="en" selected="false">
        <title xml:lang="en">Attachment Manager: Set Notify antivirus programs when opening attachments</title>
        <description xml:lang="en">Antivirus programs are mandatory in many environments and provide a strong defense against attack. The Notify antivirus programs when opening attachments setting allows you to manage how registered antivirus programs are notified. When enabled, this policy setting configures Windows to call the registered antivirus program and have it scan file attachments when they are opened by users. If the antivirus scan fails, the attachments are blocked from being opened. If this policy setting is disabled, Windows does not call the registered antivirus program when file attachments are opened. The recommended state for this setting is: Enabled.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale xml:lang="en">Antivirus programs that do not perform on-access checks may not be able to scan downloaded files.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33799-8</ident>
        <fixtext fixref="F-AttachmentManager_SetNotifyAntivirusProgramsWhenOpeningAttachments_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. User Configuration\Administrative Templates\Windows Components\Attachment Manager\Notify antivirus programs when opening attachments
        </fixtext>
        <fix id="F-AttachmentManager_SetNotifyAntivirusProgramsWhenOpeningAttachments_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureNotifyAntivirusPrograms_var" export-name="oval:com.mcafee.oval:var:525490" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:525485" />
        </check>
      </Rule>
    </Group>
    <Group id="EventLogSettings" xml:lang="en">
      <title xml:lang="en">Event log settings</title>
      <Group id="system_log" xml:lang="en">
        <title xml:lang="en">system-log</title>
        <Value id="AutomaticallySendMemoryDumps_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">Not Configured</value>
          <value selector="AutomaticallySendMemoryDumps_var-selector-0">Not Configured</value>
          <value selector="AutomaticallySendMemoryDumps_var-selector-1">Not Configured</value>
          <value selector="AutomaticallySendMemoryDumps_var-selector-2">Not Configured</value>
        </Value>
        <Rule id="WindowsComponents-WindowsErrorReportingAutomaticallySendMemoryDumpsForOS-generatedErrorReports" xml:lang="en" selected="false">
          <title xml:lang="en">Windows Components - Windows Error Reporting: Automatically send memory dumps for OS-generated error reports</title>
          <description xml:lang="en">This policy setting controls whether memory dumps in support of OS-generated error reports can be sent to Microsoft automatically.</description>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="AutomaticallySendMemoryDumps_var" export-name="oval:com.mcafee.oval:var:244603" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:404031" />
          </check>
        </Rule>
      </Group>
    </Group>
    <Group id="InternetExplorer" xml:lang="en">
      <title xml:lang="en">Internet Explorer</title>
      <Value id="AllowMicrosoftServicesToProvideEnhancedSuggestions_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="AllowMicrosoftServicesToProvideEnhancedSuggestions_var-selector-0">Not Configured</value>
        <value selector="AllowMicrosoftServicesToProvideEnhancedSuggestions_var-selector-1">Not Configured</value>
        <value selector="AllowMicrosoftServicesToProvideEnhancedSuggestions_var-selector-2">Not Configured</value>
      </Value>
      <Value id="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var-selector-0">Not Configured</value>
        <value selector="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var-selector-1">Not Configured</value>
        <value selector="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var-selector-2">Not Configured</value>
      </Value>
      <Value id="TurnOffLoadingWebsitesAndContent_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="TurnOffLoadingWebsitesAndContent_var-selector-0">Not Configured</value>
        <value selector="TurnOffLoadingWebsitesAndContent_var-selector-1">Not Configured</value>
        <value selector="TurnOffLoadingWebsitesAndContent_var-selector-2">Not Configured</value>
      </Value>
      <Value id="TurnOffSendingUTF-8QueryStringsForURLs_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="TurnOffSendingUTF-8QueryStringsForURLs_var-selector-0">99999</value>
        <value selector="TurnOffSendingUTF-8QueryStringsForURLs_var-selector-1">99999</value>
        <value selector="TurnOffSendingUTF-8QueryStringsForURLs_var-selector-2">99999</value>
      </Value>
      <Value id="TurnOn64-bitTabProcesses_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="TurnOn64-bitTabProcesses_var-selector-0">Not Configured</value>
        <value selector="TurnOn64-bitTabProcesses_var-selector-1">Not Configured</value>
        <value selector="TurnOn64-bitTabProcesses_var-selector-2">Not Configured</value>
      </Value>
      <Value id="InternetZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="InternetZoneDoNotRunAntimalwarePrograms_var-selector-0">0</value>
        <value selector="InternetZoneDoNotRunAntimalwarePrograms_var-selector-1">0</value>
        <value selector="InternetZoneDoNotRunAntimalwarePrograms_var-selector-2">0</value>
      </Value>
      <Value id="IntranetZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="IntranetZoneDoNotRunAntimalwarePrograms_var-selector-0">0</value>
        <value selector="IntranetZoneDoNotRunAntimalwarePrograms_var-selector-1">0</value>
        <value selector="IntranetZoneDoNotRunAntimalwarePrograms_var-selector-2">0</value>
      </Value>
      <Value id="LocalMachineZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="LocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-0">0</value>
        <value selector="LocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-1">0</value>
        <value selector="LocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-2">0</value>
      </Value>
      <Value id="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var-selector-0">99999</value>
        <value selector="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var-selector-1">99999</value>
        <value selector="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var-selector-2">99999</value>
      </Value>
      <Value id="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var-selector-0">99999</value>
        <value selector="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var-selector-1">99999</value>
        <value selector="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var-selector-2">99999</value>
      </Value>
      <Value id="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-0">99999</value>
        <value selector="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-1">99999</value>
        <value selector="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var-selector-2">99999</value>
      </Value>
      <Value id="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0">99999</value>
        <value selector="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-1">99999</value>
        <value selector="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-2">99999</value>
      </Value>
      <Value id="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0">99999</value>
        <value selector="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-1">99999</value>
        <value selector="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-2">99999</value>
      </Value>
      <Value id="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0">0</value>
        <value selector="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-1">0</value>
        <value selector="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var-selector-2">0</value>
      </Value>
      <Value id="TrustedSitesZoneDoNotRunAntimalwarePrograms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
        <value selector="TrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-0">0</value>
        <value selector="TrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-1">0</value>
        <value selector="TrustedSitesZoneDoNotRunAntimalwarePrograms_var-selector-2">0</value>
      </Value>
      <Value id="TurnOffPhoneNumberDetection_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="TurnOffPhoneNumberDetection_var-selector-0">Not Configured</value>
        <value selector="TurnOffPhoneNumberDetection_var-selector-1">Not Configured</value>
        <value selector="TurnOffPhoneNumberDetection_var-selector-2">Not Configured</value>
      </Value>
      <Rule id="WindowsComponents-InternetExplorerAllowMicrosoftServicesToProvideEnhancedSuggestionsAsTheUserTypesInTheAddressBar" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer: Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar</title>
        <description xml:lang="en">This policy setting allows Internet Explorer to provide enhanced suggestions as the user types in the Address bar.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowMicrosoftServicesToProvideEnhancedSuggestions_var" export-name="oval:com.mcafee.oval:var:244573" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215852" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageAllowInternetExplorerToUseTheSPDY3NetworkProtocol" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Advanced Page: Allow Internet Explorer to use the SPDY/3 network protocol</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer uses the SPDY/3 network protocol. SPDY/3 works with HTTP requests to optimize the latency of network requests through compression, multiplexing and prioritization.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowInternetExplorerToUseTheSPDY3NetworkProtocol_var" export-name="oval:com.mcafee.oval:var:244574" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215853" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOffLoadingWebsitesAndContentInTheBackgroundToOptimizePerformance" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Advanced Page: Turn off loading websites and content in the background to optimize performance</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer preemptively loads websites and content in the background, speeding up performance such that when the user clicks a hyperlink, the background page seamlessly switches into view.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffLoadingWebsitesAndContent_var" export-name="oval:com.mcafee.oval:var:244575" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215854" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOffSendingUTF-8QueryStringsForURLs" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Advanced Page: Turn off sending UTF-8 query strings for URLs</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer uses 8-bit Unicode Transformation Format (UTF-8) to encode query strings in URLs before sending them to servers or to proxy servers.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffSendingUTF-8QueryStringsForURLs_var" export-name="oval:com.mcafee.oval:var:244576" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215855" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-AdvancedPageTurnOn64-bitTabProcessesWhenRunningInEnhancedProtectedModeOn64-bitVersionsOfWindows" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Advanced Page: Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer 11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 64-bit versions of Windows.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOn64-bitTabProcesses_var" export-name="oval:com.mcafee.oval:var:244577" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215856" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-InternetZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Internet Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="InternetZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244578" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215857" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-IntranetZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Intranet Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IntranetZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244579" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215858" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-LocalMachineZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Local Machine Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LocalMachineZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244580" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404008" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownInternetZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Locked-Down Internet Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Locked-DownInternetZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244581" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404009" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownIntranetZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Locked-Down Intranet Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Locked-DownIntranetZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244582" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404010" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownLocalMachineZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Locked-Down Local Machine Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Locked-DownLocalMachineZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244583" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404011" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownRestrictedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Locked-Down Restricted Sites Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Locked-DownRestrictedSitesZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244584" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404012" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-Locked-DownTrustedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Locked-Down Trusted Sites Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Locked-DownTrustedSitesZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244585" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404013" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-RestrictedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Restricted Sites Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RestrictedSitesZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244586" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404014" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetControlPanel-SecurityPage-TrustedSitesZoneDontRunAntimalwareProgramsAgainstActiveXControls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Control Panel - Security Page - Trusted Sites Zone: Don't run antimalware programs against ActiveX controls</title>
        <description xml:lang="en">This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TrustedSitesZoneDoNotRunAntimalwarePrograms_var" export-name="oval:com.mcafee.oval:var:244587" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404015" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-InternetExplorer-InternetSettings-AdvancedSettings-BrowsingTurnOffPhoneNumberDetection" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Explorer - Internet Settings - Advanced settings - Browsing: Turn off phone number detection</title>
        <description xml:lang="en">This policy setting determines whether phone numbers are recognized and turned into hyperlinks, which can be used to invoke the default phone application on the system.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffPhoneNumberDetection_var" export-name="oval:com.mcafee.oval:var:244588" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404016" />
        </check>
      </Rule>
    </Group>
    <Group id="AuditingAndAccountPolicies" xml:lang="en">
      <title xml:lang="en">Auditing and account policies</title>
      <Group id="minorAuditingAndAccountLogon" xml:lang="en">
        <title xml:lang="en">minor auditing and account logon</title>
        <Value id="Sign-inLastInteractiveUserAutomatically_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">Disabled</value>
          <value selector="Sign-inLastInteractiveUserAutomatically_var-selector-0">Disabled</value>
          <value selector="Sign-inLastInteractiveUserAutomatically_var-selector-1">Disabled</value>
          <value selector="Sign-inLastInteractiveUserAutomatically_var-selector-2">Disabled</value>
        </Value>
        <Rule id="WindowsComponents-WindowsLogonOptionsSign-inLastInteractiveUserAutomaticallyAfterASystem-initiatedRestart" xml:lang="en" selected="false">
          <title xml:lang="en">Windows Components - Windows Logon Options: Sign-in last interactive user automatically after a system-initiated restart</title>
          <description xml:lang="en">This policy setting controls whether a device will automatically sign-in the last interactive user after Windows Update restarts the system.</description>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="Sign-inLastInteractiveUserAutomatically_var" export-name="oval:com.mcafee.oval:var:244604" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:404032" />
          </check>
        </Rule>
      </Group>
    </Group>
    <Group id="AutoplayPolicies" xml:lang="en">
      <title xml:lang="en">Autoplay Policies</title>
      <Value id="TurnOffAutoplay_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">255</value>
      </Value>
      <Value id="TurnOffAutoplayForNon-volumeDevices_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="DefaultBehaviorForAutoRun_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="AutoplayPolicies_SetDisallowAutoplayfornonvolumedevices" xml:lang="en" selected="false">
        <title xml:lang="en">Autoplay Policies: Set Disallow Autoplay for non-volume devices</title>
        <description xml:lang="en">Autoplay starts to read from a drive as soon as you insert media in the drive, which causes the setup file for programs or audio media to start immediately.</description>
        <rationale xml:lang="en">An attacker could use this feature to launch a program to damage a client computer or data on the computer.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35289-8</ident>
        <fixtext fixref="F-AutoplayPolicies_SetDisallowAutoplayfornonvolumedevices_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\AutoPlay Policies\Disallow Autoplay for non-volume devices
        </fixtext>
        <fix id="F-AutoplayPolicies_SetDisallowAutoplayfornonvolumedevices_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffAutoplayForNon-volumeDevices_var" export-name="oval:com.mcafee.oval:var:74962" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71734" />
        </check>
      </Rule>
      <Rule id="AutoplayPolicies_DefaultBehaviorForAutoRun" xml:lang="en" selected="false">
        <title xml:lang="en">Autoplay Policies: Set the default behavior for AutoRun</title>
        <description xml:lang="en">This policy setting sets the default behavior for Autorun commands.</description>
        <rationale xml:lang="en">An attacker could use this feature to launch a program to damage a client computer or data on the computer.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34771-6</ident>
        <fixtext fixref="F-AutoplayPolicies_DefaultBehaviorForAutoRun_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\AutoPlay Policies\Disallow Autoplay for non-volume devices
        </fixtext>
        <fix id="F-AutoplayPolicies_DefaultBehaviorForAutoRun_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DefaultBehaviorForAutoRun_var" export-name="oval:com.mcafee.oval:var:244472" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215778" />
        </check>
      </Rule>
      <Rule id="AutoplayPolicies_TurnOffAutoplay" xml:lang="en" selected="false">
        <title xml:lang="en">Autoplay Policies: Turn off autoplay</title>
        <description xml:lang="en">This policy setting determines whether the autoplay feature is enabled or disabled.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffAutoplay_var" export-name="oval:com.mcafee.oval:var:72015" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65868" />
        </check>
      </Rule>
    </Group>
    <Group id="Biometrics" xml:lang="en">
      <title xml:lang="en">Biometrics</title>
      <Group id="FacialFeatures" xml:lang="en">
        <title xml:lang="en">Facial Features</title>
        <Value id="Useenhancedantispoofingwhenavailable_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">1</value>
        </Value>
        <Rule id="FacialFeatures_Useenhancedantispoofingwhenavailable" xml:lang="en" selected="false">
          <title xml:lang="en">Facial Features: Use enhanced anti-spoofing when available</title>
          <description xml:lang="en">This policy setting determines whether enhanced anti-spoofing is configured for devices which support it.
            The recommended state for this setting is: Enabled.</description>
          <rationale xml:lang="en">Enterprise environments are now supporting a wider range of mobile devices, increasing the security on these devices will help protect against unauthorized access on your network.</rationale>
          <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33791-5</ident>
          <fixtext fixref="F-FacialFeatures_Useenhancedantispoofingwhenavailable_fix">
            To establish the recommended configuration via GP, set the following UI path to Enabled: 
            Computer Configuration\Policies\Administrative Templates\Windows Components\Biometrics\Facial Features\Use enhanced anti-spoofing when available
          </fixtext>
          <fix id="F-FacialFeatures_Useenhancedantispoofingwhenavailable_fix"/>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="Useenhancedantispoofingwhenavailable_var" export-name="oval:com.mcafee.oval:var:2894755" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894754" />
          </check>
        </Rule>
      </Group>
    </Group>
    <Group id="BitLockerDriveEncryption" xml:lang="en">
      <title xml:lang="en">BitLocker Drive Encryption</title>
      <Value id="ConfigureUseOfSmartCardsOnFixedDataDrives_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">EnabledRequired</value>
      </Value>
      <Value id="AllowAccessToFixedDataDrivesFromEarlierVersionsOfWindows_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="AllowEnhancedPINsForStartup_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="AllowSecuredBootForIntegrityValidation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="ConfigureMinimumPINLengthForStartup_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">7</value>
      </Value>
      <Value id="ConfigureUseOfSmartCardsOnRemovableDataDrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">EnabledRequired</value>
      </Value>
      <Value id="DenyWriteAccessToRemovableDrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">EnabledDenyWrite</value>
      </Value>
      <Value id="AllowAccessToRemovableDataDrivesFromEarlierVersionsOfWindows_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ChooseDriveEncryptionMethodAndCipherStrength_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">4</value>
      </Value>
     <Value id="ChooseHowBitLocker-protectedFixedDrivesCanBeRecovered_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
    </Value>
    <Value id="AllowDataRecoveryAgent_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
    </Value>
    <Value id="FirstUnnamedValue_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
    </Value>
    <Value id="SecondUnnamedValue_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
    </Value>
      <Value id="OmitRecoveryOptionsFromTheBitLockerSetupWizard_var"  xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
    </Value>
    <Value id="SaveBitLockerRecoveryInformationToActiveDirectoryDomanServices_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
    </Value>
    <Value id="SaveBitLockerRecoveryInformationToActiveDirectoryDomanServices_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
    </Value>
    <Value id="DoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDSForFixedDataDrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
    </Value>
    <Value id="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrives_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
    </Value>
    <Value id="FixedDataDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
    </Value>
    <Value id="FixedDataDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
    </Value>
    <Value id="FixedDataDrivesRestrictCryptoAlgorithmsOrCipherSuites_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42</value>
    </Value>
    <Value id="FixedDataDrivesConfigureUseOfPasswordsForFixedDataDrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
    </Value>
    <Value id="FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">Enabled</value>
    </Value>
    <Value id="FixedDataDrivesRequireuseofsmartcardsonfixeddatadrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">Enabled</value>
    </Value>
      <Value id="ConfigureHowBitLocker-protectedOSDrivesRecovered_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="OperatingSystemDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="OperatingSystemDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="OperatingSystemDrivesRestrictCryptoAlgorithmsOrCipherSuites_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42</value>
      </Value>
      <Value id="OperatingSystemDrivesConfigureUseOfPasswordsForOperatingSystemDrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ConfigureAllowDataRecoveryAgent_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ConfigureUserStorageOfBitLockerRecoveryInformation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ConfigureRecoveryKeyOptions_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ConfigureOmitRecoveryOptionsFromTheBitLockerSetupWizard_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ConfigureSaveBitLockerRecoveryInformationToADDS_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ConfigureStorageOfBitLockerRecoveryInfoToADDS_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ConfigureDoNotEnableBitLockerUntilRecoveryInformationIsStored_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ConfigureRequireAdditionalAuthenticationAtStartup_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ConfigureAllowBitLockerWithoutACompatibleTPM_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ConfigureTPMStartup_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ConfigureTPMStartupPIN_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ConfigureTPMStartupKey_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ConfigureTPMStartupKeyAndPIN_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ChooseHowBitLocker-protectedRemovableDrivesCanBeRecovered_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="AllowDataRecoveryAgent_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="FirstUnnamedValue_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="SecondUnnamedValue_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="OmitRecoveryOptionsFromTheBitLockerSetupWizard_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SaveBitLockerRecoveryInformationToADDSForRemovableDataDrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ConfigureStorageOfBitLockerRecoveryInformationToADDS_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="RemovableDataDrivesDonotenableBitLockeruntilrecoveryinformationisstoredtoADDSforremovabledatadrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="Configureuseofhardwarebasedencription_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="UseBitLockersoftwarebasedencryption_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="Restrictencryptionalgorithmsandciphersuites_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="Specifyencryptionalgorithms_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42</value>
      </Value>
      <Value id="ConfigureUseOfPasswordsForRemovableDataDrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="RequireUseOfSmartCardsOnRemovableDataDrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="Selecttheencryptionmethodforoperatingsystemdrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">7</value>
      </Value>
      <Value id="Selecttheencryptionmethodforfixeddatadrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">7</value>
      </Value>
      <Value id="Selecttheencryptionmethodforremovabledatadrives_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">4</value>
      </Value>
      <Rule id="FixedDataDrives_SetAllowAccessToBitLocker_protectedFixedDataDrivesFromEarlierVersionsOfWindows" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Allow access to BitLocker-protected fixed data drives from earlier versions of Windows</title>
        <description xml:lang="en">This policy setting configures whether or not fixed data drives formatted with the FAT file system can be unlocked and viewed on computers running Windows Server 2008, 
            Windows Vista, Windows XP with Service Pack 3 (SP3), or Windows XP with Service Pack 2 (SP2) operating systems.</description>
        <rationale>
            By default BitLocker virtualizes FAT formatted drives to permit access via the BitLocker To Go Reader on previous versions of Windows. Additionally the BitLocker To Go Reader application is applied to the unencrypted portion of the drive. 
            The BitLocker To Go Reader application, like any other application, is subject to spoofing and could be a mechanism to propagate malware.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34253-5</ident>
        <fixtext fixref="F-FixedDataDrives_SetAllowAccessToBitLocker_protectedFixedDataDrivesFromEarlierVersionsOfWindows_fix">
            To implement the recommended configuration state, set the following Group Policy setting to Disabled. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Allow access to BitLocker-protected fixed data drives from earlier versions of Windows
        </fixtext>
        <fix id="F-FixedDataDrives_SetAllowAccessToBitLocker_protectedFixedDataDrivesFromEarlierVersionsOfWindows_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="AllowAccessToFixedDataDrivesFromEarlierVersionsOfWindows_var" export-name="oval:com.mcafee.oval:var:216458" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:215762" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesChooseHowBitLocker-protectedFixedDrivesCanBeRecovered" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered</title>
        <description xml:lang="en">This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the required credentials.</description>
        <rationale>
            Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, 
            a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33072-0</ident>
        <fixtext fixref="F-FixedDataDrivesChooseHowBitLocker-protectedFixedDrivesCanBeRecovered_fix">
            To implement the recommended configuration state, set the following Group Policy setting to Enabled. Then set the available option to True.
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Choose how BitLocker-protected fixed drives can be recovered.
        </fixtext>
        <fix id="F-FixedDataDrivesChooseHowBitLocker-protectedFixedDrivesCanBeRecovered_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="ChooseHowBitLocker-protectedFixedDrivesCanBeRecovered_var" export-name="oval:com.mcafee.oval:var:515424" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:515415" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesAllowDataRecoveryAgent" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives:Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent</title>
        <description xml:lang="en">This policy setting allows you to specify whether a data recovery agent can be used with BitLocker-protected fixed data drives.</description>
        <rationale>
            Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method,
            a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33072-0</ident>
        <fixtext fixref="F-FixedDataDrivesAllowDataRecoveryAgent_fix">
            To implement the recommended configuration state, set the following Group Policy setting to 1. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives:Choose how BitLocker-protected fixed drives can be recovered:Allow data recovery agent
        </fixtext>
        <fix id="F-FixedDataDrivesAllowDataRecoveryAgent_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="AllowDataRecoveryAgent_var" export-name="oval:com.mcafee.oval:var:515434" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:515425" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesFirstUnnamedValue" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Recovery Password</title>
        <description xml:lang="en">This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the required credentials.</description>
        <rationale>
            Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method,
            a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33072-0</ident>
        <fixtext fixref="F-FixedDataDrivesFirstUnnamedValue_fix">
            To establish the recommended configuration via GP, set the following UI path to Allow 48-digit recovery password. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Choose how BitLocker-protected fixed drives can be recovered: Recovery Password   
        </fixtext>
        <fix id="F-FixedDataDrivesFirstUnnamedValue_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="FirstUnnamedValue_var" export-name="oval:com.mcafee.oval:var:515442" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:515435" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesSecondUnnamedValue" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Recovery Key</title>
        <description xml:lang="en">This policy setting allows you to select whether users are allowed, required, or not allowed to generate a 48-digit recovery password or a 256-bit recovery key.</description>
        <rationale>
            Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, 
            a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33072-0</ident>
        <fixtext fixref="F-FixedDataDrivesSecondUnnamedValue_fix">
            To establish the recommended configuration via GP, set the following UI path to Allow 256-bit recovery key. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Choose how BitLocker-protected fixed drives can be recovered: Recovery Key
        </fixtext>
        <fix id="F-FixedDataDrivesSecondUnnamedValue_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="SecondUnnamedValue_var" export-name="oval:com.mcafee.oval:var:515454" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:515446" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesOmitRecoveryOptionsFromTheBitLockerSetupWizard" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard</title>
        <description xml:lang="en">This policy setting allows you to omit recovery options from the BitLocker setup wizard to prevent users from specifying recovery options when they enable BitLocker on a drive.</description>
        <rationale>
            Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, 
            a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33072-0</ident>
        <fixtext fixref="F-FixedDataDrivesOmitRecoveryOptionsFromTheBitLockerSetupWizard_fix">
            To establish the recommended configuration via GP, set the following UI path to True.
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard
        </fixtext>
        <fix id="F-FixedDataDrivesOmitRecoveryOptionsFromTheBitLockerSetupWizard_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="OmitRecoveryOptionsFromTheBitLockerSetupWizard_var" export-name="oval:com.mcafee.oval:var:506350" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:506345" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesSetSaveBitLockerRecoveryInformationToActiveDirectoryDomanServices" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives</title>
        <description xml:lang="en">This policy setting allows you to choose which BitLocker recovery information to store in AD DS for fixed data drives.</description>
        <rationale>
            Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, 
            a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33072-0</ident>
        <fixtext fixref="F-FixedDataDrivesSetSaveBitLockerRecoveryInformationToActiveDirectoryDomanServices_fix">
            To establish the recommended configuration via GP, set the following UI path to False. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives
        </fixtext>
        <fix id="F-FixedDataDrivesSetSaveBitLockerRecoveryInformationToActiveDirectoryDomanServices_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="SaveBitLockerRecoveryInformationToActiveDirectoryDomanServices_var" export-name="oval:com.mcafee.oval:var:511339" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:511338" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesSaveBitLockerRecoveryInformationToActiveDirectoryDomanServices" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS</title>
        <description xml:lang="en">This policy setting allows you to choose which BitLocker recovery information to store in AD DS for fixed data drives.</description>
        <rationale>
            Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, 
            a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33072-0</ident>
        <fixtext fixref="F-FixedDataDrivesSaveBitLockerRecoveryInformationToActiveDirectoryDomanServices_fix">
            To implement the recommended configuration state, set the following Group Policy setting to Backup recovery passwords and key packages. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives:Choose how BitLocker-protected fixed drives can be recovered:Save BitLocker recovery information to Active Directory Doman Services
        </fixtext>
        <fix id="F-FixedDataDrivesSaveBitLockerRecoveryInformationToActiveDirectoryDomanServices_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="SaveBitLockerRecoveryInformationToActiveDirectoryDomanServices_var0" export-name="oval:com.mcafee.oval:var:511355" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:511348" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesDoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDSForFixedDataDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives</title>
        <description xml:lang="en">This policy setting prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds.</description>
        <rationale>
            Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method,
            a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33072-0</ident>
        <fixtext fixref="F-FixedDataDrivesDoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDSForFixedDataDrives_fix">
            To establish the recommended configuration via GP, set the following UI path to False. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives
        </fixtext>
        <fix id="F-FixedDataDrivesDoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDSForFixedDataDrives_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="DoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDSForFixedDataDrives_var" export-name="oval:com.mcafee.oval:var:511365" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:511358" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Configure use of hardware-based encryption for fixed data drives</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on fixed data drives and specify which encryption algorithms it can use with hardware-based encryption.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
            From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33080-3</ident>
        <fixtext fixref="F-FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrives_fix">
            To establish the recommended configuration via GP, set the following UI path to Enabled. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Configure use of hardware-based encryption for fixed data drives
        </fixtext>
        <fix id="F-FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrives_fix"/>
         <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrives_var0" export-name="oval:com.mcafee.oval:var:1137063" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:1137055" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Configure use of hardware-based encryption for fixed data drives: Use BitLocker software-based encryption when hardware encryption is not available</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on fixed data drives and specify which encryption algorithms it can use with hardware-based encryption.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
            From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33080-3</ident>
        <fixtext fixref="F-FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable_fix">
            To establish the recommended configuration via GP, set the following UI path to True. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Configure use of hardware-based encryption for fixed data drives: Use BitLocker software-based encryption when hardware encryption is not available
        </fixtext>
        <fix id="F-FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable_fix"/>
         <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="FixedDataDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable_var" export-name="oval:com.mcafee.oval:var:1137070" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:1137065" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Configure use of hardware-based encryption for fixed data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on fixed data drives and specify which encryption algorithms it can use with hardware-based encryption.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
            From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33080-3</ident>
        <fixtext fixref="F-FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption_fix">
            To establish the recommended configuration via GP, set the following UI path to False. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Configure use of hardware-based encryption for fixed data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption
        </fixtext>
        <fix id="F-FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption_fix"/>
         <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="FixedDataDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption_var" export-name="oval:com.mcafee.oval:var:1137083" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:1137075" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesRestrictCryptoAlgorithmsOrCipherSuites" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Configure use of hardware-based encryption for fixed data drives: Restrict crypto algorithms or cipher suites</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on fixed data drives and specify which encryption algorithms it can use with hardware-based encryption.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
            From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33080-3</ident>
        <fixtext fixref="F-FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesRestrictCryptoAlgorithmsOrCipherSuites_fix">
            To establish the recommended configuration via GP, set the following UI path to 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42. 
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Configure use of hardware-based encryption for fixed data drives: Restrict crypto algorithms or cipher suites to the following:
        </fixtext>
        <fix id="F-FixedDataDrivesConfigureUseOfHardware-basedEncryptionForFixedDataDrivesRestrictCryptoAlgorithmsOrCipherSuites_fix"/>
         <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="FixedDataDrivesRestrictCryptoAlgorithmsOrCipherSuites_var" export-name="oval:com.mcafee.oval:var:1137090" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:1137085" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesConfigureUseOfPasswordsForFixedDataDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Configure use of passwords for fixed data drives</title>
        <description xml:lang="en">This policy setting specifies whether a password is required to unlock BitLocker-protected fixed data drives.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
            Using a dictionary-style attack, passwords can be guessed or discovered by repeatedly attempting to unlock a drive.
            Since this type of BitLocker password does include anti-dictionary attack protections provided by a TPM, for example, there is no mechanism to slow down rapid brute-force attacks against them.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33165-2</ident>
        <fixtext fixref="F-FixedDataDrivesConfigureUseOfPasswordsForFixedDataDrives_fix">
            To establish the recommended configuration via GP, set the following UI path to Disabled.
            Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Configure use of passwords for fixed data drives
        </fixtext>
        <fix id="F-FixedDataDrivesConfigureUseOfPasswordsForFixedDataDrives_fix"/>
         <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="FixedDataDrivesConfigureUseOfPasswordsForFixedDataDrives_var" export-name="oval:com.mcafee.oval:var:1137101" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:1137093" />
        </check>
    </Rule>
    <Rule id="FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrives" xml:lang="en" selected="false">
      <title xml:lang="en">Fixed Data Drives - Configure use of smart cards on fixed data drives</title>
      <description xml:lang="en">This policy setting allows you to specify whether smart cards can be used to authenticate user access to the BitLocker-protected fixed data drives on a computer.</description>
      <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
      <rationale>
        A drive can be compromised by guessing or finding the authentication information used to access the drive. 
        For example, a password could be guessed, or a drive set to automatically unlock could be lost or stolen with the computer it automatically unlocks with.
      </rationale>
      <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33102-5</ident>
      <fixtext fixref="F-FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrives_fix">
        To establish the recommended configuration via GP, set the following UI path to Enabled. 
        Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Configure use of smart cards on fixed data drives
      </fixtext>
      <fix id="F-FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrives_fix"/>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrives_var" export-name="oval:com.mcafee.oval:var:1177315" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1177307" />
      </check>
    </Rule>
    <Rule id="FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrivesRequireuseofsmartcardsonfixeddatadrives" xml:lang="en" selected="false">
      <title xml:lang="en">Fixed Data Drives - Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives</title>
      <description xml:lang="en">
        This policy setting allows you to specify whether smart cards can be used to authenticate user access to the BitLocker-protected fixed data drives on a computer. If you enable this policy setting smart cards can be used to authenticate user access to the drive. 
        You can require a smart card authentication by selecting the "Require use of smart cards on fixed data drives" check box.
      </description>
      <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
      <rationale>
        A drive can be compromised by guessing or finding the authentication information used to access the drive.
        For example, a password could be guessed, or a drive set to automatically unlock could be lost or stolen with the computer it automatically unlocks with.
      </rationale>
      <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33102-5</ident>
      <fixtext fixref="F-FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrivesRequireuseofsmartcardsonfixeddatadrives_fix">
        To establish the recommended configuration via GP, set the following UI path to True. 
        Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives
      </fixtext>
      <fix id="F-FixedDataDrivesConfigureuseofsmartcardsonfixeddatadrivesRequireuseofsmartcardsonfixeddatadrives_fix"/>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="FixedDataDrivesRequireuseofsmartcardsonfixeddatadrives_var" export-name="oval:com.mcafee.oval:var:1177324" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1177316" />
      </check>
    </Rule>
    <Rule id="FixedDataDrives_ConfigureUseOfSmartCardsOnFixedDataDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Configure use of smart cards on fixed data drives</title>
        <description xml:lang="en">This policy setting allows you to specify whether smart cards can be used to authenticate user access to the BitLocker-protected fixed data drives on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureUseOfSmartCardsOnFixedDataDrives_var0" export-name="oval:com.mcafee.oval:var:216457" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215761" />
        </check>
      </Rule>
      <Rule id="FixedDataDrives_AllowAccessToBitLocker-protectedFixedDataDrivesFromEarlierVersionsOfWindows" xml:lang="en" selected="false">
        <title xml:lang="en">Fixed Data Drives: Allow access to BitLocker-protected fixed data drives from earlier versions of Windows</title>
        <description xml:lang="en">This policy setting configures whether or not fixed data drives formatted with the FAT file system can be unlocked and viewed on computers running Windows Server 2008, Windows Vista, Windows XP with Service Pack 3 (SP3), or Windows XP with Service Pack 2 (SP2) operating systems.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowAccessToFixedDataDrivesFromEarlierVersionsOfWindows_var" export-name="oval:com.mcafee.oval:var:216458" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215762" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_AllowEnhancedPINsForStartup" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Allow enhanced PINs for startup</title>
        <description xml:lang="en">This policy setting allows you to configure whether or not enhanced startup PINs are used with BitLocker.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowEnhancedPINsForStartup_var" export-name="oval:com.mcafee.oval:var:74967" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71739" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_AllowSecuredBootForIntegrityValidation" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Allow Secured Boot for integrity validation</title>
        <description xml:lang="en">This policy setting allows you to configure whether Secured Boot will be allowed as the platform integrity provider for BitLocker operating system drives.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowSecuredBootForIntegrityValidation_var" export-name="oval:com.mcafee.oval:var:216388" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215687" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_ConfigureMinimumPINLengthForStartup" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Configure minimum PIN length for startup</title>
        <description xml:lang="en">This policy setting allows you to configure the encryption type used by BitLocker Drive Encryption.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureMinimumPINLengthForStartup_var" export-name="oval:com.mcafee.oval:var:244453" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215763" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetChooseHowBitLocker_protectedOperatingSystemDrivesCanBeRecovered" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Set Choose how BitLocker-protected operating system drives can be recovered</title>
        <description xml:lang="en">This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the required startup key information. This policy setting is applied when you turn on BitLocker</description>
        <rationale xml:lang="en">Should a user lose their primary means for accessing an encrypted OS volume, or should the system not pass its boot time integrity checks, the system will go into recovery mode. If the recovery key has not been backed up to Active Directory, the user would need to have saved the recovery key to another location such as a USB flash drive, or have printed the recovery password, and now have access to one of those in order to recovery the system. If the user is unable to produce the recovery key, then the user will be denied access to the encrypted volume and subsequently any data that is stored there.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33101-7</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetChooseHowBitLocker_protectedOperatingSystemDrivesCanBeRecovered_fix">
          To implement the recommended configuration state, set the following Group Policy setting to Enabled. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Choose how BitLocker-protected operating system drives can be recovered
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetChooseHowBitLocker_protectedOperatingSystemDrivesCanBeRecovered_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureHowBitLocker-protectedOSDrivesRecovered_var" export-name="oval:com.mcafee.oval:var:515394" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:515393" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetAllowDataRecoveryAgent" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Choose how BitLocker-protected operating sytem drives can be recovered: Allow data recovery agent</title>
        <description xml:lang="en">The Allow certificate-based data recovery agent check box is used to specify whether a data recovery agent can be used with BitLocker-protected operating system drives.</description>
        <rationale xml:lang="en">Should a user lose their primary means for accessing an encrypted OS volume, or should the system not pass its boot time integrity checks, the system will go into recovery mode. If the recovery key has not been backed up to Active Directory, the user would need to have saved the recovery key to another location such as a USB flash drive, or have printed the recovery password, and now have access to one of those in order to recovery the system. If the user is unable to produce the recovery key, then the user will be denied access to the encrypted volume and subsequently any data that is stored there.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33101-7</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetAllowDataRecoveryAgent_fix">
          To establish the recommended configuration via GP, set the following UI path to False. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetAllowDataRecoveryAgent_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureAllowDataRecoveryAgent_var" export-name="oval:com.mcafee.oval:var:515406" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:515405" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetFirstUnnamedValue" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered: Recovery Password</title>
        <description xml:lang="en">In Configure user storage of BitLocker recovery information select whether users are allowed, required, or not allowed to generate a 48-digit recovery password or a 256-bit recovery key.</description>
        <rationale xml:lang="en">Should a user lose their primary means for accessing an encrypted OS volume, or should the system not pass its boot time integrity checks, the system will go into recovery mode. If the recovery key has not been backed up to Active Directory, the user would need to have saved the recovery key to another location such as a USB flash drive, or have printed the recovery password, and now have access to one of those in order to recovery the system. If the user is unable to produce the recovery key, then the user will be denied access to the encrypted volume and subsequently any data that is stored there.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33101-7</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetFirstUnnamedValue_fix">
          To implement the recommended configuration state, set the following Group Policy setting to Require 48-digit recovery password. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives:Configure user storage of BitLocker recovery information:Unnamed value
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetFirstUnnamedValue_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureUserStorageOfBitLockerRecoveryInformation_var" export-name="oval:com.mcafee.oval:var:515475" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:515474" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetSecondUnnamedValue" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered: Recovery Key</title>
        <description xml:lang="en">In Configure user storage of BitLocker recovery information select whether users are allowed, required, or not allowed to generate a 48-digit recovery password or a 256-bit recovery key.</description>
        <rationale xml:lang="en">Should a user lose their primary means for accessing an encrypted OS volume, or should the system not pass its boot time integrity checks, the system will go into recovery mode. If the recovery key has not been backed up to Active Directory, the user would need to have saved the recovery key to another location such as a USB flash drive, or have printed the recovery password, and now have access to one of those in order to recovery the system. If the user is unable to produce the recovery key, then the user will be denied access to the encrypted volume and subsequently any data that is stored there.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33101-7</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetSecondUnnamedValue_fix">
          To implement the recommended configuration state, set the following Group Policy setting to Do not allow 256-bit recovery key. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Choose how BitLocker-protected operating system drives can be recovered
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetSecondUnnamedValue_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureRecoveryKeyOptions_var" export-name="oval:com.mcafee.oval:var:515494" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:515493" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetOmitRecoveryOptionsFromTheBitLockerSetupWizard" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Choose how BitLocker-protected operating sytem drives can be recovered: Omit recovery options from the BitLocker setup wizard</title>
        <description xml:lang="en">Select Omit recovery options from the BitLocker setup wizard to prevent users from specifying recovery options when they enable BitLocker on a drive. This means that you will not be able to specify which recovery option to use when you enable BitLocker, instead BitLocker recovery options for the drive are determined by the policy setting.</description>
        <rationale xml:lang="en">Should a user lose their primary means for accessing an encrypted OS volume, or should the system not pass its boot time integrity checks, the system will go into recovery mode. If the recovery key has not been backed up to Active Directory, the user would need to have saved the recovery key to another location such as a USB flash drive, or have printed the recovery password, and now have access to one of those in order to recovery the system. If the user is unable to produce the recovery key, then the user will be denied access to the encrypted volume and subsequently any data that is stored there.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33101-7</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetOmitRecoveryOptionsFromTheBitLockerSetupWizard_fix">
          To implement the recommended configuration state, set the following Group Policy setting to 1. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Choose how BitLocker-protected operating system drives can be recovered\Omit recovery options from the BitLocker setup wizard
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetOmitRecoveryOptionsFromTheBitLockerSetupWizard_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureOmitRecoveryOptionsFromTheBitLockerSetupWizard_var" export-name="oval:com.mcafee.oval:var:515483" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:515482" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetSaveBitLockerRecoveryInformationToADDSForOperatingSystemDriv" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Choose how BitLocker-protected operating sytem drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives</title>
        <description xml:lang="en">In Save BitLocker recovery information to Active Directory Domain Services, choose which BitLocker recovery information to store in AD DS for operating system drives.</description>
        <rationale xml:lang="en">Should a user lose their primary means for accessing an encrypted OS volume, or should the system not pass its boot time integrity checks, the system will go into recovery mode. If the recovery key has not been backed up to Active Directory, the user would need to have saved the recovery key to another location such as a USB flash drive, or have printed the recovery password, and now have access to one of those in order to recovery the system. If the user is unable to produce the recovery key, then the user will be denied access to the encrypted volume and subsequently any data that is stored there.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33101-7</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetSaveBitLockerRecoveryInformationToADDSForOperatingSystemDriv_fix">
          To implement the recommended configuration state, set the following Group Policy setting to 1. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives:Choose how BitLocker-protected operating system drives can be recovered:Save BitLocker recovery information to AD DS for operating system drives
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetSaveBitLockerRecoveryInformationToADDSForOperatingSystemDriv_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureSaveBitLockerRecoveryInformationToADDS_var" export-name="oval:com.mcafee.oval:var:515502" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:515501" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetDoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDS" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Choose how BitLocker-protected operating sytem drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives</title>
        <description xml:lang="en">Select the Do not enable BitLocker until recovery information is stored in AD DS for operating system drives check box if you want to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds.</description>
        <rationale xml:lang="en">Should a user lose their primary means for accessing an encrypted OS volume, or should the system not pass its boot time integrity checks, the system will go into recovery mode. If the recovery key has not been backed up to Active Directory, the user would need to have saved the recovery key to another location such as a USB flash drive, or have printed the recovery password, and now have access to one of those in order to recovery the system. If the user is unable to produce the recovery key, then the user will be denied access to the encrypted volume and subsequently any data that is stored there.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33101-7</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetDoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDS_fix">
          To implement the recommended configuration state, set the following Group Policy setting to 1. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Choose how BitLocker-protected operating system drives can be recovered\Do not enable BitLocker until recovery information is stored to AD DS for operating system drives
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetDoNotEnableBitLockerUntilRecoveryInformationIsStoredToADDS_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureDoNotEnableBitLockerUntilRecoveryInformationIsStored_var" export-name="oval:com.mcafee.oval:var:515520" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:515519" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetConfigureStorageOfBitLockerRecoveryInformationToADDS" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Choose how BitLocker-protected operating sytem drives can be recovered: Configure storage of BitLocker recovery information to AD DS</title>
        <description xml:lang="en">In Save BitLocker recovery information to Active Directory Domain Services, choose which BitLocker recovery information to store in AD DS for operating system drives. If you select Backup recovery password and key package, both the BitLocker recovery password and key package are stored in AD DS.</description>
        <rationale xml:lang="en">Should a user lose their primary means for accessing an encrypted OS volume, or should the system not pass its boot time integrity checks, the system will go into recovery mode. If the recovery key has not been backed up to Active Directory, the user would need to have saved the recovery key to another location such as a USB flash drive, or have printed the recovery password, and now have access to one of those in order to recovery the system. If the user is unable to produce the recovery key, then the user will be denied access to the encrypted volume and subsequently any data that is stored there.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33101-7</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetConfigureStorageOfBitLockerRecoveryInformationToADDS_fix">
          To implement the recommended configuration state, set the following Group Policy setting to Store recovery passwords and key packages. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Choose how BitLocker-protected operating system drives can be recovered\Store recovery passwords and key packages
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetConfigureStorageOfBitLockerRecoveryInformationToADDS_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureStorageOfBitLockerRecoveryInfoToADDS_var" export-name="oval:com.mcafee.oval:var:515512" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:515511" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Configure use of hardware-based encryption for operating system drives</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on operating system drives and specify which encryption algorithms it can use with hardware-based encryption.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
          From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33167-8</ident>
        <fixtext fixref="F-OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrives_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled.
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Configure use of hardware-based encryption for operating system drives
        </fixtext>
        <fix id="F-OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrives_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrives_var" export-name="oval:com.mcafee.oval:var:1137111" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1137103" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Use BitLocker software-based encryption when hardware encryption is not available</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on operating system drives and specify which encryption algorithms it can use with hardware-based encryption</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
          From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33167-8</ident>
        <fixtext fixref="F-OperatingSystemDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable_fix">
          To establish the recommended configuration via GP, set the following UI path to True.
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Configure use of hardware-based encryption for operating system drives: Use BitLocker software-based encryption when hardware encryption is not available
        </fixtext>
        <fix id="F-OperatingSystemDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OperatingSystemDrivesUseBitLockerSoftware-basedEncryptionWhenHardwareEncryptionIsNotAvailable_var" export-name="oval:com.mcafee.oval:var:1137121" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1137113" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on fixed data drives and specify which encryption algorithms it can use with hardware-based encryption.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
          From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33080-3</ident>
        <fixtext fixref="F-OperatingSystemDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption_fix">
          To establish the recommended configuration via GP, set the following UI path to False. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Configure use of hardware-based encryption for fixed data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption
        </fixtext>
        <fix id="F-OperatingSystemDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OperatingSystemDrivesRestrictEncryptionAlgorithmsAndCipherSuitesAllowedForHardware-basedEncryption_var" export-name="oval:com.mcafee.oval:var:1137131" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1137123" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrivesRestrictCryptoAlgorithmsOrCipherSuites" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Configure use of hardware-based encryption for operating system drives: Restrict crypto algorithms or cipher suites</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on operating system drives and specify which encryption algorithms it can use with hardware-based encryption.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
          From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33080-3</ident>
        <fixtext fixref="F-OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrivesRestrictCryptoAlgorithmsOrCipherSuites_fix">
          To establish the recommended configuration via GP, set the following UI path to 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Configure use of hardware-based encryption for operating system drives: Restrict crypto algorithms or cipher suites to the following:
        </fixtext>
        <fix id="F-OperatingSystemDrivesConfigureUseOfHardware-basedEncryptionForOperatingSystemDrivesRestrictCryptoAlgorithmsOrCipherSuites_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OperatingSystemDrivesRestrictCryptoAlgorithmsOrCipherSuites_var" export-name="oval:com.mcafee.oval:var:1137136" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1137133" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrivesConfigureUseOfPasswordsForOperatingSystemDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Configure use of passwords for operating system drives</title>
        <description xml:lang="en">This policy setting specifies the constraints for passwords used to unlock BitLocker-protected operating system drives.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
          Using a dictionary-style attack, passwords can be guessed or discovered by repeatedly attempting to unlock a drive. Since this type of BitLocker password does include anti-dictionary attack protections provided by a TPM, for example, there is no mechanism to slow down rapid brute-force attacks against them.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-32937-5</ident>
        <fixtext fixref="F-OperatingSystemDrivesConfigureUseOfPasswordsForOperatingSystemDrives_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Configure use of passwords for operating system drives
        </fixtext>
        <fix id="F-OperatingSystemDrivesConfigureUseOfPasswordsForOperatingSystemDrives_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OperatingSystemDrivesConfigureUseOfPasswordsForOperatingSystemDrives_var" export-name="oval:com.mcafee.oval:var:1137150" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1137142" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetRequireAdditionalAuthenticationAtStartup" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Set Require additional authentication at startup</title>
        <description xml:lang="en">This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with or without a Trusted Platform Module (TPM). This policy setting is applied when you turn on BitLocker.</description>
        <rationale xml:lang="en">TPM without use of a PIN will only validate early boot components and does not require a user to enter any additional authentication information. If a computer is lost or stolen in this configuration, BitLocker will not provide any additional measure of protection beyond what is provided by native Windows authentication unless the early boot components are tampered with or the encrypted drive is removed from the machine.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33103-3</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetRequireAdditionalAuthenticationAtStartup_fix">
          To implement the recommended configuration state, set the following Group Policy setting to Enabled. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Require additional authentication at startup
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetRequireAdditionalAuthenticationAtStartup_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureRequireAdditionalAuthenticationAtStartup_var" export-name="oval:com.mcafee.oval:var:510031" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:510026" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetAllowBitLockerWithoutACompatibleTPM" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Require additional authentication at startup: Allow BitLocker without a compatible TPM</title>
        <description xml:lang="en">If you want to use BitLocker on a computer without a TPM, select the Allow BitLocker without a compatible TPM check box. In this mode a USB drive is required for start-up and the key information used to encrypt the drive is stored on the USB drive, creating a USB key.</description>
        <rationale xml:lang="en">TPM without use of a PIN will only validate early boot components and does not require a user to enter any additional authentication information. If a computer is lost or stolen in this configuration, BitLocker will not provide any additional measure of protection beyond what is provided by native Windows authentication unless the early boot components are tampered with or the encrypted drive is removed from the machine.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33103-3</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetAllowBitLockerWithoutACompatibleTPM_fix">
          To establish the recommended configuration via GP, set the following UI path to False. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Require additional authentication at startup: Allow BitLocker without a compatible TPM
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetAllowBitLockerWithoutACompatibleTPM_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureAllowBitLockerWithoutACompatibleTPM_var" export-name="oval:com.mcafee.oval:var:510039" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:510038" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetConfigureTPMStartup" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Set Require additional authentication at startup: Configure TPM startup</title>
        <description xml:lang="en">On a computer with a compatible TPM, four types of authentication methods can be used at startup to provide added protection for encrypted data. When the computer starts, it can use only the TPM for authentication, or it can also require insertion of a USB flash drive containing a startup key, the entry of a 4-digit to 20-digit personal identification number (PIN), or both.</description>
        <rationale xml:lang="en">TPM without use of a PIN will only validate early boot components and does not require a user to enter any additional authentication information. If a computer is lost or stolen in this configuration, BitLocker will not provide any additional measure of protection beyond what is provided by native Windows authentication unless the early boot components are tampered with or the encrypted drive is removed from the machine.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33103-3</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetConfigureTPMStartup_fix">
          To implement the recommended configuration state, set the following Group Policy setting to Do not allow TPM. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives:Require additional authentication at startup:Configure TPM Startup
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetConfigureTPMStartup_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureTPMStartup_var" export-name="oval:com.mcafee.oval:var:510049" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:510046" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetConfigureTPMStartupPIN" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Set Require additional authentication at startup: Configure TPM startup PIN</title>
        <description xml:lang="en">On a computer with a compatible TPM, four types of authentication methods can be used at startup to provide added protection for encrypted data. When the computer starts, it can use only the TPM for authentication, or it can also require insertion of a USB flash drive containing a startup key, the entry of a 4-digit to 20-digit personal identification number (PIN), or both.</description>
        <rationale xml:lang="en">TPM without use of a PIN will only validate early boot components and does not require a user to enter any additional authentication information. If a computer is lost or stolen in this configuration, BitLocker will not provide any additional measure of protection beyond what is provided by native Windows authentication unless the early boot components are tampered with or the encrypted drive is removed from the machine.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33103-3</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetConfigureTPMStartupPIN_fix">
          To implement the recommended configuration state, set the following Group Policy setting to Require startup PIN with TPM. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Choose how BitLocker-protected operating system drives can be recovered
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetConfigureTPMStartupPIN_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureTPMStartupPIN_var" export-name="oval:com.mcafee.oval:var:514102" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:514038" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetConfigureTPMStartupKey" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Require additional authentication at startup: Configure TPM startup key</title>
        <description xml:lang="en">On a computer with a compatible TPM, four types of authentication methods can be used at startup to provide added protection for encrypted data. When the computer starts, it can use only the TPM for authentication, or it can also require insertion of a USB flash drive containing a startup key, the entry of a 4-digit to 20-digit personal identification number (PIN), or both.</description>
        <rationale xml:lang="en">TPM without use of a PIN will only validate early boot components and does not require a user to enter any additional authentication information. If a computer is lost or stolen in this configuration, BitLocker will not provide any additional measure of protection beyond what is provided by native Windows authentication unless the early boot components are tampered with or the encrypted drive is removed from the machine.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33103-3</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetConfigureTPMStartupKey_fix">
          To implement the recommended configuration state, set the following Group Policy setting to Do not allow startup key with TPM. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Choose how BitLocker-protected operating system drives can be recovered\Do not allow startup key with TPM
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetConfigureTPMStartupKey_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureTPMStartupKey_var" export-name="oval:com.mcafee.oval:var:514095" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:514048" />
        </check>
      </Rule>
      <Rule id="OperatingSystemDrives_SetConfigureTPMStartupKeyAndPIN" xml:lang="en" selected="false">
        <title xml:lang="en">Operating System Drives: Require additional authentication at startup: Configure TPM startup key and PIN</title>
        <description xml:lang="en">On a computer with a compatible TPM, four types of authentication methods can be used at startup to provide added protection for encrypted data. When the computer starts, it can use only the TPM for authentication, or it can also require insertion of a USB flash drive containing a startup key, the entry of a 4-digit to 20-digit personal identification number (PIN), or both.</description>
        <rationale xml:lang="en">TPM without use of a PIN will only validate early boot components and does not require a user to enter any additional authentication information. If a computer is lost or stolen in this configuration, BitLocker will not provide any additional measure of protection beyond what is provided by native Windows authentication unless the early boot components are tampered with or the encrypted drive is removed from the machine.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33103-3</ident>
        <fixtext fixref="F-OperatingSystemDrives_SetConfigureTPMStartupKeyAndPIN_fix">
          To implement the recommended configuration state, set the following Group Policy setting to Do not allow startup key and PIN with TPM. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Do not allow startup key and PIN with TPM
        </fixtext>
        <fix id="F-OperatingSystemDrives_SetConfigureTPMStartupKeyAndPIN_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureTPMStartupKeyAndPIN_var" export-name="oval:com.mcafee.oval:var:514109" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:514058" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrives_ConfigureUseOfSmartCardsOnRemovableDataDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Configure use of smart cards on removable data drives</title>
        <description xml:lang="en">This policy setting allows you to specify whether smart cards can be used to authenticate user access to the BitLocker-protected removable data drives on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureUseOfSmartCardsOnRemovableDataDrives_var" export-name="oval:com.mcafee.oval:var:244454" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215764" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrives_DenyWriteAccessToRemovableDrivesNotProtectedByBitLocker" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Deny write access to removable drives not protected by BitLocker</title>
        <description xml:lang="en">This policy setting configures whether BitLocker protection is required for a computer to be able to write data to a removable data drive.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DenyWriteAccessToRemovableDrives_var" export-name="oval:com.mcafee.oval:var:244455" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215765" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrives_AllowAccessToBitLocker-protectedRemovableDataDrivesFromEarlierVersionsOfWindows" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Allow access to BitLocker-protected removable data drives from earlier versions of Windows</title>
        <description xml:lang="en">This policy setting configures whether or not removable data drives formatted with the FAT file system can be unlocked and viewed on computers running Windows Server 2008, Windows Vista, Windows XP with Service Pack 3 (SP3), or Windows XP with Service Pack 2 (SP2) operating systems.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowAccessToRemovableDataDrivesFromEarlierVersionsOfWindows_var" export-name="oval:com.mcafee.oval:var:244456" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215766" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesChooseHowBitLocker-protectedRemovableDrivesCanBeRecovered" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Choose how BitLocker-protected removable drives can be recovered</title>
        <description xml:lang="en">This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the required credentials.</description>
        <rationale>
          Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35704-6</ident>
        <fixtext fixref="F-RemovableDataDrivesChooseHowBitLocker-protectedRemovableDrivesCanBeRecovered_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Choose how BitLocker-protected removable drives can be recovered
        </fixtext>
        <fix id="F-RemovableDataDrivesChooseHowBitLocker-protectedRemovableDrivesCanBeRecovered_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ChooseHowBitLocker-protectedRemovableDrivesCanBeRecovered_var" export-name="oval:com.mcafee.oval:var:512657" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512647" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesAllowDataRecoveryAgent" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Allow data recovery agent</title>
        <description xml:lang="en">This policy setting is used to specify whether a data recovery agent can be used with BitLocker-protected removable data drives.</description>
        <rationale>
          Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35704-6</ident>
        <fixtext fixref="F-RemovableDataDrivesAllowDataRecoveryAgent_fix">
          To establish the recommended configuration via GP, set the following UI path to True. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent
        </fixtext>
        <fix id="F-RemovableDataDrivesAllowDataRecoveryAgent_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowDataRecoveryAgent_var0" export-name="oval:com.mcafee.oval:var:512666" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512658" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesRecoveryPassword" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Recovery Password</title>
        <description xml:lang="en">This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the required credentials. This policy setting is applied when you turn on BitLocker. The "Allow data recovery agent" check box is used to specify whether a data recovery agent can be used with BitLocker-protected removable data drives. Before a data recovery agent can be used it must be added from the Public Key Policies item in either the Group Policy Management Console or the Local Group Policy Editor. Consult the BitLocker Drive Encryption Deployment Guide on Microsoft TechNet for more information about adding data recovery agents. In "Configure user storage of BitLocker recovery information" select whether users are allowed, required, or not allowed to generate a 48-digit recovery password or a 256-bit recovery key. Select "Omit recovery options from the BitLocker setup wizard" to prevent users from specifying recovery options when they enable BitLocker on a drive. This means that you will not be able to specify which recovery option to use when you enable BitLocker, instead BitLocker recovery options for the drive are determined by the policy setting. In "Save BitLocker recovery information to Active Directory Domain Services" choose which BitLocker recovery information to store in AD DS for removable data drives. If you select "Backup recovery password and key package", both the BitLocker recovery password and key package are stored in AD DS. If you select "Backup recovery password only" only the recovery password is stored in AD DS. Select the "Do not enable BitLocker until recovery information is stored in AD DS for removable data drives" check box if you want to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds. Note: If the "Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives" check box is selected, a recovery password is automatically generated. If you enable this policy setting, you can control the methods available to users to recover data from BitLocker-protected removable data drives. If this policy setting is not configured or disabled, the default recovery options are supported for BitLocker recovery. By default a DRA is allowed, the recovery options can be specified by the user including the recovery password and recovery key, and recovery information is not backed up to AD DS. The recommended state for this setting is: Do not allow 48-digit recovery password.</description>
        <rationale>
          Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data.
          Additionally, as with any authentication method, a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35704-6</ident>
        <fixtext fixref="F-RemovableDataDrivesRecoveryPassword_fix">
          To establish the recommended configuration via GP, set the following UI path to Do not allow 48-digit recovery password. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Choose how BitLocker-protected removable drives can be recovered: Recovery Password
        </fixtext>
        <fix id="F-RemovableDataDrivesRecoveryPassword_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FirstUnnamedValue_var0" export-name="oval:com.mcafee.oval:var:512683" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512678" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesRecoveryKey" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Recovery Key</title>
        <description xml:lang="en">This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the required credentials. This policy setting is applied when you turn on BitLocker. The "Allow data recovery agent" check box is used to specify whether a data recovery agent can be used with BitLocker-protected removable data drives. Before a data recovery agent can be used it must be added from the Public Key Policies item in either the Group Policy
          Management Console or the Local Group Policy Editor. Consult the BitLocker Drive Encryption Deployment Guide on Microsoft TechNet for more information about adding data recovery agents. In "Configure user storage of BitLocker recovery information" select whether users are allowed, required, or not allowed to generate a 48-digit recovery password or a 256-bit recovery key. Select "Omit recovery options from the BitLocker setup wizard" to prevent users from specifying recovery options when they enable BitLocker on a drive. This means that you will not be able to specify which recovery option to use when you enable BitLocker, instead BitLocker recovery options for the drive are determined by the policy setting. In "Save BitLocker recovery information to Active Directory Domain Services" choose which BitLocker recovery information to store in AD DS for removable data drives. If you select "Backup recovery password and key package", both the BitLocker recovery password and key package are stored in AD DS. If you select "Backup recovery password only" only the recovery password is stored in AD DS. Select the "Do not enable BitLocker until recovery information is stored in AD DS for removable data drives" check box if you want to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds. Note: If the "Do not enable BitLocker until recovery information is stored in AD DS for fixed data drives" check box is selected, a recovery password is automatically generated. If you enable this policy setting, you can control the methods available to users to recover data from BitLocker-protected removable data drives. If this policy setting is not configured or disabled, the default recovery options are supported for BitLocker recovery. By default a DRA is allowed, the recovery options can be specified by the user including the recovery password and recovery key, and recovery information is not backed up to AD DS. The recommended state for this setting is: Do not allow 256-bit recovery key.</description>
        <rationale>
          Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35704-6</ident>
        <fixtext fixref="F-RemovableDataDrivesRecoveryKey_fix">
          To establish the recommended configuration via GP, set the following UI path to Do not allow 256-bit recovery key. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Choose how BitLocker-protected removable drives can be recovered: Recovery Key
        </fixtext>
        <fix id="F-RemovableDataDrivesRecoveryKey_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SecondUnnamedValue_var0" export-name="oval:com.mcafee.oval:var:512690" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512686" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesOmitRecoveryOptionsFromTheBitLockerSetupWizard" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Omit recovery options from the BitLocker setup wizard</title>
        <description xml:lang="en">This policy setting is used to to prevent users from specifying recovery options when they enable BitLocker on a drive.</description>
        <rationale>
          Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35704-6</ident>
        <fixtext fixref="F-RemovableDataDrivesOmitRecoveryOptionsFromTheBitLockerSetupWizard_fix">
          To establish the recommended configuration via GP, set the following UI path to True. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard
        </fixtext>
        <fix id="F-RemovableDataDrivesOmitRecoveryOptionsFromTheBitLockerSetupWizard_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OmitRecoveryOptionsFromTheBitLockerSetupWizard_var0" export-name="oval:com.mcafee.oval:var:512677" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512668" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesSetSaveBitLockerRecoveryInformationToADDSForRemovableDataDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Set Save BitLocker recovery information to AD DS for removable data drives</title>
        <description xml:lang="en">This policy setting is used to to choose which BitLocker recovery information to store in AD DS for removable data drives.</description>
        <rationale>
          Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35704-6</ident>
        <fixtext fixref="F-RemovableDataDrivesSetSaveBitLockerRecoveryInformationToADDSForRemovableDataDrives_fix">
          To establish the recommended configuration via GP, set the following UI path to False. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives
        </fixtext>
        <fix id="F-RemovableDataDrivesSetSaveBitLockerRecoveryInformationToADDSForRemovableDataDrives_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SaveBitLockerRecoveryInformationToADDSForRemovableDataDrives_var" export-name="oval:com.mcafee.oval:var:512703" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512694" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesConfigureStorageOfBitLockerRecoveryInformationToADDS" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Configure storage of BitLocker recovery information to AD DS</title>
        <description xml:lang="en">This policy setting is used to to choose which BitLocker recovery information to store in AD DS for removable data drives.</description>
        <rationale>
          Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35704-6</ident>
        <fixtext fixref="F-RemovableDataDrivesConfigureStorageOfBitLockerRecoveryInformationToADDS_fix">
          To establish the recommended configuration via GP, set the following UI path to Backup recovery passwords and key packages. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:
        </fixtext>
        <fix id="F-RemovableDataDrivesConfigureStorageOfBitLockerRecoveryInformationToADDS_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureStorageOfBitLockerRecoveryInformationToADDS_var" export-name="oval:com.mcafee.oval:var:512710" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512704" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesDonotenableBitLockeruntilrecoveryinformationisstoredtoADDSforremovabledatadrives" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives</title>
        <description xml:lang="en">This policy setting allows you to prevent users from enabling BitLocker unless the computer is connected to the domain and the backup of BitLocker recovery information to AD DS succeeds.</description>
        <rationale>
          Administrators should always have a safe, secure way to access encrypted data in the event users cannot access their data. Additionally, as with any authentication method, a drive can be compromised by guessing or finding the authentication information used to access the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35704-6</ident>
        <fixtext fixref="F-RemovableDataDrivesDonotenableBitLockeruntilrecoveryinformationisstoredtoADDSforremovabledatadrives_fix">
          To establish the recommended configuration via GP, set the following UI path to False. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives
        </fixtext>
        <fix id="F-RemovableDataDrivesDonotenableBitLockeruntilrecoveryinformationisstoredtoADDSforremovabledatadrives_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemovableDataDrivesDonotenableBitLockeruntilrecoveryinformationisstoredtoADDSforremovabledatadrives_var" export-name="oval:com.mcafee.oval:var:512723" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512715" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesConfigureuseofhardwarebasedencryptionforremovabledatadrives" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Configure use of hardware-based encryption for removable data drives</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on removable data drives and specify which encryption algorithms it can use with hardware-based encryption. Using hardware-based encryption can improve performance of drive operations that involve frequent reading or writing of data to the drive.</description>
        <rationale>
          From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35540-4</ident>
        <fixtext fixref="F-RemovableDataDrivesConfigureuseofhardwarebasedencryptionforremovabledatadrives_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Configure use of hardware-based encryption for removable data drives
        </fixtext>
        <fix id="F-RemovableDataDrivesConfigureuseofhardwarebasedencryptionforremovabledatadrives_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Configureuseofhardwarebasedencription_var" export-name="oval:com.mcafee.oval:var:1165944" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1165913" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesUseBitLockersoftwarebasedencryptionwhenhardwareencryptionisnotavailable" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Use BitLocker software-based encryption when hardware encryption is not available</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on removable data drives and specify which encryption algorithms it can use with hardware-based encryption.</description>
        <rationale>
          From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35540-4</ident>
        <fixtext fixref="F-RemovableDataDrivesUseBitLockersoftwarebasedencryptionwhenhardwareencryptionisnotavailable_fix">
          To establish the recommended configuration via GP, set the following UI path to True. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Configure use of hardware-based encryption for removable data drives: Use BitLocker software-based encryption when hardware encryption is not available
        </fixtext>
        <fix id="F-RemovableDataDrivesUseBitLockersoftwarebasedencryptionwhenhardwareencryptionisnotavailable_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="UseBitLockersoftwarebasedencryption_var" export-name="oval:com.mcafee.oval:var:1165970" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1165961" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesRestrictencryptionalgorithmsandciphersuitesallowedforhardwarebasedencryption" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on removable data drives and specify which encryption algorithms it can use with hardware-based encryption. Using hardware-based encryption can improve performance of drive operations that involve frequent reading or writing of data to the drive.</description>
        <rationale>
          From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35540-4</ident>
        <fixtext fixref="F-RemovableDataDrivesRestrictencryptionalgorithmsandciphersuitesallowedforhardwarebasedencryption_fix">
          To establish the recommended configuration via GP, set the following UI path to False. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Configure use of hardware-based encryption for removable data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption
        </fixtext>
        <fix id="F-RemovableDataDrivesRestrictencryptionalgorithmsandciphersuitesallowedforhardwarebasedencryption_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Restrictencryptionalgorithmsandciphersuites_var" export-name="oval:com.mcafee.oval:var:1166108" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1166086" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesRestrictcryptoalgorithmsorciphersuites" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Restrict crypto algorithms or cipher suites</title>
        <description xml:lang="en">This policy setting allows you to manage BitLocker's use of hardware-based encryption on removable data drives and specify which encryption algorithms it can use with hardware-based encryption.</description>
        <rationale>
          From a strict security perspective the hardware-based encryption may offer the same, greater, or less protection than what is provided by BitLocker's software-based encryption depending on how the algorithms and key lengths compare.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35540-4</ident>
        <fixtext fixref="F-RemovableDataDrivesRestrictcryptoalgorithmsorciphersuites_fix">
          To establish the recommended configuration via GP, set the following UI path to 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Configure use of hardware-based encryption for removable data drives: Restrict crypto algorithms or cipher suites to the following:
        </fixtext>
        <fix id="F-RemovableDataDrivesRestrictcryptoalgorithmsorciphersuites_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Specifyencryptionalgorithms_var" export-name="oval:com.mcafee.oval:var:1166265" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1166201" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrivesConfigureUseOfPasswordsForRemovableDataDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Configure use of passwords for removable data drives</title>
        <description xml:lang="en">This policy setting allows you to specify whether smart cards can be used to authenticate user access to BitLocker-protected removable data drives on a computer. If you enable this policy setting smart cards can be used to authenticate user access to the drive. You can require a smart card authentication by selecting the "Require use of smart cards on removable data drives" check box. Note: These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker will allow unlocking a drive with any of the protectors available on the drive. If you disable this policy setting, users are not allowed to use smart cards to authenticate their access to BitLocker-protected removable data drives. If you do not configure this policy setting, smart cards are available to authenticate user access to a BitLocker-protected removable data drive. The recommended state for this setting is: Disabled.</description>
        <rationale>
          Using a dictionary-style attack, passwords can be guessed or discovered by repeatedly attempting to unlock a drive. Since this type of BitLocker password does not include anti-dictionary attack protections provided by a TPM, for example, there is no mechanism to slow down rapid brute-force attacks against themUsing
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33075-3</ident>
        <fixtext fixref="F-RemovableDataDrivesConfigureUseOfPasswordsForRemovableDataDrives_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Configure use of passwords for removable data drives
        </fixtext>
        <fix id="F-RemovableDataDrivesConfigureUseOfPasswordsForRemovableDataDrives_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureUseOfPasswordsForRemovableDataDrives_var" export-name="oval:com.mcafee.oval:var:512734" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512725" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrives_SetConfigureUseOfSmartCardsOnRemovableDataDrives" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Set Configure use of smart cards on removable data drives</title>
        <description xml:lang="en">This policy setting allows you to specify whether smart cards can be used to authenticate user access to the BitLocker-protected removable data drives on a computer.</description>
        <rationale>
          A drive can be compromised by guessing or finding the authentication infromation used to access the drive. For example, a password could be guessed, or a drive set to automatically unlock could be lost or stolen with the computer it automatically unlocks with.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35705-3</ident>
        <fixtext fixref="F-RemovableDataDrives_SetConfigureUseOfSmartCardsOnRemovableDataDrives_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Configure use of smart cards on removable data drives
        </fixtext>
        <fix id="F-RemovableDataDrives_SetConfigureUseOfSmartCardsOnRemovableDataDrives_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureUseOfSmartCardsOnRemovableDataDrives_var" export-name="oval:com.mcafee.oval:var:1413862" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1413861" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrives_SetConfigureUseOfSmartCardsOnRemovableDataDrives_Requireuseofsmartcardsonremovabledatadrives" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Set Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives</title>
        <description xml:lang="en">This policy setting allows you to specify whether smart cards can be used to authenticate user access to the BitLocker-protected removable data drives on a computer.</description>
        <rationale>
          A drive can be compromised by guessing or finding the authentication infromation used to access the drive. For example, a password could be guessed, or a drive set to automatically unlock could be lost or stolen with the computer it automatically unlocks with.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35705-3</ident>
        <fixtext fixref="F-RemovableDataDrives_SetConfigureUseOfSmartCardsOnRemovableDataDrives_Requireuseofsmartcardsonremovabledatadrives_fix">
          To establish the recommended configuration via GP, set the following UI path to True. 
          Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives
        </fixtext>
        <fix id="F-RemovableDataDrives_SetConfigureUseOfSmartCardsOnRemovableDataDrives_Requireuseofsmartcardsonremovabledatadrives_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequireUseOfSmartCardsOnRemovableDataDrives_var" export-name="oval:com.mcafee.oval:var:1413868" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1413860" />
        </check>
      </Rule>
      <Rule id="RemovableDataDrives_SetDenyWriteAccessToRemovableDrivesNotProtectedByBitLocker" xml:lang="en" selected="false">
        <title xml:lang="en">Removable Data Drives: Set Deny write access to removable drives not protected by BitLocker</title>
        <description xml:lang="en">This policy setting configures whether BitLocker protection is required for a computer to be able to write data to a removable data drive.</description>
        <rationale>
          Users may not voluntarily encrypt removable drives prior to saving important data to the drive.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33077-9</ident>
        <fixtext fixref="F-RemovableDataDrives_SetDenyWriteAccessToRemovableDrivesNotProtectedByBitLocker_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives\Deny write access to removable drives not protected by BitLocker
        </fixtext>
        <fix id="F-RemovableDataDrives_SetDenyWriteAccessToRemovableDrivesNotProtectedByBitLocker_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DenyWriteAccessToRemovableDrives_var" export-name="oval:com.mcafee.oval:var:244455" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215765" />
        </check>
      </Rule>
      <Rule id="Choosedriveencryptionmethodandcipherstrength_Windows10_Version1511andlater" xml:lang="en" selected="false">
        <title xml:lang="en">Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)</title>
        <description xml:lang="en">This policy setting allows you to configure the algorithm and cipher strength used by BitLocker Drive Encryption. This policy setting is applied when you turn on BitLocker. Changing the encryption method has no effect if the drive is already encrypted or if encryption is in progress. Consult the BitLocker Drive Encryption Deployment Guide on Microsoft TechNet for more information about the encryption methods available.
          The recommended state for this setting is Enabled: XTS-AES 256-bit (for operating system drives) XTS-AES 256-bit (for fixed data drives) AES-CBC 256-bit (for removable data drives)</description>
        <rationale>
          The use of AES 128 bit key is likely to be strong enough for the majority of applications, but those requiring the highest level of security may find this setting suboptimal.
        </rationale>
        <fixtext fixref="F-Choosedriveencryptionmethodandcipherstrength_Windows10_Version1511andlater_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: XTS-AES 256-bit (for operating system drives) XTS-AES 256-bit (for fixed data drives) AES-CBC 256-bit (for removable data drives) 
          Computer Configuration\Policies\Administrative Templates\Windows Components\BitLocker Drive Encryption\Choose drive encryption method and cipher strength
        </fixtext>
        <fix id="F-Choosedriveencryptionmethodandcipherstrength_Windows10_Version1511andlater_fix"/>
        <complex-check operator="AND">
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="Selecttheencryptionmethodforoperatingsystemdrives_var" export-name="oval:com.mcafee.oval:var:2894763" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894762" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="Selecttheencryptionmethodforfixeddatadrives_var" export-name="oval:com.mcafee.oval:var:2894772" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894771" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="Selecttheencryptionmethodforremovabledatadrives_var" export-name="oval:com.mcafee.oval:var:2894780" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894779" />
          </check>
        </complex-check>
      </Rule>
      <Rule id="ChooseDriveEncryptionMethodAndCipherStrength_Windows8AndNewer_" xml:lang="en" selected="false">
        <title xml:lang="en">Choose drive encryption method and cipher strength (Windows 8 and newer)</title>
        <description xml:lang="en">This policy setting allows you to configure the algorithm and cipher strength used by BitLocker Drive Encryption.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ChooseDriveEncryptionMethodAndCipherStrength_var" export-name="oval:com.mcafee.oval:var:216395" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215694" />
        </check>
      </Rule>
      
    </Group>
    <Group id=" Camera" xml:lang="en">
      <title xml:lang="en">Camera</title>
      <Value id="AllowUseOfCamera_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Rule id="WindowsComponents-AllowUseOfCamera" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Allow Use of Camera</title>
        <description xml:lang="en">This policy setting controls whether the use of Camera devices on the machine are permitted.</description>
        <rationale xml:lang="en">Cameras in a high security environment can pose serious privacy and data exfiltration risks - they should be disabled to help mitigate that risk.</rationale>
        <fixtext fixref="F-WindowsComponents-AllowUseOfCamera_fix">To establish the recommended configuration via GP, set the following UI path to Disabled:
          Computer Configuration\Policies\Administrative Templates\Windows
          Components\Camera\Allow Use of Camera
        </fixtext>
        <fix id="F-WindowsComponents-AllowUseOfCamera_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowUseOfCamera_var" export-name="oval:com.mcafee.oval:var:2899296" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899287" />
        </check>
      </Rule>
    </Group>
    <Group id="CloudContent" xml:lang="en">
      <title xml:lang="en">Cloud Content</title>
      <Value id="TurnoffMicrosoftconsumerexperiences_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="CloudContent_TurnoffMicrosoftconsumerexperiences" xml:lang="en" selected="false">
        <title xml:lang="en">Cloud Content: Turn off Microsoft consumer experiences</title>
        <description xml:lang="en">This policy setting turns off experiences that help consumers make the most of their devices and Microsoft account.
          The recommended state for this setting is: Enabled.</description>
        <rationale xml:lang="en">Having apps silently installed in an environment is not good security practice - especially if the apps send data back to a 3rd party.</rationale>
        <fixtext fixref="F-CloudContent_TurnoffMicrosoftconsumerexperiences_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Cloud Content\Turn off Microsoft consumer experiences
        </fixtext>
        <fix id="F-CloudContent_TurnoffMicrosoftconsumerexperiences_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnoffMicrosoftconsumerexperiences_var" export-name="oval:com.mcafee.oval:var:2894788" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894787" />
        </check>
      </Rule>
    </Group>
    <Group id="Connect" xml:lang="en">
      <title xml:lang="en">Connect</title>
      <Value id="RequirePinForPairing_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="WindowsComponents-RequirePinForPairing" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Require pin for pairing</title>
        <description xml:lang="en">This policy setting controls whether or not a PIN is required for pairing to a wireless display device.</description>
        <rationale xml:lang="en">If this setting is not configured or disabled then a PIN would not be required when pairing
          wireless display devices to the system, increasing the risk of unauthorized use.</rationale>
        <fixtext fixref="F-WindowsComponents-RequirePinForPairing_fix">To establish the recommended configuration via GP, set the following UI path to Enabled:
          Computer Configuration\Policies\Administrative Templates\Windows
          Components\Connect\Require pin for pairing
        </fixtext>
        <fix id="F-WindowsComponents-RequirePinForPairing_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequirePinForPairing_var" export-name="oval:com.mcafee.oval:var:2899306" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899297" />
        </check>
      </Rule>
    </Group>
    <Group id="CredentialUserInterface" xml:lang="en">
      <title xml:lang="en">Credential User Interface</title>
      <Value id="EnumerateAdministratorAccountsOnElevation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
        <value selector="EnumerateAdministratorAccountsOnElevation_var-selector">Not Configured</value>
        <value selector="EnumerateAdministratorAccountsOnElevation_var-selector-1">Not Configured</value>
        <value selector="EnumerateAdministratorAccountsOnElevation_var-selector-2">Not Configured</value>
        <value selector="EnumerateAdministratorAccountsOnElevation_var-selector-3">Not Configured</value>
        <value selector="EnumerateAdministratorAccountsOnElevation_var-selector-4">Not Configured</value>
      </Value>
      <Value id="RequireTrustedPathForCredentialEntry_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="RequireTrustedPathForCredentialEntry_var-selector">Not Configured</value>
      </Value>
      <Value id="DoNotDisplayThePasswordRevealButton_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="CredentialUserInterface_SetDoNotDisplayThePasswordRevealButton" xml:lang="en" selected="false">
        <title xml:lang="en">Credential User Interface: Set Do not display the password reveal button</title>
        <description xml:lang="en">This policy setting allows you to configure the display of the password reveal button in password entry user experiences.</description>
        <rationale xml:lang="en">This is a useful feature when entering a long and complex password, especially when using a touchscreen. The potential risk is that someone else may see your password while surreptitiously observing your screen.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-32965-6</ident>
        <fixtext fixref="F-CredentialUserInterface_SetDoNotDisplayThePasswordRevealButton_fix">
          To establish the recommended configuration via GP, set the following UI path to Not Configured.
          Computer Configuration\Administrative Templates\Windows Components\Credential User Interface\Do not display the password reveal button
        </fixtext>
        <fix id="F-CredentialUserInterface_SetDoNotDisplayThePasswordRevealButton_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotDisplayThePasswordRevealButton_var" export-name="oval:com.mcafee.oval:var:1413924" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1413915" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-CredentialUserInterface_EnumerateAdministratorAccountsOnElevation" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Credential User Interface: Enumerate administrator accounts on elevation</title>
        <description xml:lang="en">This policy setting determines whether all local administrator accounts on the machine will be displayed so the user can choose one and enter the correct password.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnumerateAdministratorAccountsOnElevation_var" export-name="oval:com.mcafee.oval:var:59459" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6575" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-CredentialUserInterface_RequireTrustedPathForCredentialEntry" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Credential User Interface: Require trusted path for credential entry</title>
        <description xml:lang="en">This policy setting requires the user to enter Microsoft Windows credentials using a trusted path, to prevent a Trojan horse or other types of malicious code from stealing the user’s Windows credentials.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequireTrustedPathForCredentialEntry_var" export-name="oval:com.mcafee.oval:var:79476" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101093" />
        </check>
      </Rule>
    </Group>
    <Group id="Control-Panel" xml:lang="en">
      <title xml:lang="en">Control Panel</title>
      <Group id="Personalization" xml:lang="en">
        <title xml:lang="en">Personalization</title>
        <Value id="ForceASpecificStartBackground_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">99999</value>
          <value selector="ForceASpecificStartBackground_var-selector-0">99999</value>
          <value selector="ForceASpecificStartBackground_var-selector-1">99999</value>
          <value selector="ForceASpecificStartBackground_var-selector-2">99999</value>
        </Value>
        <Value id="PreventEnablingLockScreenCamera_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">1</value>
          <value selector="PreventEnablingLockScreenCamera_var-selector-0">1</value>
          <value selector="PreventEnablingLockScreenCamera_var-selector-1">1</value>
          <value selector="PreventEnablingLockScreenCamera_var-selector-2">1</value>
        </Value>
        <Value id="PreventEnablingLockScreenSlideShow_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">1</value>
          <value selector="PreventEnablingLockScreenSlideShow_var-selector-0">1</value>
          <value selector="PreventEnablingLockScreenSlideShow_var-selector-1">1</value>
          <value selector="PreventEnablingLockScreenSlideShow_var-selector-2">1</value>
        </Value>
        <Value id="PersonalizationConfigureScreenSaver_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">1</value>
        </Value>
        <Value id="ConfigureForceSpecificScreenSaver_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">scrnsave.scr</value>
        </Value>
        <Value id="ConfigurePasswordProtectTheScreenSaver_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">1</value>
        </Value>
        <Value id="ConfigureScreenSaverTimeout_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">900</value>
        </Value>
        <Rule id="Personalization_SetEnableScreenSaver" xml:lang="en" selected="false">
          <title xml:lang="en">Personalization: Set Enable screen saver</title>
          <description xml:lang="en">This policy setting allows you to manage whether or not screen savers run. If the Screen Saver setting is disabled screen savers do not run and the screen saver section of the Screen Saver tab in Display in Control Panel is disabled. If this setting is enabled a screen saver will run if the following two conditions are met: first, that a valid screen saver is specified on the client via the Screen Saver Executable Name group policy setting or Control Panel on the client. Second, the screensaver timeout is set to a value greater than zero via the Screen Saver Timeout group policy setting or Control Panel on the client. The recommended state for this setting is: Enabled.</description>
          <rationale xml:lang="en">If a user forgets to lock their computer when they walk away its possible that a passerby will hijack it.</rationale>
          <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33164-5</ident>
          <fixtext fixref="F-Personalization_SetEnableScreenSaver_fix">
            To establish the recommended configuration via GP, set the following UI path to Enabled. User Configuration\Administrative Templates\Control Panel\Personalization\Enable screen saver
          </fixtext>
          <fix id="F-Personalization_SetEnableScreenSaver_fix"/>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="PersonalizationConfigureScreenSaver_var" export-name="oval:com.mcafee.oval:var:525500" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:525499" />
          </check>
        </Rule>
        <Rule id="Personalization_SetForceSpecificScreenSaver" xml:lang="en" selected="false">
          <title xml:lang="en">Personalization: Set Force specific screen saver</title>
          <description xml:lang="en">This policy setting allows you to manage whether or not screen savers run. If the Screen Saver setting is disabled screen savers do not run and the screen saver section of the Screen Saver tab in Display in Control Panel is disabled. If this setting is enabled a screen saver will run if the following two conditions are met: first, that a valid screen saver is specified on the client via the Screen Saver Executable Name group policy setting or Control Panel on the client. Second, the screensaver timeout is set to a value greater than zero via the Screen Saver Timeout group policy setting or Control Panel on the client. The recommended state for this setting is: Enabled:scrnsave.scr.</description>
          <rationale xml:lang="en">If a user forgets to lock their computer when they walk away its possible that a passerby will hijack it.</rationale>
          <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33105-8</ident>
          <fixtext xml:lang="en" fixref="F-Personalization_SetForceSpecificScreenSaver_fix" reboot="false" strategy="unknown" disruption="unknown" complexity="unknown">To implement the recommended configuration state, set the following Group Policy setting to Enabled.
            To establish the recommended configuration via GP, set the following UI path to Enabled. User Configuration\Administrative Templates\Control Panel\Personalization\Force specific screen saver</fixtext>
          <fix id="F-Personalization_SetForceSpecificScreenSaver_fix" />
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="ConfigureForceSpecificScreenSaver_var" export-name="oval:com.mcafee.oval:var:529473" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:526832" />
          </check>
        </Rule>
        <Rule id="Personalization_SetPasswordProtectTheScreenSaver" xml:lang="en" selected="false">
          <title xml:lang="en">Personalization: Set Password protect the screen saver</title>
          <description xml:lang="en">If the Password protect the screen saver setting is enabled, then all screen savers are password protected, if it is disabled then password protection cannot be set on any screen saver. The recommended state for this setting is: Enabled.</description>
          <rationale xml:lang="en">If a user forgets to lock their computer when they walk away its possible that a passerby will hijack it.</rationale>
          <ident system="http%3A%2F%2Fcce.mitre.org">CCE-32938-3</ident>
          <fixtext fixref="F-Personalization_SetPasswordProtectTheScreenSaver_fix">
            To establish the recommended configuration via GP, set the following UI path to Enabled. User Configuration\Administrative Templates\Control Panel\Personalization\Password protect the screen saver
          </fixtext>
          <fix id="F-Personalization_SetPasswordProtectTheScreenSaver_fix"/>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="ConfigurePasswordProtectTheScreenSaver_var" export-name="oval:com.mcafee.oval:var:526811" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:526810" />
          </check>
        </Rule>
        <Rule id="Personalization_SetScreenSaverTimeout" xml:lang="en" selected="false">
          <title xml:lang="en">Personalization: Set Screen saver timeout</title>
          <description xml:lang="en">If the Screen Saver Timeout setting is enabled, then the screen saver will be launched when the specified amount of time has passed since the last user action. Valid values range from 1 to 89,400 seconds (24 hours). The setting has no effect if the wait time is set to zero or no screen saver has been specified. The recommended state for this setting is: Enabled:900 seconds or fewer. A value of 0 does not conform with the benchmark.</description>
          <rationale xml:lang="en">If a user forgets to lock their computer when they walk away its possible that a passerby will hijack it.</rationale>
          <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33168-6</ident>
          <fixtext fixref="F-Personalization_SetScreenSaverTimeout_fix">
            To establish the recommended configuration via GP, set the following UI path to Enabled.
            User Configuration\Administrative Templates\Control Panel\Personalization\Screen saver timeout
          </fixtext>
          <fix id="F-Personalization_SetScreenSaverTimeout_fix"/>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="ConfigureScreenSaverTimeout_var" export-name="oval:com.mcafee.oval:var:525512" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:525511" />
          </check>
        </Rule>
        <Rule id="ControlPanel-PersonalizationForceASpecificStartBackground" xml:lang="en" selected="false">
          <title xml:lang="en">Control Panel - Personalization: Force a specific Start background</title>
          <description xml:lang="en">This policy setting forces the Start screen to use one of the available backgrounds, which users cannot change. If this setting is set to zero or not configured, then Start uses the default background, and users can change it.</description>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="ForceASpecificStartBackground_var" export-name="oval:com.mcafee.oval:var:244549" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:215828" />
          </check>
        </Rule>
        <Rule id="ControlPanel-PersonalizationPreventEnablingLockScreenCamera" xml:lang="en" selected="false">
          <title xml:lang="en">Control Panel - Personalization: Prevent enabling lock screen camera</title>
          <description xml:lang="en">This policy setting disables the lock screen camera toggle switch in PC Settings and prevents a camera from being invoked on the lock screen.</description>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="PreventEnablingLockScreenCamera_var" export-name="oval:com.mcafee.oval:var:244550" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:215829" />
          </check>
        </Rule>
        <Rule id="ControlPanel-PersonalizationPreventEnablingLockScreenSlideShow" xml:lang="en" selected="false">
          <title xml:lang="en">Control Panel - Personalization: Prevent enabling lock screen slide show</title>
          <description xml:lang="en">This policy setting disables the lock screen slide show settings in PC Settings and prevents a slide show from playing on the lock screen.</description>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="PreventEnablingLockScreenSlideShow_var" export-name="oval:com.mcafee.oval:var:244551" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:215830" />
          </check>
        </Rule>
      </Group>
    </Group>
    <Group id="DataCollectionandPreviewBuilds" xml:lang="en">
      <title xml:lang="en">Data Collection and Preview Builds</title>
      <Value id="AllowTelemetry_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>  
      <Value id="Disableprereleasefeaturesorsettings_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="Donotshowfeedbacknotifications_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ToggleusercontroloverInsiderbuilds_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="DataCollectionandPreviewBuilds_SetAllowTelemetry" xml:lang="en" selected="false">
        <title xml:lang="en">Data Collection and Preview Builds: Set Allow Telemetry</title>
        <description xml:lang="en">This policy setting determines the amount of diagnostic and usage data reported to Microsoft.</description>
        <rationale>
          Sending any data to a 3rd party vendor is a security concern and should only be done on an as needed basis.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41400-3</ident>
        <fixtext fixref="F-DataCollectionandPreviewBuilds_SetAllowTelemetry_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 0 - Security [Enterprise Only]: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Data Collection and Preview Builds\Allow Telemetry
        </fixtext>
        <fix id="F-DataCollectionandPreviewBuilds_SetAllowTelemetry_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowTelemetry_var" export-name="oval:com.mcafee.oval:var:2486257" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486256" />
        </check>
      </Rule>
      <Rule id="DataCollectionandPreviewBuilds_SetDisableprereleasefeaturesorsettings" xml:lang="en" selected="false">
        <title xml:lang="en">Data Collection and Preview Builds: Set Disable pre-release features or settings</title>
        <description xml:lang="en">This policy setting determines the level that Microsoft can experiment with the product to study user preferences or device behavior.</description>
        <rationale>
          It can be dangerous in an Enterprise environment if experimental features are allowed because this can introduce bugs and security holes into systems, making it easier for an attacker to gain access.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41379-9</ident>
        <fixtext fixref="F-DataCollectionandPreviewBuilds_SetDisableprereleasefeaturesorsettings_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Data Collection and Preview Builds\Disable pre-release features or settings
        </fixtext>
        <fix id="F-DataCollectionandPreviewBuilds_SetDisableprereleasefeaturesorsettings_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Disableprereleasefeaturesorsettings_var" export-name="oval:com.mcafee.oval:var:2486265" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486264" />
        </check>
      </Rule>
      <Rule id="DataCollectionandPreviewBuilds_Donotshowfeedbacknotifications" xml:lang="en" selected="false">
        <title xml:lang="en">Data Collection and Preview Builds: Do not show feedback notifications</title>
        <description xml:lang="en">This policy setting allows an organization to prevent its devices from showing feedback questions from Microsoft.
          The recommended state for this setting is: Enabled.</description>
        <rationale>
          In an enterprise environment users should not be sending any feedback to 3rd party vendors.
        </rationale>
        <fixtext fixref="F-DataCollectionandPreviewBuilds_Donotshowfeedbacknotifications_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Data Collection and Preview Builds\Do not show feedback notifications
        </fixtext>
        <fix id="F-DataCollectionandPreviewBuilds_Donotshowfeedbacknotifications_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Donotshowfeedbacknotifications_var" export-name="oval:com.mcafee.oval:var:2894796" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894795" />
        </check>
      </Rule>
      <Rule id="DataCollectionandPreviewBuilds_SetToggleusercontroloverInsiderbuilds" xml:lang="en" selected="false">
        <title xml:lang="en">Data Collection and Preview Builds: Set Toggle user control over Insider builds</title>
        <description xml:lang="en">This policy setting determines whether users can access the Insider build controls in the Advanced Options for Windows Update.</description>
        <rationale>
          It can be dangerous in an Enterprise environment if experimental features are allowed because this can introduce bugs and security holes into systems allowing an attacker to gain access.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41380-7</ident>
        <fixtext fixref="F-DataCollectionandPreviewBuilds_SetToggleusercontroloverInsiderbuilds_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Data Collection and Preview Builds\Toggle user control over Insider builds
        </fixtext>
        <fix id="F-DataCollectionandPreviewBuilds_SetToggleusercontroloverInsiderbuilds_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ToggleusercontroloverInsiderbuilds_var" export-name="oval:com.mcafee.oval:var:2486273" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486272" />
        </check>
      </Rule>
    </Group>
    <Group id="DeliveryOptimization" xml:lang="en">
      <title xml:lang="en">Delivery Optimization</title>
      <Value id="DownloadMode_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="DeliveryOptimization_SetDownloadMode" xml:lang="en" selected="false">
        <title xml:lang="en">Delivery Optimization: Set Download Mode</title>
        <description xml:lang="en">This policy setting determines the use of Windows Update Delivery Optimization in downloads of Windows Apps and Updates.</description>
        <rationale>
          Do to privacy concerns and security risks, updates should only be downloaded from a trusted machine on the internal network that received its updates from a trusted source and approved by the network administrator.
        </rationale>
        <fixtext fixref="F-DeliveryOptimization_SetDownloadMode_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: None or LAN or Group or Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Delivery Optimization\Download Mode
        </fixtext>
        <fix id="F-DeliveryOptimization_SetDownloadMode_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DownloadMode_var" export-name="oval:com.mcafee.oval:var:2486281" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486280" />
        </check>
      </Rule>
    </Group>
    <Group id="DeviceInstallation" xml:lang="en">
      <title xml:lang="en">Device Installation</title>
      <Value id="AllowRemoteAccessToThePnPInterface_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="DoNotCreateSystemRestorePoint_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="DoNotSendAWindowsErrorReportWhenAGenericDriverIsInstalledOnADevice-Variable_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SelectUpdateServer_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClasses_var2" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="PreventInstallationOfDevicesUsingDriversForTheseDeviceSetup_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">{d48179be-ec20-11d1-b6b8-00c04fa372a7}</value>
      </Value>
      <Value id="AlsoApplyToMatchingDevicesThatAreAlreadyInstalled_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="PreventinstallationofdevicesthatmatchanyofthesedeviceIDs" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="Alsoapplytomatchingdevicesthatarealreadyinstalled" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="SetPreventinstallationofdevicesthatmatchanyofthesedeviceIDs" xml:lang="en" selected="false">
        <title xml:lang="en">Set Prevent installation of devices that match any of these device IDs</title>
        <description xml:lang="en">This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is prevented from installing.</description>
        <rationale>
          A BitLocker-protected computer may be vulnerable to Direct Memory Access (DMA) attacks when the computer is turned on or is in the Standby power state. This includes when the desktop is locked.
          BitLocker with TPM-only authentication lets a computer enter the power-on state without any pre-boot authentication. Therefore, an attacker may be able to perform DMA attacks.
          This issue is documented in Microsoft Knowledge Base article 2516445: Blocking the SBP-2 driver and Thunderbolt controllers to reduce 1394 DMA and Thunderbolt DMA threats to BitLocker.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35360-7</ident>
        <fixtext fixref="F-SetPreventinstallationofdevicesthatmatchanyofthesedeviceIDs_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\System\Device Installation\Device Installation Restrictions\Prevent installation of devices that match any of these device IDs
        </fixtext>
        <fix id="F-SetPreventinstallationofdevicesthatmatchanyofthesedeviceIDs_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventinstallationofdevicesthatmatchanyofthesedeviceIDs" export-name="oval:com.mcafee.oval:var:1415786" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415785" />
        </check>
      </Rule>
      <Rule id="SetPreventinstallationofdevicesthatmatchanyofthesedeviceIDs_Alsoapplytomatchingdevicesthatarealreadyinstalled" xml:lang="en" selected="false">
        <title xml:lang="en">Set Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed</title>
        <description xml:lang="en">This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is prevented from installing.</description>
        <rationale>
          A BitLocker-protected computer may be vulnerable to Direct Memory Access (DMA) attacks when the computer is turned on or is in the Standby power state. This includes when the desktop is locked.
          BitLocker with TPM-only authentication lets a computer enter the power-on state without any pre-boot authentication. Therefore, an attacker may be able to perform DMA attacks.
          This issue is documented in Microsoft Knowledge Base article 2516445: Blocking the SBP-2 driver and Thunderbolt controllers to reduce 1394 DMA and Thunderbolt DMA threats to BitLocker.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35360-7</ident>
        <fixtext fixref="F-SetPreventinstallationofdevicesthatmatchanyofthesedeviceIDs_Alsoapplytomatchingdevicesthatarealreadyinstalled_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled, and check the Also apply to matching devices that are already installed. checkbox: 
          Computer Configuration\Policies\Administrative Templates\System\Device Installation\Device Installation Restrictions\Prevent installation of devices that match any of these device IDs
        </fixtext>
        <fix id="F-SetPreventinstallationofdevicesthatmatchanyofthesedeviceIDs_Alsoapplytomatchingdevicesthatarealreadyinstalled_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Alsoapplytomatchingdevicesthatarealreadyinstalled" export-name="oval:com.mcafee.oval:var:1415794" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415793" />
        </check>
      </Rule>
      <Rule id="DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClasses" xml:lang="en" selected="false">
        <title xml:lang="en">Device Installation Restrictions- Prevent installation of devices using drivers that match these device setup classes</title>
        <description xml:lang="en">This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is prevented from installing.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
          A BitLocker-protected computer may be vulnerable to Direct Memory Access (DMA) attacks when the computer is turned on or is in the Standby power state. This includes when the desktop is locked. BitLocker with TPM-only authentication lets a computer enter the power-on state without any pre-boot authentication. Therefore, an attacker may be able to perform DMA attacks.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34254-3</ident>
        <fixtext fixref="F-DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClasses_fix">
          To establish the recommended configuration via GP:
          1. Set the following UI path to Enabled 
          Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions\Prevent installation of devices using drivers that match these device setup classes
        </fixtext>
        <fix id="F-DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClasses_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClasses_var2" export-name="oval:com.mcafee.oval:var:1137027" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1137024" />
        </check>
      </Rule>
      <Rule id="DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClassesPreventInstallationOfDevicesUsingDriversForTheseDeviceSetup" xml:lang="en" selected="false">
        <title xml:lang="en">Device Installation Restrictions - Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup</title>
        <description xml:lang="en">This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is prevented from installing.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
          A BitLocker-protected computer may be vulnerable to Direct Memory Access (DMA) attacks when the computer is turned on or is in the Standby power state. 
          This includes when the desktop is locked. BitLocker with TPM-only authentication lets a computer enter the power-on state without any pre-boot authentication. Therefore, an attacker may be able to perform DMA attacks.
        </rationale>
        <fixtext fixref="F-DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClassesPreventInstallationOfDevicesUsingDriversForTheseDeviceSetup_fix">
          To establish the recommended configuration via GP:
          1. Set the following UI path to Enabled
          Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions\Prevent installation of devices using drivers that match these device setup classes
          2. Add {d48179be-ec20-11d1-b6b8-00c04fa372a7} to the GUID list
        </fixtext>
        <fix id="F-DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClassesPreventInstallationOfDevicesUsingDriversForTheseDeviceSetup_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventInstallationOfDevicesUsingDriversForTheseDeviceSetup_var" export-name="oval:com.mcafee.oval:var:1137033" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1137030" />
        </check>
      </Rule>
      <Rule id="DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClassesAlsoApplyToMatchingDevicesThatAreAlreadyInstalled" xml:lang="en" selected="false">
        <title xml:lang="en">Device Installation Restrictions - Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed</title>
        <description xml:lang="en">This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is prevented from installing.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
          A BitLocker-protected computer may be vulnerable to Direct Memory Access (DMA) attacks when the computer is turned on or is in the Standby power state. This includes when the desktop is locked. 
          BitLocker with TPM-only authentication lets a computer enter the power-on state without any pre-boot authentication. Therefore, an attacker may be able to perform DMA attacks.
        </rationale>
        <fixtext fixref="F-DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClassesAlsoApplyToMatchingDevicesThatAreAlreadyInstalled_fix">
          To establish the recommended configuration via GP:
          1. Set the following UI path to Enabled 
          Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions\Prevent installation of devices using drivers that match these device setup classes
          2. Check the "Also apply to matching devices that are already installed" check box.
        </fixtext>
        <fix id="F-DeviceInstallationRestrictions-PreventInstallationOfDevicesUsingDriversThatMatchTheseDeviceSetupClassesAlsoApplyToMatchingDevicesThatAreAlreadyInstalled_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AlsoApplyToMatchingDevicesThatAreAlreadyInstalled_var" export-name="oval:com.mcafee.oval:var:1137048" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1137045" />
        </check>
      </Rule>
      <Rule id="System-DeviceInstallation_AllowRemoteAccessToThePnPInterface" xml:lang="en" selected="false">
        <title xml:lang="en">System - Device Installation: Allow remote access to the PnP interface</title>
        <description xml:lang="en">This policy setting determines whether or not remote access to the Plug and Play interface is allowed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowRemoteAccessToThePnPInterface_var" export-name="oval:com.mcafee.oval.windows:var:6667" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6667" />
        </check>
      </Rule>
      <Rule id="System-DeviceInstallation_DoNotCreateSystemRestorePointWhenNewDeviceDriverInstalled" xml:lang="en" selected="false">
        <title xml:lang="en">System - Device Installation: Do not create system restore point when new device driver installed</title>
        <description xml:lang="en">This policy setting determines whether or not a system restore point is created when a new device driver is installed on your machine.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotCreateSystemRestorePoint_var" export-name="oval:com.mcafee.oval.windows:var:6668" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6668" />
        </check>
      </Rule>
      <Rule id="System-DeviceInstallation_DoNotSendAWindowsErrorReportWhenAGenericDriverIsInstalled" xml:lang="en" selected="false">
        <title xml:lang="en">System - Device Installation: Do not send a Windows Error Report when a generic driver is installed</title>
        <description xml:lang="en">This policy setting determines whether or not to send a Windows Error Report when a generic driver is installed on a device.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotSendAWindowsErrorReportWhenAGenericDriverIsInstalledOnADevice-Variable_var" export-name="oval:com.mcafee.oval.1:var:6669" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6669" />
        </check>
      </Rule>
      <Rule id="System-DeviceInstallation_SpecifyTheSearchServerForDeviceDriverUpdates" xml:lang="en" selected="false">
        <title xml:lang="en">System - Device Installation: Specify the search server for device driver updates</title>
        <description xml:lang="en">This policy setting allows you to specify the search server that Windows uses to find updates for device drivers.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SelectUpdateServer_var" export-name="oval:com.mcafee.oval:var:230083" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:230000" />
        </check>
      </Rule>
    </Group>
    <Group id="DigitalLocker" xml:lang="en">
      <title xml:lang="en">Digital Locker</title>
      <Value id="DoNotAllowDigitalLockerToRun_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="WindowsComponents-DigitalLocker_DoNotAllowDigitalLockerToRun" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Digital Locker: Do not allow Digital Locker to run</title>
        <description xml:lang="en">This policy setting determines whether Digital Locker can run.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowDigitalLockerToRun_var" export-name="oval:com.mcafee.oval:var:59468" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6698" />
        </check>
      </Rule>
    </Group>
    <Group id="DriverInstallation" xml:lang="en">
      <title xml:lang="en">Driver Installation</title>
      <Value id="TurnOffWindowsUpdateDeviceDriverSearchPrompt_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="System-DriverInstallation_TurnOffWindowsUpdateDeviceDriverSearchPrompt" xml:lang="en" selected="false">
        <title xml:lang="en">System - Driver Installation: Turn Off Windows Update Device Driver Search Prompt</title>
        <description xml:lang="en">This policy setting determines whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffWindowsUpdateDeviceDriverSearchPrompt_var" export-name="oval:com.mcafee.oval.1:var:6670" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6670" />
        </check>
      </Rule>
    </Group>
    <Group id="EarlyLaunchAntimalware" xml:lang="en">
      <title xml:lang="en">Early Launch Antimalware</title>
      <Value id="Boot-StartDriverInitializationPolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">3</value>
      </Value>
      <Rule id="EarlyLaunchAntimalware_Boot-StartDriverInitializationPolicy" xml:lang="en" selected="false">
        <title xml:lang="en">Early Launch Antimalware: Boot-Start Driver Initialization Policy</title>
        <description xml:lang="en">This policy setting allows you to specify which boot-start drivers are initialized based on a classification determined by an Early Launch Antimalware boot-start driver.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Boot-StartDriverInitializationPolicy_var" export-name="oval:com.mcafee.oval:var:244471" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215777" />
        </check>
      </Rule>
    </Group>
    <Group id="EventLogPolicy" xml:lang="en">
      <title xml:lang="en">Event Log Policy</title>
      <Value id="ApplicationLogSize_inBytes__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">83886080</value>
        <value selector="ApplicationLogSize_inBytes__var-selector-1">16777216</value>
        <value selector="ApplicationLogSize_inBytes__var-selector-4">16777216</value>
        <value selector="ApplicationLogSize_inBytes__var-selector-7">16777216</value>
      </Value>
      <Value id="RestrictGuestAccessToApplicationLog_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ApplicationLogRetentionMethod_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="SecurityLogSize_inBytes__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">83886080</value>
      </Value>
      <Value id="RestrictGuestAccessToSecurityLog_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SecurityLogRetentionMethod_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="SystemLogSize_inBytes__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">83886080</value>
        <value selector="SystemLogSize_inBytes__var-selector-1">16777216</value>
        <value selector="SystemLogSize_inBytes__var-selector-4">16777216</value>
        <value selector="SystemLogSize_inBytes__var-selector-7">16777216</value>
      </Value>
      <Value id="RestrictGuestAccessToSystemLog_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SystemLogRetentionMethod_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ApplicationLogRetainOldEvents_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WhatShouldTheMaximumSize_KB_BeForTheApplicationLog_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">32768</value>
        <value selector="WhatShouldTheMaximumSize_KB_BeForTheApplicationLog_var-selector">20480</value>
      </Value>
      <Value id="SecurityLogRetainOldEvents_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">81920</value>
        <value selector="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var-selector">20480</value>
        <value selector="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var-selector-0">196608</value>
        <value selector="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var-selector-1">196608</value>
      </Value>
      <Value id="SystemLogRetainOldEvents_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WhatShouldTheMaximumSize_KB_BeForTheSystemLog_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">32768</value>
        <value selector="WhatShouldTheMaximumSize_KB_BeForTheSystemLog_var-selector">20480</value>
      </Value>
      <Value id="WhatShouldTheMaximumSize_KB_BeForTheSetupLog_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">32768</value>
      </Value>
      <Rule id="EventLog_MaximumApplicationLogSize" xml:lang="en" selected="false">
        <title xml:lang="en">Event Log: Maximum Application Log size</title>
        <description xml:lang="en">This setting determines the maximum size the Application Log can be.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplicationLogSize_inBytes__var" export-name="oval:com.mcafee.oval.windows:var:16" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:197" />
        </check>
      </Rule>
      <Rule id="EventLog_RestrictGuestAccessToTheApplicationLog" xml:lang="en" selected="false">
        <title xml:lang="en">Event Log: Restrict guest access to the Application Log</title>
        <description xml:lang="en">By default, "Guest" and unauthenticated users can read the Windows NT Application Event Log (AppEvent.Evt) from the network.  Event logs could provide sensitive information to anyone who has logged on as guest or as an unauthenticated user.  A regular user can still read the application event logs.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RestrictGuestAccessToApplicationLog_var" export-name="oval:com.mcafee.oval.windows:var:6509" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6509" />
        </check>
      </Rule>
      <Rule id="EventLog_RetentionMethodForTheApplicationLog" xml:lang="en" selected="false">
        <title xml:lang="en">Event Log: Retention method for the Application Log</title>
        <description xml:lang="en">This setting determines how long to keep entries in the Application Log before being overwritten.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplicationLogRetentionMethod_var" export-name="oval:com.mcafee.oval.windows:var:259" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:203" />
        </check>
      </Rule>
      <Rule id="EventLog_MaximumSecurityLogSize" xml:lang="en" selected="false">
        <title xml:lang="en">Event Log: Maximum Security Log size</title>
        <description xml:lang="en">This setting determines the maximum size the Security Log can be.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SecurityLogSize_inBytes__var" export-name="oval:com.mcafee.oval.windows:var:81" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:198" />
        </check>
      </Rule>
      <Rule id="EventLog_RestrictGuestAccessToTheSecurityLog" xml:lang="en" selected="false">
        <title xml:lang="en">Event Log: Restrict guest access to the Security Log</title>
        <description xml:lang="en">"Guest" and unauthenticated users may be able to read the Security Event (SecEvent.Evt) log.  Event logs could provide sensitive information to a hacker who has logged on as guest or as an unauthenticated user.  A regular user or group cannot read the security event logs unless he/she is part of the "Manage auditing and security logs" user rights.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RestrictGuestAccessToSecurityLog_var" export-name="oval:com.mcafee.oval.windows:var:6511" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6511" />
        </check>
      </Rule>
      <Rule id="EventLog_RetentionMethodForTheSecurityLog" xml:lang="en" selected="false">
        <title xml:lang="en">Event Log: Retention method for the Security Log</title>
        <description xml:lang="en">This setting determines how long to keep entries in the Security Log before being overwritten.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SecurityLogRetentionMethod_var" export-name="oval:com.mcafee.oval.windows:var:260" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:204" />
        </check>
      </Rule>
      <Rule id="EventLog_MaximumSystemLogSize" xml:lang="en" selected="false">
        <title xml:lang="en">Event Log: Maximum System Log size</title>
        <description xml:lang="en">This setting determines the maximum size the System Log can be.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SystemLogSize_inBytes__var" export-name="oval:com.mcafee.oval.windows:var:84" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:199" />
        </check>
      </Rule>
      <Rule id="EventLog_RestrictGuestAccessToTheSystemLog" xml:lang="en" selected="false">
        <title xml:lang="en">Event Log: Restrict guest access to the System Log</title>
        <description xml:lang="en">By default, "Guest" and unauthenticated users can read the System Event (SysEvent.Evt) logs.  Event logs could provide sensitive information to a hacker who has logged on as guest or as an unauthenticated user.  A regular user can still read the system event logs.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RestrictGuestAccessToSystemLog_var" export-name="oval:com.mcafee.oval.windows:var:6510" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6510" />
        </check>
      </Rule>
      <Rule id="EventLog_RetentionMethodForTheSystemLog" xml:lang="en" selected="false">
        <title xml:lang="en">Event Log: Retention method for the System Log</title>
        <description xml:lang="en">This setting determines how long to keep entries in the System Log before being overwritten.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SystemLogRetentionMethod_var" export-name="oval:com.mcafee.oval.windows:var:261" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:205" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-EventLogService-Application_RetainOldEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Event Log Service - Application: Retain old events</title>
        <description xml:lang="en">This policy setting controls Event Log behavior when the Application Log file reaches its maximum size.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplicationLogRetainOldEvents_var" export-name="oval:com.mcafee.oval:var:79469" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101086" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-EventLogService-Application_MaximumLogSize_KB_" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Event Log Service - Application: Maximum Log Size (KB)</title>
        <description xml:lang="en">This policy setting specifies the maximum size of the Application log file in kilobytes.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatShouldTheMaximumSize_KB_BeForTheApplicationLog_var" export-name="oval:com.mcafee.oval:var:79479" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101094" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-EventLogService-Security_RetainOldEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Event Log Service - Security: Retain old events</title>
        <description xml:lang="en">This policy setting controls Event Log behavior when the Security Log file reaches its maximum size.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SecurityLogRetainOldEvents_var" export-name="oval:com.mcafee.oval:var:79470" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101087" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-EventLogService-Security_MaximumLogSize_KB_" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Event Log Service - Security: Maximum Log Size (KB)</title>
        <description xml:lang="en">This policy setting specifies the maximum size of the Security log file in kilobytes.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatShouldTheMaximumSize_KB_BeForTheSecurityLog_var" export-name="oval:com.mcafee.oval:var:79480" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101095" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-EventLogService-System_RetainOldEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Event Log Service - System: Retain old events</title>
        <description xml:lang="en">This policy setting controls Event Log behavior when the System Log file reaches its maximum size.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SystemLogRetainOldEvents_var" export-name="oval:com.mcafee.oval:var:79471" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101088" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-EventLogService-System_MaximumLogSize_KB_" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Event Log Service - System: Maximum Log Size (KB)</title>
        <description xml:lang="en">This policy setting specifies the maximum size of the System log file in kilobytes.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatShouldTheMaximumSize_KB_BeForTheSystemLog_var" export-name="oval:com.mcafee.oval:var:79481" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101096" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-EventLogService-Setup_MaximumLogSize_KB_" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Event Log Service - Setup: Maximum Log Size (KB)</title>
        <description xml:lang="en">This policy setting specifies the maximum size of the Setup log file in kilobytes.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatShouldTheMaximumSize_KB_BeForTheSetupLog_var" export-name="oval:com.mcafee.oval:var:79482" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101097" />
        </check>
      </Rule>
    </Group>
    <Group id="GameExplorer" xml:lang="en">
      <title xml:lang="en">Game Explorer</title>
      <Value id="TurnOffDownloadingOfGameInformation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="WindowsComponents-GameExplorer_TurnOffDownloadingOfGameInformation" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Game Explorer: Turn Off Downloading of Game Information</title>
        <description xml:lang="en">This policy setting determines whether game information including box art and ratings will not be downloaded.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffDownloadingOfGameInformation_var" export-name="oval:com.mcafee.oval:var:59469" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6703" />
        </check>
      </Rule>
    </Group>
    <Group id="GroupPolicy" xml:lang="en">
      <title xml:lang="en">Group Policy</title>
      <Value id="RegistryPolicyProcessing_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="RegistryPolicyProcessing_var-selector">ProcessGPOs</value>
      </Value>
      <Value id="SlowLinkDetectionConnectionSpeed_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="SlowLinkDetectionConnectionSpeed_var-selector-0">99999</value>
        <value selector="SlowLinkDetectionConnectionSpeed_var-selector-1">99999</value>
        <value selector="SlowLinkDetectionConnectionSpeed_var-selector-2">99999</value>
      </Value>
      <Value id="ConfigureLogonScriptDelay_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="ConfigureLogonScriptDelay_var-selector-0">99999</value>
        <value selector="ConfigureLogonScriptDelay_var-selector-1">99999</value>
        <value selector="ConfigureLogonScriptDelay_var-selector-2">99999</value>
      </Value>
      <Value id="CachingForServers-SlowLinkValue_milliseconds__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="CachingForServers-SlowLinkValue_milliseconds__var-selector-0">99999</value>
        <value selector="CachingForServers-SlowLinkValue_milliseconds__var-selector-1">99999</value>
        <value selector="CachingForServers-SlowLinkValue_milliseconds__var-selector-2">99999</value>
      </Value>
      <Value id="CachingForServers-TimeoutValue_milliseconds__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="CachingForServers-TimeoutValue_milliseconds__var-selector-0">99999</value>
        <value selector="CachingForServers-TimeoutValue_milliseconds__var-selector-1">99999</value>
        <value selector="CachingForServers-TimeoutValue_milliseconds__var-selector-2">99999</value>
      </Value>
      <Value id="SlowLinkDetection-WWANConnection_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="SlowLinkDetection-WWANConnection_var-selector-0">Not Configured</value>
        <value selector="SlowLinkDetection-WWANConnection_var-selector-1">Not Configured</value>
        <value selector="SlowLinkDetection-WWANConnection_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DoNotApplyDuringPeriodicBackgroundProcessing_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>   
      <Value id="ProcessEvenIfTheGroupPolicyObjectsHaveNotChanged_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ContinueExperiencesOnThisDevice._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="TurnOffBackgroundRefreshOfGroupPolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="GroupPolicy_Loggingandtracing" xml:lang="en" selected="false" role="unscored">
        <title xml:lang="en">Group Policy: Logging and tracing</title>
        <description xml:lang="en">This section is intentionally blank and exists to ensure the structure of Windows benchmarks is consistent.</description>
      </Rule>
      <Rule id="GroupPolicy_ConfigureDoNotApplyDuringPeriodicBackgroundProcessing" xml:lang="en" selected="false">
        <title xml:lang="en">Group Policy: Configure Do not apply during periodic background processing</title>
        <description xml:lang="en">This policy setting determines when registry policies are updated. It affects all policies in the Administrative Templates folder, and any other policies that store values in the registry.</description>
        <rationale>
          You can enable this setting and then select the Process even if the Group Policy objects have not changed option to ensure that the policies will be reprocessed even if none have been changed. 
          This way, any unauthorized changes that might have been configured locally are forced to match the domain based Group Policy settings again.
        </rationale> 
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35384-7</ident>  
        <fixtext fixref="F-GroupPolicy_ConfigureDoNotApplyDuringPeriodicBackgroundProcessing_fix">
          Configure the following Group Policy setting in a manner that is consistent with the security and operational requirements of your organization: 
          Computer Configuration\Administrative Templates\System\Group Policy:Do not apply during periodic background processing
        </fixtext>
        <fix id="F-GroupPolicy_ConfigureDoNotApplyDuringPeriodicBackgroundProcessing_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotApplyDuringPeriodicBackgroundProcessing_var" export-name="oval:com.mcafee.oval:var:525446" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:525437" />
        </check>
      </Rule>   
      <Rule id="GroupPolicy_ConfigureProcessEvenIfTheGroupPolicyObjectsHaveNotChanged" xml:lang="en" selected="false">
        <title xml:lang="en">Group Policy: Configure Process even if the Group Policy objects have not changed</title>
        <description xml:lang="en">This policy setting ensures that the policies will be reprocessed even if none have been changed.</description>
        <rationale>
          You can enable this setting and then select the Process even if the Group Policy objects have not changed option to ensure that the policies will be reprocessed even if none have been changed. 
          This way, any unauthorized changes that might have been configured locally are forced to match the domain based Group Policy settings again.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35384-7</ident>  
        <fixtext fixref="F-GroupPolicy_ConfigureProcessEvenIfTheGroupPolicyObjectsHaveNotChanged_fix">
          Configure the following Group Policy setting in a manner that is consistent with the security and operational requirements of your organization: 
          Computer Configuration\Administrative Templates\System\Group Policy:Process even if the Group Policy objects have not changed
        </fixtext>
        <fix id="F-GroupPolicy_ConfigureProcessEvenIfTheGroupPolicyObjectsHaveNotChanged_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ProcessEvenIfTheGroupPolicyObjectsHaveNotChanged_var" export-name="oval:com.mcafee.oval:var:525457" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:525447" />
        </check>
      </Rule>
      <Rule id="System-GroupPolicyContinueExperiencesOnThisDevice" xml:lang="en" selected="false">
        <title xml:lang="en">System - Group Policy: Continue experiences on this device</title>
        <description xml:lang="en">This policy setting determines whether the Windows device is allowed to participate in cross-device experiences (continue experiences).</description>
        <rationale>A cross-device experience is when a system can access app and send messages to other devices. </rationale>
        <fixtext fixref="F-System-GroupPolicyContinueExperiencesOnThisDevice_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled:
          Computer Configuration\Policies\Administrative Templates\System\Group
          Policy\Continue experiences on this device
        </fixtext>
        <fix id="F-System-GroupPolicyContinueExperiencesOnThisDevice_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ContinueExperiencesOnThisDevice._var" export-name="oval:com.mcafee.oval:var:2899214" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899205" />
        </check>
      </Rule>
      <Rule id="GroupPolicy_TurnOffBackgroundRefreshOfGroupPolicy" xml:lang="en" selected="false">
        <title xml:lang="en">Group Policy: Turn off background refresh of Group Policy</title>
        <description xml:lang="en">This policy setting prevents Group Policy from being updated while the computer is in use.</description>
        <rationale>
          This policy setting helps reduce the impact of malware that has already infected your system.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35776-4</ident>  
        <fixtext fixref="F-GroupPolicy_TurnOffBackgroundRefreshOfGroupPolicy_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: Good, unknown and bad but critical: 
          Computer Configuration\Policies\Administrative Templates\System\Early Launch Antimalware\Boot-Start Driver Initialization Policy
        </fixtext>
        <fix id="F-GroupPolicy_TurnOffBackgroundRefreshOfGroupPolicy_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffBackgroundRefreshOfGroupPolicy_var" export-name="oval:com.mcafee.oval:var:244491" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215794" />
        </check>
      </Rule>
      <Rule id="System-GroupPolicyConfigureGroupPolicySlowLinkDetection_ConnectionSpeed_" xml:lang="en" selected="false">
        <title xml:lang="en">System - Group Policy: Configure Group Policy slow link detection (Connection Speed)</title>
        <description xml:lang="en">This policy setting defines a slow connection for purposes of applying and updating Group Policy.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SlowLinkDetectionConnectionSpeed_var" export-name="oval:com.mcafee.oval:var:244559" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215838" />
        </check>
      </Rule>
      <Rule id="System-GroupPolicyConfigureLogonScriptDelay" xml:lang="en" selected="false">
        <title xml:lang="en">System - Group Policy: Configure Logon Script Delay</title>
        <description xml:lang="en">This policy setting allows you to configure how long the Group Policy client waits after logon before running scripts. Entering "0" disables the Logon Script Delay.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureLogonScriptDelay_var" export-name="oval:com.mcafee.oval:var:244561" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215840" />
        </check>
      </Rule>
      <Rule id="System-GroupPolicyEnableGroupPolicyCachingForServers_SlowLinkValue_" xml:lang="en" selected="false">
        <title xml:lang="en">System - Group Policy: Enable Group Policy Caching for Servers (Slow link value)</title>
        <description xml:lang="en">This policy setting allows you to configure Group Policy caching behavior on Windows Server machines.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="CachingForServers-SlowLinkValue_milliseconds__var" export-name="oval:com.mcafee.oval:var:244562" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215841" />
        </check>
      </Rule>
      <Rule id="System-GroupPolicyEnableGroupPolicyCachingForServers_TimeoutValue_" xml:lang="en" selected="false">
        <title xml:lang="en">System - Group Policy: Enable Group Policy Caching for Servers (Timeout value)</title>
        <description xml:lang="en">This policy setting allows you to configure Group Policy caching behavior on Windows Server machines.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="CachingForServers-TimeoutValue_milliseconds__var" export-name="oval:com.mcafee.oval:var:244563" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215842" />
        </check>
      </Rule>
      <Rule id="System-GroupPolicyConfigureGroupPolicySlowLinkDetection_WWANConnection_" xml:lang="en" selected="false">
        <title xml:lang="en">System - Group Policy: Configure Group Policy slow link detection (WWAN Connection)</title>
        <description xml:lang="en">This policy setting defines a slow connection for purposes of applying and updating Group Policy.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SlowLinkDetection-WWANConnection_var" export-name="oval:com.mcafee.oval:var:244560" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215839" />
        </check>
      </Rule>
      <Rule id="GroupPolicy_RegistryPolicyProcessing" xml:lang="en" selected="false">
        <title xml:lang="en">Group Policy: Registry policy processing</title>
        <description xml:lang="en">This policy setting affects all policies in the Administrative Templates folder and any other policies that store values in the registry.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RegistryPolicyProcessing_var" export-name="oval:com.mcafee.oval:var:59482" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6562" />
        </check>
      </Rule>
    </Group>
    <Group id="HomeGroup" xml:lang="en">
      <title xml:lang="en">HomeGroup</title>
      <Value id="PreventTheComputerFromJoiningAHomegroup_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="HomeGroup_SetPreventTheComputerFromJoiningAHomegroup" xml:lang="en" selected="false">
        <title xml:lang="en">HomeGroup: Set Prevent the computer from joining a homegroup</title>
        <description xml:lang="en">By default, users can add their computer to a homegroup on a home network. If you enable this policy setting, a user on this computer will not be able to add this computer to a homegroup. This setting does not affect other network sharing features. If you disable or do not configure this policy setting, a user can add this computer to a homegroup. However, data on a domain-joined computer is not shared with the homegroup. Configure this setting in a manner that is consistent with security and operational requirements of your organization.</description>
        <rationale>
          By default, domain joined computers can be joined to a HomeGroup. While resources on a domain-joined computer cannot be shared to the HomeGroup, information from the domain-joined computer can be leaked to other computers in the HomeGroup.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34776-5</ident>
        <fixtext fixref="F-HomeGroup_SetPreventTheComputerFromJoiningAHomegroup_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. Computer Configuration\Administrative Templates\Windows Components\HomeGroup\Prevent the computer from joining a homegroup
        </fixtext>
        <fix id="F-HomeGroup_SetPreventTheComputerFromJoiningAHomegroup_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventTheComputerFromJoiningAHomegroup_var" export-name="oval:com.mcafee.oval:var:74969" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71741" />
        </check>
      </Rule>
    </Group>
    <Group id="InternetCommunicationSettings" xml:lang="en">
      <title xml:lang="en">Internet Communication Settings</title>
      <Value id="TurnOffDownloadingOfPrintDriversOverHTTP_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffThePublishToWebTaskForFilesAndFolders_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffPrintingOverHTTP_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffSearchCompanionContentFileUpdates_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffWindowsUpdateDeviceDriverSearching_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffAutomaticRootCertificatesUpdate_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffEventViewsEvents.aspLinks_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="TurnOffHandwritingRecognitionErrorReporting_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffInternetConnectionWizardIfURLConnectionIsReferringToMicrosoft.com_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffInternetFileAssociationService_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffRegistrationIfURLConnectionIsReferringToMicrosoft.com_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffTheOrderPrintsPictureTask_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffWindowsErrorReporting_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffWindowsMovieMakerOnlineWebLinks_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffWindowsMoviesMakerAutomaticCodecDownloads_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffWindowsMovieMakerSavingToOnlineVideoHostingProvider_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnoffHelpExperienceImprovementProgram_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="TurnOffWindowsCustomerExperienceImprovementProgram_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="TurnOffHandwritingPersonalizationDataSharing_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="Usethestoreserviceforfindinganapptoopenafilewithunhandledfiletype_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="System_InternetCommunicationManagement_Turnoffaccesstothestore" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Management: Turn off access to the store</title>
        <description xml:lang="en">This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association.</description>
        <rationale>
          Organizations that manage user computers may want to prevent users from accessing the Store application.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35626-1</ident>
        <fixtext fixref="F-System_InternetCommunicationManagement_Turnoffaccesstothestore_fix">
          To establish the recommended configuration via GP, set the following UI path to Not Configured. 
          Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings\Turn off access to the Store
        </fixtext>
        <fix id="F-System_InternetCommunicationManagement_Turnoffaccesstothestore_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Usethestoreserviceforfindinganapptoopenafilewithunhandledfiletype_var" export-name="oval:com.mcafee.oval:var:230057" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:230018" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationsettings_SetTurnoffHelpExperienceImprovementProgram" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication settings: Set Turn off Help Experience Improvement Program</title>
        <description xml:lang="en">
          This policy setting turns off toast notifications on the lock screen. If you enable this policy setting, applications will not be able to raise toast notifications on the lock screen.
        </description>
        <rationale>
          Large enterprise environments may not want to have information collected from managed client computers.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33349-2</ident>
        <fixtext fixref="F-InternetCommunicationsettings_SetTurnoffHelpExperienceImprovementProgram_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          User Configuration\Policies\Administrative Templates\System\Internet Communication Management\Internet Communication Settings\Turn off Help Experience Improvement Program
        </fixtext>
        <fix id="F-InternetCommunicationsettings_SetTurnoffHelpExperienceImprovementProgram_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnoffHelpExperienceImprovementProgram_var" export-name="oval:com.mcafee.oval:var:2486361" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486359" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_SetTurnoffhandwritingpersonalizationdatasharing" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Set Turn off handwriting personalization data sharing</title>
        <description xml:lang="en">This policy setting determines whether the handwriting recognition personalization tool is turned off.</description>
        <rationale>
          A person's handwriting is Personally Identifiable Information (PII), especially when it comes to your signature. As such, it is unacceptable in many environments to automatically upload PII to a website without explicit approval by the user.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-32945-8</ident>
        <fixtext fixref="F-InternetCommunicationSettings_SetTurnoffhandwritingpersonalizationdatasharing_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\System\Internet Communication Management\Internet Communication settings\Turn off handwriting personalization data sharing
        </fixtext>
        <fix id="F-InternetCommunicationSettings_SetTurnoffhandwritingpersonalizationdatasharing_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffHandwritingPersonalizationDataSharing_var" export-name="oval:com.mcafee.oval:var:244482" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215788" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffWindowsCustomerExperienceImprovementProgram" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn off Windows Customer Experience Improvement Program</title>
        <description xml:lang="en">This policy setting determines whether users are opted in or opted out of the Windows Customer Experience Improvement Program.</description>
        <rationale>
          Large enterprise environments may not want to have information collected from managed client computers.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33255-1</ident>
        <fixtext fixref="F-InternetCommunicationSettings_SetTurnOffTheWindowsMessengerCustomerExperienceImprovementProgram_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\System\Internet Communication Management\Internet Communication settings\Turn off Windows Customer Experience Improvement Program
        </fixtext>
        <fix id="F-InternetCommunicationSettings_SetTurnOffTheWindowsMessengerCustomerExperienceImprovementProgram_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffWindowsCustomerExperienceImprovementProgram_var" export-name="oval:com.mcafee.oval:var:244501" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215805" />
        </check>
      </Rule>
      
      <Rule id="InternetCommunicationSettings_TurnOffDownloadingOfPrintDriversOverHTTP" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn off downloading of print drivers over HTTP</title>
        <description xml:lang="en">This policy setting determines whether to allow this client to download print driver packages over HTTP.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffDownloadingOfPrintDriversOverHTTP_var" export-name="oval:com.mcafee.oval:var:59491" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6572" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffThe_PublishToWeb_TaskForFilesAndFolders" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn off the "Publish to Web" task for files and folders</title>
        <description xml:lang="en">This policy setting determines whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to the Web," are available from File and Folder Tasks in Windows folders.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffThePublishToWebTaskForFilesAndFolders_var" export-name="oval:com.mcafee.oval:var:59486" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6567" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn off Internet download for Web publishing and online ordering wizards</title>
        <description xml:lang="en">This policy setting determines whether Windows should download a list of providers for the Web publishing and online ordering wizards.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffInternetDownloadForWebPublishingAndOnlineOrderingWizards_var" export-name="oval:com.mcafee.oval:var:59487" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6568" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffPrintingOverHTTP" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn off printing over HTTP</title>
        <description xml:lang="en">This policy setting determines whether to allow printing over HTTP from this client.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffPrintingOverHTTP_var" export-name="oval:com.mcafee.oval:var:59490" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6571" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffSearchCompanionContentFileUpdates" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn off Search Companion content file updates</title>
        <description xml:lang="en">This policy setting determines whether Search Companion should automatically download content updates during local and Internet searches.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffSearchCompanionContentFileUpdates_var" export-name="oval:com.mcafee.oval:var:59489" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6570" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn off the Windows Messenger Customer Experience Improvement Program</title>
        <description xml:lang="en">This policy setting determines whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffTheWindowsMessengerCustomerExperienceImprovementProgram_var" export-name="oval:com.mcafee.oval:var:59488" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6569" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffWindowsUpdateDeviceDriverSearching" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn off Windows Update device driver searching</title>
        <description xml:lang="en">This policy determines whether Windows searches Windows Update for device drivers when no local drivers for a device are present.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffWindowsUpdateDeviceDriverSearching_var" export-name="oval:com.mcafee.oval:var:59492" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6573" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffAutomaticRootCertificatesUpdate" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off Automatic Root Certificates Update</title>
        <description xml:lang="en">This policy setting determines whether to automatically update root certificates using the Windows Update Web site.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffAutomaticRootCertificatesUpdate_var" export-name="oval:com.mcafee.oval:var:59522" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6674" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffEventViews_Events.asp_Links" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off Event Views "Events.asp" Links</title>
        <description xml:lang="en">Specifies whether "Events.asp" hyperlinks are available for events within the Event Viewer application.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffEventViewsEvents.aspLinks_var" export-name="oval:com.mcafee.oval:var:59523" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6675" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffHandwritingRecognitionErrorReporting" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off Handwriting Recognition Error Reporting</title>
        <description xml:lang="en">This policy setting determines whether thehandwriting recognition error reporting tool is turned off.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffHandwritingRecognitionErrorReporting_var" export-name="oval:com.mcafee.oval:var:59462" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6676" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffInternetConnectionWizardIfURLConnectionIsReferringToMicrosoft.com" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com</title>
        <description xml:lang="en">This policy setting determines whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs).</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffInternetConnectionWizardIfURLConnectionIsReferringToMicrosoft.com_var" export-name="oval:com.mcafee.oval:var:59526" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6679" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffInternetFileAssociationService" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off Internet File Association Service</title>
        <description xml:lang="en">This policy setting determines whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffInternetFileAssociationService_var" export-name="oval:com.mcafee.oval:var:59527" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6680" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffRegistrationIfURLConnectionIsReferringToMicrosoft.com" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off Registration if URL Connection is Referring to Microsoft.com</title>
        <description xml:lang="en">This policy setting determines whether the Windows Registration Wizard connects to Microsoft.com for online registration.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffRegistrationIfURLConnectionIsReferringToMicrosoft.com_var" export-name="oval:com.mcafee.oval:var:59528" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6681" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffThe_OrderPrints_PictureTask" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off the "Order Prints" Picture Task</title>
        <description xml:lang="en">This policy setting determines whether the "Order Prints Online" task is available from Picture Tasks in Windows folders.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffTheOrderPrintsPictureTask_var" export-name="oval:com.mcafee.oval:var:59529" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6682" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffWindowsErrorReporting" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn off Windows Error Reporting</title>
        <description xml:lang="en">This policy setting determines whether or not errors are reported to Microsoft.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffWindowsErrorReporting_var" export-name="oval:com.mcafee.oval:var:59530" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6683" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffWindowsMovieMakerOnlineWebLinks" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off Windows Movie Maker Online Web Links</title>
        <description xml:lang="en">This policy setting determines whether links to Web sites are available in Windows Movie Maker.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffWindowsMovieMakerOnlineWebLinks_var" export-name="oval:com.mcafee.oval:var:59531" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6684" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffWindowsMovieMakerAutomaticCodecDownloads" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off Windows Movie Maker Automatic Codec Downloads</title>
        <description xml:lang="en">This policy setting determines whether Windows Movie Maker automatically downloads codecs.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffWindowsMoviesMakerAutomaticCodecDownloads_var" export-name="oval:com.mcafee.oval:var:59537" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6696" />
        </check>
      </Rule>
      <Rule id="InternetCommunicationSettings_TurnOffWindowsMovieMakerSavingToOnlineVideoHostingProvide" xml:lang="en" selected="false">
        <title xml:lang="en">Internet Communication Settings: Turn Off Windows Movie Maker Saving to Online Video Hosting Provide</title>
        <description xml:lang="en">This policy setting determines whether users can send a final movie to a video hosting provider on the Web by choosing "The Web" saving option in the Save Movie Wizard of Windows Movie Maker.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffWindowsMovieMakerSavingToOnlineVideoHostingProvider_var" export-name="oval:com.mcafee.oval:var:59538" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6697" />
        </check>
      </Rule>
    </Group>
    <Group id="InternetInformationServices" xml:lang="en">
      <title xml:lang="en">Internet Information Services</title>
      <Value id="PreventIISInstallation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="WindowsComponents-InternetInformationServices_PreventIISInstallation" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Internet Information Services: Prevent IIS Installation</title>
        <description xml:lang="en">This security setting determines whether IIS is able to be installed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventIISInstallation_var" export-name="oval:com.mcafee.oval.windows:var:61071" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6107" />
        </check>
      </Rule>
    </Group>
    <Group id="Kerberos" xml:lang="en">
      <title xml:lang="en">Kerberos</title>
      <Value id="Supportdeviceauthenticationusingcertificate_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="RequestCompoundAuthentication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="RequestCompoundAuthentication_var-selector-0">Not Configured</value>
        <value selector="RequestCompoundAuthentication_var-selector-1">Not Configured</value>
        <value selector="RequestCompoundAuthentication_var-selector-2">Not Configured</value>
      </Value>
      <Value id="AlwaysSendCompoundAuthenticationFirst_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="AlwaysSendCompoundAuthenticationFirst_var-selector-0">Not Configured</value>
        <value selector="AlwaysSendCompoundAuthenticationFirst_var-selector-1">Not Configured</value>
        <value selector="AlwaysSendCompoundAuthenticationFirst_var-selector-2">Not Configured</value>
      </Value>
      <Rule id="System-KDCRequestCompoundAuthentication" xml:lang="en" selected="false" >
        <title xml:lang="en">System - KDC: Request compound authentication</title>
        <description xml:lang="en">This policy setting allows you to configure a domain controller to request compound authentication.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequestCompoundAuthentication_var" export-name="oval:com.mcafee.oval:var:244564" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215843" />
        </check>
      </Rule>
      <Rule id="System-KerberosAlwaysSendCompoundAuthenticationFirst" xml:lang="en" selected="false">
        <title xml:lang="en">System - Kerberos: Always send compound authentication first</title>
        <description xml:lang="en">This policy setting controls whether a device always sends a compound authentication request when the resource domain requests compound identity.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AlwaysSendCompoundAuthenticationFirst_var" export-name="oval:com.mcafee.oval:var:244565" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215844" />
        </check>
      </Rule>
      <Rule id="Kerberos_SetSupportdeviceauthenticationusingcertificate" xml:lang="en" selected="false">
        <title xml:lang="en">Kerberos: Set Support device authentication using certificate</title>
        <description xml:lang="en">This policy setting determines whether the handwriting recognition personalization tool is turned off.</description>
        <rationale>
          Having stronger device authentication with the use of certificates is strongly encouraged over standard username and password authentication. Having this set to Automatic will allow certificate based authentication to be used whenever possible.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41396-3</ident>
        <fixtext fixref="F-Kerberos_SetSupportdeviceauthenticationusingcertificate_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: Automatic: 
          Computer Configuration\Policies\Administrative Templates\System\Kerberos\Support device authentication using certificate
        </fixtext>
        <fix id="F-Kerberos_SetSupportdeviceauthenticationusingcertificate_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Supportdeviceauthenticationusingcertificate_var" export-name="oval:com.mcafee.oval:var:1415802" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415801" />
        </check>
      </Rule>
    </Group>
    <Group id="RegionalandLanguageOptions" xml:lang="en">
      <title xml:lang="en">Regional and Language Options</title>
      <Value id="AllowInputPersonalization_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="RegionalandLanguageOptions_AllowInputPersonalization" xml:lang="en" selected="false">
        <title xml:lang="en">Regional and Language Options: Allow Input Personalization</title>
        <description xml:lang="en">This policy enables the automatic learning component of input personalization that includes speech, inking, and typing. Automatic learning enables the collection of speech and handwriting patterns, typing history, contacts, and recent calendar information.</description>
        <rationale>If this setting is Enabled sensitive information could be stored in the cloud or sent to Microsoft.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41387-2</ident>
        <fixtext fixref="F-RegionalandLanguageOptions_AllowInputPersonalization_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Control Panel\Regional and Language Options\Allow Input Personalization
        </fixtext>
        <fix id="F-RegionalandLanguageOptions_AllowInputPersonalization_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowInputPersonalization_var" export-name="oval:com.mcafee.oval:var:1415722" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415716" />
        </check>
      </Rule>
    </Group>
    <Group id="LAPS" xml:lang="en">
      <title xml:lang="en">LAPS</title>
      <Value id="LAPStoolinstalled_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Installed</value>
      </Value>
      <Value id="Donotallowpasswordexpirationtimelongerthanrequiredbypolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="EnableLocalAdminPasswordManagement_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="PasswordComplexity_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">4</value>
      </Value>
      <Value id="PasswordLength_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">15</value>
      </Value>
      <Value id="PasswordAge_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">30</value>
      </Value>
      <Rule id="LAPS_EnsureLAPSAdmPwdGPOExtension_CSEisinstalled" xml:lang="en" selected="false">
        <title xml:lang="en">LAPS: Ensure LAPS AdmPwd GPO Extension / CSE is installed</title>
        <description xml:lang="en">This policy will verify whether Local Administrator Password Solution (LAPS) tool is installed.</description>
        <rationale>Due to the difficulty in managing local Administrator passwords, many organizations choose to use the same password on all workstations and/or member servers when deploying them. This poses a serious attack surface security risk because if an attacker manages to compromise one system and learn the password to its local Administrator account, then they can leverage that account to instantly gain access to all other computers that also use that password for their local Administrator account.</rationale>
        <fixtext fixref="F-LAPS_EnsureLAPSAdmPwdGPOExtension_CSEisinstalled_fix">
          In order to utilize LAPS, a minor Active Directory Schema update is required, and a Group Policy Client Side Extension (CSE) must be installed on each managed computer. When LAPS is installed, the file AdmPwd.dll must be present in the following location and registered in Windows (the LAPS AdmPwd GPO Extension / CSE installation does this for you): C:\Program Files\LAPS\CSE\AdmPwd.dll
        </fixtext>
        <fix id="F-LAPS_EnsureLAPSAdmPwdGPOExtension_CSEisinstalled_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LAPStoolinstalled_var" export-name="oval:com.mcafee.oval:var:1415726" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415725" />
        </check>
      </Rule>
      <Rule id="LAPS_Donotallowpasswordexpirationtimelongerthanrequiredbypolicy" xml:lang="en" selected="false">
        <title xml:lang="en">LAPS: Do not allow password expiration time longer than required by policy</title>
        <description xml:lang="en">When you enable this setting, planned password expiration longer than password age dictated by Password Settings policy is NOT allowed.</description>
        <rationale>Due to the difficulty in managing local Administrator passwords, many organizations choose to use the same password on all workstations and/or member servers when deploying them. This poses a serious attack surface security risk because if an attacker manages to compromise one system and learn the password to its local Administrator account, then they can leverage that account to instantly gain access to all other computers that also use that password for their local Administrator account.</rationale>
        <fixtext fixref="F-LAPS_Donotallowpasswordexpirationtimelongerthanrequiredbypolicy_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\LAPS\Do not allow password expiration time longer than required by policy
        </fixtext>
        <fix id="F-LAPS_Donotallowpasswordexpirationtimelongerthanrequiredbypolicy_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Donotallowpasswordexpirationtimelongerthanrequiredbypolicy_var" export-name="oval:com.mcafee.oval:var:1415736" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415735" />
        </check>
      </Rule>
      <Rule id="LAPS_EnableLocalAdminPasswordManagement" xml:lang="en" selected="false">
        <title xml:lang="en">LAPS: Enable Local Admin Password Management</title>
        <description xml:lang="en">If you enable this setting, local administrator password is managed. If you disable or not configure this setting, local administrator password is NOT managed.</description>
        <rationale>Due to the difficulty in managing local Administrator passwords, many organizations choose to use the same password on all workstations and/or member servers when deploying them. This poses a serious attack surface security risk because if an attacker manages to compromise one system and learn the password to its local Administrator account, then they can leverage that account to instantly gain access to all other computers that also use that password for their local Administrator account.</rationale>
        <fixtext fixref="F-LAPS_EnableLocalAdminPasswordManagement_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\LAPS\Enable Local Admin Password Management
        </fixtext>
        <fix id="F-LAPS_EnableLocalAdminPasswordManagement_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableLocalAdminPasswordManagement_var" export-name="oval:com.mcafee.oval:var:1415744" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415743" />
        </check>
      </Rule>
      <Rule id="LAPS_PasswordSettings_PasswordComplexity" xml:lang="en" selected="false">
        <title xml:lang="en">LAPS: Password Settings: Password Complexity</title>
        <description xml:lang="en">This policy determines the Password complexity setting. The recommended state for this setting is: Enabled: Large letters + small letters + numbers + special characters.</description>
        <rationale>Due to the difficulty in managing local Administrator passwords, many organizations choose to use the same password on all workstations and/or member servers when deploying them. This poses a serious attack surface security risk because if an attacker manages to compromise one system and learn the password to its local Administrator account, then they can leverage that account to instantly gain access to all other computers that also use that password for their local Administrator account.</rationale>
        <fixtext fixref="F-LAPS_PasswordSettings_PasswordComplexity_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled, and configure the Password Complexity option to Large letters + small letters + numbers + special characters: 
          Computer Configuration\Policies\Administrative Templates\LAPS\Password Settings
        </fixtext>
        <fix id="F-LAPS_PasswordSettings_PasswordComplexity_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PasswordComplexity_var" export-name="oval:com.mcafee.oval:var:1415752" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415751" />
        </check>
      </Rule>
      <Rule id="LAPS_PasswordSettings_PasswordLength" xml:lang="en" selected="false">
        <title xml:lang="en">LAPS: Password Settings: Password Length</title>
        <description xml:lang="en">This policy determines whether the Password length is of minimum 15 characters. The recommended state for this setting is: Enabled: 15 or more.</description>
        <rationale>Due to the difficulty in managing local Administrator passwords, many organizations choose to use the same password on all workstations and/or member servers when deploying them. This poses a serious attack surface security risk because if an attacker manages to compromise one system and learn the password to its local Administrator account, then they can leverage that account to instantly gain access to all other computers that also use that password for their local Administrator account.</rationale>
        <fixtext fixref="F-LAPS_PasswordSettings_PasswordLength_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled, and configure the Password Length option to 15 or more: 
          Computer Configuration\Policies\Administrative Templates\LAPS\Password Settings
        </fixtext>
        <fix id="F-LAPS_PasswordSettings_PasswordLength_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PasswordLength_var" export-name="oval:com.mcafee.oval:var:1415761" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415759" />
        </check>
      </Rule>
      <Rule id="LAPS_PasswordSettings_PasswordAge" xml:lang="en" selected="false">
        <title xml:lang="en">LAPS: Password Settings: Password Age</title>
        <description xml:lang="en">This policy determines whether the Password age is 30 days or less. The recommended state for this setting is: Enabled: 30 or less.</description>
        <rationale>Due to the difficulty in managing local Administrator passwords, many organizations choose to use the same password on all workstations and/or member servers when deploying them. This poses a serious attack surface security risk because if an attacker manages to compromise one system and learn the password to its local Administrator account, then they can leverage that account to instantly gain access to all other computers that also use that password for their local Administrator account.</rationale>
        <fixtext fixref="F-LAPS_PasswordSettings_PasswordAge_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled, and configure the Password Age (Days) option to 30 or fewer: 
          Computer Configuration\Policies\Administrative Templates\LAPS\Password Settings
        </fixtext>
        <fix id="F-LAPS_PasswordSettings_PasswordAge_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PasswordAge_var" export-name="oval:com.mcafee.oval:var:1415769" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415768" />
        </check>
      </Rule>
    </Group>
    <Group id="MSS_Legacy" xml:lang="en">
      <title xml:lang="en">MSS (Legacy)</title>
      <Value id="MSS_DisableSavePassword_PreventTheDial-upPasswordFromBeingSaved_recommended__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="SetMSS_DisableSavePassword_PreventTheDial_upPasswordFromBeingSaved" xml:lang="en" selected="false">
        <title xml:lang="en">'Set MSS: (DisableSavePassword) Prevent the dial-up password from being saved</title>
        <description xml:lang="en">This check evaluates the registry value of  MSS: (DisableSavePassword) setting and compares it to the value defined in the benchmark.</description>
        <rationale xml:lang="en">An attacker who steals a mobile user's computer could automatically connect to the organization's network if the Save This Password check box is enabled for the dial-up entry.</rationale>
        <fixtext fixref="F-SetMSS_DisableSavePassword_PreventTheDial_upPasswordFromBeingSaved_fix">
          To implement the recommended configuration state, set the following Group Policy setting to 1. 
          Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\MSS: (DisableSavePassword) Prevent the dial-up password from being saved (recommended)
        </fixtext>
        <fix id="F-SetMSS_DisableSavePassword_PreventTheDial_upPasswordFromBeingSaved_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MSS_DisableSavePassword_PreventTheDial-upPasswordFromBeingSaved_recommended__var" export-name="oval:com.mcafee.oval:var:560437" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:560434" />
        </check>
      </Rule>
     </Group>
    <Group id="DNSClient" xml:lang="en">
      <title xml:lang="en">DNS Client</title>
      <Value id="TurnOffMulticastNameResolution_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="DNSClientNetBIOSNodeType_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Rule id="Network-DNSClientTurnOffMulticastNameResolution" xml:lang="en" selected="false">
        <title xml:lang="en">Network - DNSClient: Turn off multicast name resolution</title>
        <description xml:lang="en">LLMNR is a secondary name resolution protocol.</description>
        <rationale>An attacker can listen on a network for these LLMNR (UDP/5355) or NBT-NS (UDP/137)
          broadcasts and respond to them, It can trick the host into thinking that it knows the
          location of the requested system.</rationale>
        <fixtext fixref="Network-DNSClientTurnOffMulticastNameResolution_fix">To establish the recommended configuration via GP, set the following UI path to Enabled:
          Computer Configuration\Policies\Administrative Templates\Network\DNS
          Client\Turn off multicast name resolution
        </fixtext>
        <fix id="F-Network-DNSClientTurnOffMulticastNameResolution_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffMulticastNameResolution_var" export-name="oval:com.mcafee.oval:var:2899204" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899195" />
        </check>
      </Rule>
      <Rule id="DNSClientNetBIOSNodeType" xml:lang="en" selected="false">
        <title xml:lang="en">DNS Client: NetBIOS node type</title>
        <description xml:lang="en">This parameter determines which method NetBIOS over TCP/IP (NetBT) will use to register and resolve names.</description>
        <rationale>In order to help mitigate the risk of NetBIOS Name Service (NBT-NS) poisoning attacks,
          setting the node type to P-node will prevent the system from sending out NetBIOS
          broadcasts.</rationale>
        <fixtext fixref="DNSClientNetBIOSNodeType_fix">
          To establish the recommended configuration, set the following Registry value to 0x2 (2)
          (DWORD):
          HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters:NodeType
        </fixtext>
        <fix id="F-DNSClientNetBIOSNodeType_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DNSClientNetBIOSNodeType_var" export-name="oval:com.mcafee.oval:var:2899426" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899419" />
        </check>
      </Rule>
    </Group>
    <Group id="Fonts"  xml:lang="en">
      <title>Fonts</title>
      <Value id="EnableFontProviders_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="FontsEnableFontProviders" xml:lang="en" selected="false">
        <title xml:lang="en">Fonts: Enable Font Providers</title>
        <description xml:lang="en">This policy setting determines whether Windows is allowed to download fonts and font catalog data from an online font provider</description>
        <rationale>In an enterprise environment the IT department should be managing the changes to the
          system configuration, to ensure all changes are tested and approved.
        </rationale>
        <fixtext fixref="FontsEnableFontProviders_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled:
          Computer Configuration\Policies\Administrative Templates\Network\Fonts\Enable
          Font Providers
        </fixtext>
        <fix id="F-FontsEnableFontProviders_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableFontProviders_var" export-name="oval:com.mcafee.oval:var:2901879" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899434" />
        </check>
      </Rule>
    </Group>
    <Group id="LanmanWorkstation" xml:lang="en">
      <title xml:lang="en">Lanman Workstation</title>
      <Value id="Enableinsecureguestlogons_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="LanmanWorkstation_Enableinsecureguestlogons" xml:lang="en" selected="false">
        <title xml:lang="en">Lanman Workstation: Enable insecure guest logons</title>
        <description xml:lang="en">This policy setting determines if the SMB client will allow insecure guest logons to an SMB server.
          The recommended state for this setting is: Disabled.</description>
        <rationale>
          Insecure guest logons are used by file servers to allow unauthenticated access to shared folders.
        </rationale>
        <fixtext fixref="F-LanmanWorkstation_Enableinsecureguestlogons_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Network\Lanman Workstation\Enable insecure guest logons
        </fixtext>
        <fix id="F-LanmanWorkstation_Enableinsecureguestlogons_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Enableinsecureguestlogons_var" export-name="oval:com.mcafee.oval:var:2894634" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894633" />
        </check>
      </Rule>
    </Group>
    <Group id="Link-LayerTopology" xml:lang="en">
      <title xml:lang="en">Link-Layer Topology</title>
      <Value id="TurnOnMapperIO_LLTDIO_Driver_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="TurnOnResponder_RSPNDR_Driver_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="Network-LinkLayerTopology_TurnOnMapperI_O_LLTDIO_Driver" xml:lang="en" selected="false">
        <title xml:lang="en">Network - Link Layer Topology: Turn on Mapper I/O (LLTDIO) driver</title>
        <description xml:lang="en">This policy setting determines whether the Mapper I/O network protocol driver is turned on.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOnMapperIO_LLTDIO_Driver_var" export-name="oval:com.mcafee.oval.windows:var:6660" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6660" />
        </check>
      </Rule>
      <Rule id="Network-LinkLayerTopology_TurnOnResponder_RSPNDR_Driver" xml:lang="en" selected="false">
        <title xml:lang="en">Network - Link Layer Topology: Turn on Responder (RSPNDR) driver</title>
        <description xml:lang="en">This policy setting determines whether the Responder network protocol driver is turned on.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOnResponder_RSPNDR_Driver_var" export-name="oval:com.mcafee.oval.windows:var:6661" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6661" />
        </check>
      </Rule>
    </Group>
    <Group id="Logon" xml:lang="en">
      <title xml:lang="en">Logon</title>
      <Value id="DoNotProcessTheLegacyRunList_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="DoNotProcessTheLegacyRunList_var-selector-0">Not Configured</value>
        <value selector="DoNotProcessTheLegacyRunList_var-selector-1">Not Configured</value>
        <value selector="DoNotProcessTheLegacyRunList_var-selector-2">Not Configured</value>
        <value selector="DoNotProcessTheLegacyRunList_var-selector-3">Not Configured</value>
        <value selector="DoNotProcessTheLegacyRunList_var-selector-4">Not Configured</value>
      </Value>
      <Value id="DoNotProcessTheRunOnceList_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="DoNotProcessTheRunOnceList_var-selector-0">Not Configured</value>
        <value selector="DoNotProcessTheRunOnceList_var-selector-1">Not Configured</value>
        <value selector="DoNotProcessTheRunOnceList_var-selector-2">Not Configured</value>
        <value selector="DoNotProcessTheRunOnceList_var-selector-3">Not Configured</value>
        <value selector="DoNotProcessTheRunOnceList_var-selector-4">Not Configured</value>
      </Value>
      <Value id="AlwaysUseClassicLogon_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="DontDisplayTheGettingStartedWelcomeScreenAtLogon_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="ControlUserSignInUsingAPIN._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ContinueExperiencesOnThisDevice._var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="PreventsConnectedUsersFromBeingEnumeratedOnDomain-joinedComputers._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="AllowsLocalUsersFromBeingEnumeratedOnDomain-joinedComputers._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="AllowUsersToSelectWhenAPasswordIsRequired_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="AllowUsersToSelectWhenAPasswordIsRequired_var-selector-0">Not Configured</value>
        <value selector="AllowUsersToSelectWhenAPasswordIsRequired_var-selector-1">Not Configured</value>
        <value selector="AllowUsersToSelectWhenAPasswordIsRequired_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DoNotDisplayNetworkSelectionUI_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="DoNotDisplayNetworkSelectionUI_var-selector-0">Enabled</value>
        <value selector="DoNotDisplayNetworkSelectionUI_var-selector-1">Enabled</value>
        <value selector="DoNotDisplayNetworkSelectionUI_var-selector-2">Enabled</value>
      </Value>
      <Value id="Preventappnotificationsfromappearingonlockscreen_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="Logon_Turnoffappnotificationsonthelockscreen" xml:lang="en" selected="false">
        <title xml:lang="en">Logon: Turn off app notifications on the lock screen</title>
        <description xml:lang="en">This policy setting allows you to prevent app notifications from appearing on the lock screen.</description>
        <rationale>
          App notifications might display sensitive business or personal data.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34837-5</ident>
        <fixtext fixref="F-Logon_Turnoffappnotificationsonthelockscreen_fix">
          To establish the recommended configuration via GP, set the following UI path to Not Configured. 
          Computer Configuration\Administrative Templates\System\Logon\Turn off app notifications on the lock screen
        </fixtext>
        <fix id="F-Logon_Turnoffappnotificationsonthelockscreen_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Preventappnotificationsfromappearingonlockscreen_var" export-name="oval:com.mcafee.oval:var:230060" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:230021" />
        </check>
      </Rule>
      <Rule id="System-LogonAllowUsersToSelectWhenAPasswordIsRequiredWhenResumingFromConnectedStandby" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Allow users to select when a password is required when resuming from connected standby</title>
        <description xml:lang="en">This policy setting allows you to control whether or not the user may alter the time before a password is required when a device that supports connected standby's screen turns off.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowUsersToSelectWhenAPasswordIsRequired_var" export-name="oval:com.mcafee.oval:var:244566" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215845" />
        </check>
      </Rule>
      <Rule id="System-LogonDoNotDisplayNetworkSelectionUI" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Do not display network selection UI</title>
        <description xml:lang="en">This policy setting allows you to control whether anyone can interact with available networks UI on the logon screen.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotDisplayNetworkSelectionUI_var" export-name="oval:com.mcafee.oval:var:244568" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215847" />
        </check>
      </Rule>
      <Rule id="System-Logon_DoNotProcessTheLegacyRunList" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Do not process the legacy run list</title>
        <description xml:lang="en">This policy setting determines whether the system ignores the run list for Windows NT Workstation 4.0, Windows 2000 Professional, and Windows XP Professional.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotProcessTheLegacyRunList_var" export-name="oval:com.mcafee.oval:var:59480" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6560" />
        </check>
      </Rule>
      <Rule id="System-Logon_DoNotProcessTheRunOnceList" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Do not process the run once list</title>
        <description xml:lang="en">This policy setting determines whether the system ignores the run-once list.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotProcessTheRunOnceList_var" export-name="oval:com.mcafee.oval:var:59481" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6561" />
        </check>
      </Rule>
      <Rule id="System-Logon_AlwaysUseClassicLogon" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Always Use Classic Logon</title>
        <description xml:lang="en">This policy setting determines whether the user is forced to log on to the computer using the classic logon screen.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AlwaysUseClassicLogon_var" export-name="oval:com.mcafee.oval:var:59532" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6686" />
        </check>
      </Rule>
      <Rule id="System-Logon_DoNotDisplayTheGettingStartedWelcomeScreenAtLogon" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Do Not Display the Getting Started Welcome Screen at Logon</title>
        <description xml:lang="en">This policy setting determines whether the welcome screen is displayed on Windows 2000 Professional and Windows XP Professional each time the user logs on.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DontDisplayTheGettingStartedWelcomeScreenAtLogon_var" export-name="oval:com.mcafee.oval:var:59533" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6687" />
        </check>
      </Rule>
      <Rule id="System-Logon_TurnOnPINSign-in" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Turn on PIN sign-in</title>
        <description xml:lang="en">The policy setting allows you to control whether a domain user can sign in using a PIN.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ControlUserSignInUsingAPIN._var" export-name="oval:com.mcafee.oval:var:231214" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:238851" />
        </check>
      </Rule>
      <Rule id="System-LogonBlockUserFromShowingAccountDetailsOnSignin" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Block user from showing account details on signin</title>
        <description xml:lang="en">This policy prevents the user from showing account details (email address or user name) on the sign-in screen.</description>
        <rationale>An attacker with access to the console (for example, someone with physical access or
          someone who is able to connect to the server through Terminal Services) could view the
          name of the last user who logged on to the server. The attacker could then try to guess the
          password, use a dictionary, or use a brute-force attack to try and log on.</rationale>
        <fixtext fixref="F-System-LogonBlockUserFromShowingAccountDetailsOnSignin_fix">To implement the recommended configuration state, set the following Group Policy setting
          to Enabled:
          Computer Configuration\Policies\Administrative Templates\System\Logon\Block
          user from showing account details on sign-in
        </fixtext>
        <fix id="F-System-LogonBlockUserFromShowingAccountDetailsOnSignin_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ContinueExperiencesOnThisDevice._var0" export-name="oval:com.mcafee.oval:var:2899225" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899216" />
        </check>
      </Rule>
      <Rule id="System-Logon_DoNotEnumerateConnectedUsersOnDomain-joinedComputers" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Do not enumerate connected users on domain-joined computers</title>
        <description xml:lang="en">The policy setting prevents connected users from being enumerated on domain-joined computers.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventsConnectedUsersFromBeingEnumeratedOnDomain-joinedComputers._var" export-name="oval:com.mcafee.oval:var:230062" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:230023" />
        </check>
      </Rule>
      <Rule id="System-Logon_EnumerateLocalUsersOnDomain-joinedComputers" xml:lang="en" selected="false">
        <title xml:lang="en">System - Logon: Enumerate local users on domain-joined computers</title>
        <description xml:lang="en">This policy setting allows local users to be enumerated on domain-joined computers.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowsLocalUsersFromBeingEnumeratedOnDomain-joinedComputers._var" export-name="oval:com.mcafee.oval:var:230061" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:230022" />
        </check>
      </Rule>
    </Group>
    <Group id="LocaleServices" xml:lang="en">
      <title xml:lang="en">Locale Services</title>
      <Value id="Preventinstallationofdevices_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="LocaleServices_SetDisallowcopyingofuserinputmethodstothesystemaccountforsignin" xml:lang="en" selected="false">
        <title xml:lang="en">Locale Services: Set Disallow copying of user input methods to the system account for sign-in</title>
        <description xml:lang="en">This policy prevents automatic copying of user input methods to the system account for use on the sign-in screen.</description>
        <rationale>
          This is a way to increase the security of the system account.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35101-5</ident>
        <fixtext fixref="F-LocaleServices_SetDisallowcopyingofuserinputmethodstothesystemaccountforsignin_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\System\Locale Services\Disallow copying of user input methods to the system account for sign-in
        </fixtext>
        <fix id="F-LocaleServices_SetDisallowcopyingofuserinputmethodstothesystemaccountforsignin_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Preventinstallationofdevices_var" export-name="oval:com.mcafee.oval:var:1415824" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415823" />
        </check>
      </Rule>
    </Group>
    <Group id="LocationAndSensors" xml:lang="en">
      <title xml:lang="en">Location and Sensors</title>
      <Value id="TurnOffLocation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="TurnOffLocation" xml:lang="en" selected="false">
        <title xml:lang="en">Turn off location</title>
        <description xml:lang="en">This policy setting turns off the location feature for this computer.</description>
        <rationale xml:lang="en">Some applications and websites may share location information with servers that the user visits, some organziations may be concerned that this location information could be exploited by a malicious user who has access to such a server.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33743-6</ident>
        <fixtext xml:lang="en" fixref="F-TurnOffLocation_fix" reboot="false" strategy="unknown" disruption="unknown" complexity="unknown">To establish the recommended configuration via GP, set the following UI path to Not Configured. 
          Computer Configuration\Administrative Templates\Windows Components\Location and Sensors\Turn off location</fixtext>
        <fix id="F-TurnOffLocation_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffLocation_var" export-name="oval:com.mcafee.oval:var:74970" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71742" />
        </check>
      </Rule>
    </Group>
    <Group id="MAPS" xml:lang="en">
      <title xml:lang="en">MAPS</title>
      <Value id="JoinMicrosoftMAPS_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="MAPS_SetJoinMicrosoftMAPS" xml:lang="en" selected="false">
        <title xml:lang="en">MAPS: Set Join Microsoft MAPS</title>
        <description xml:lang="en">This policy setting allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats.</description>
        <rationale>
          This information can include things like location of detected items on your computer if harmful software was removed. The information will be automatically collected and sent. In some instances personal information might unintentionally be sent to Microsoft. However Microsoft will not use this information to identify you or contact you.
        </rationale>
        <fixtext fixref="F-MAPS_SetJoinMicrosoftMAPS_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Defender\MAPS\Join Microsoft MAPS
        </fixtext>
        <fix id="F-MAPS_SetJoinMicrosoftMAPS_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="JoinMicrosoftMAPS_var" export-name="oval:com.mcafee.oval:var:2486327" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486326" />
        </check>
      </Rule>
    </Group>
    <Group id="MicrosoftEdge" xml:lang="en">
      <title xml:lang="en">Microsoft Edge</title>
      <Value id="MicrosoftEdge-AllowExtensions_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="PreventAccessToTheAboutflagsPageInMicrosoftEdge_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="ConfigureCookies_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DontallowSmartScreenFilterwarningoverrides_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DontallowSmartScreenFilterwarningoverridesforunverifiedfiles_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DontallowWebRTCtosharetheLocalHostIPaddress_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="Turnoffaddressbarsearchsuggestions_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="TurnoffInPrivatebrowsing_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="TurnoffPasswordManager_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">no</value>
      </Value>
      <Value id="TurnoffPopupBlocker_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">yes</value>
      </Value>
      <Value id="TurnofftheSmartScreenFilter_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="MicrosoftEdge-AllowExtensions" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge - Allow Extensions</title>
        <description xml:lang="en">This setting lets you decide whether employees can load extensions in Microsoft Edge.</description>
        <rationale>To prevent malicious extensions from being loaded, only approved extensions should be installed.</rationale>
        <fixtext fixref="F-MicrosoftEdge_AllowExtensions_fix">To establish the recommended configuration via GP, set the following UI path to Disabled: Computer Configuration\Policies\Administrative Templates\Windows
          Components\Microsoft Edge\Allow Extensions</fixtext>
        <fix id="F-MicrosoftEdge_AllowExtensions_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MicrosoftEdge-AllowExtensions_var" export-name="oval:com.mcafee.oval:var:2899327" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899307" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge-PreventAccessToTheAboutflagsPageInMicrosoftEdge" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge - Prevent access to the about:flags page in Microsoft Edge</title>
        <description xml:lang="en">This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features.</description>
        <rationale>Users should not have access to access developer settings and experimental features, vulnerabilities could be introduced if not properly managed.</rationale>
        <fixtext fixref="F-MicrosoftEdge-PreventAccessToTheAboutflagsPageInMicrosoftEdge_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled:
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Prevent access to the about:flags page in Microsoft
          Edge
        </fixtext>
        <fix id="F-MicrosoftEdge-PreventAccessToTheAboutflagsPageInMicrosoftEdge_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventAccessToTheAboutflagsPageInMicrosoftEdge_var" export-name="oval:com.mcafee.oval:var:2899326" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899317" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge_ConfigureCookies" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge: Configure Cookies</title>
        <description xml:lang="en">This setting lets you configure how your company deals with cookies.
          The recommended state for this setting is: Enabled: Block only 3rd-party cookies. Configuring this setting to Enabled: Block all cookies. also conforms with the benchmark.</description>
        <rationale>
          Cookies can pose a serious privacy concern, many websites depend on them for operation. It is recommended when possible to block 3rd party cookies in order to reduce tracking.
        </rationale>
        <fixtext fixref="F-MicrosoftEdge_ConfigureCookies_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: Block only 3rd-party cookies (or, if applicable for your environment, Enabled: Block all cookies.): 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Configure Cookies
        </fixtext>
        <fix id="F-MicrosoftEdge_ConfigureCookies_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureCookies_var" export-name="oval:com.mcafee.oval:var:2486957" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486956" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge_DontallowSmartScreenFilterwarningoverrides" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge: Don't allow SmartScreen Filter warning overrides</title>
        <description xml:lang="en">This setting lets you decide whether employees can override the SmartScreen Filter warnings about potentially malicious websites.
          The recommended state for this setting is: Enabled</description>
        <rationale>
          SmartScreen will warn a user is a website or file is potentially malicious. Enabling this setting prevents these warnings from being bypassed.
        </rationale>
        <fixtext fixref="F-MicrosoftEdge_DontallowSmartScreenFilterwarningoverrides_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Don't allow SmartScreen Filter warning overrides
        </fixtext>
        <fix id="F-MicrosoftEdge_DontallowSmartScreenFilterwarningoverrides_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DontallowSmartScreenFilterwarningoverrides_var" export-name="oval:com.mcafee.oval:var:2486965" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486964" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge_DontallowSmartScreenFilterwarningoverridesforunverifiedfiles" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge: Don't allow SmartScreen Filter warning overrides for unverified files</title>
        <description xml:lang="en">This setting lets you decide whether employees can override the SmartScreen Filter warnings about downloading unverified files.
          The recommended state for this setting is: Enabled</description>
        <rationale>
          SmartScreen will warn a user is a website or file is potentially malicious. Enabling this setting prevents these warnings from being bypassed.
        </rationale>
        <fixtext fixref="F-MicrosoftEdge_DontallowSmartScreenFilterwarningoverridesforunverifiedfiles_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Don't allow SmartScreen Filter warning overrides for unverified files
        </fixtext>
        <fix id="F-MicrosoftEdge_DontallowSmartScreenFilterwarningoverridesforunverifiedfiles_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DontallowSmartScreenFilterwarningoverridesforunverifiedfiles_var" export-name="oval:com.mcafee.oval:var:2486973" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486972" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge_DontallowWebRTCtosharetheLocalHostIPaddress" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge: Don't allow WebRTC to share the LocalHost IP address</title>
        <description xml:lang="en">This setting lets you decide whether an employee's LocalHost IP address shows while making phone calls using the WebRTC protocol.
          The recommended state for this setting is: Enabled</description>
        <rationale>
          WebRTC is a Real-Time Communications open source project supported by all major browsers. Allowing a system's local IP address to be shared may be considered a privacy concern.
        </rationale>
        <fixtext fixref="F-MicrosoftEdge_DontallowWebRTCtosharetheLocalHostIPaddress_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Don't allow WebRTC to share the LocalHost IP address
        </fixtext>
        <fix id="F-MicrosoftEdge_DontallowWebRTCtosharetheLocalHostIPaddress_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DontallowWebRTCtosharetheLocalHostIPaddress_var" export-name="oval:com.mcafee.oval:var:2486981" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486980" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge_Turnoffaddressbarsearchsuggestions" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge: Turn off address bar search suggestions</title>
        <description xml:lang="en">This setting lets you decide whether search suggestions should appear in the Address bar of Microsoft Edge.
          The recommended state for this setting is: Disabled.</description>
        <rationale>
          Having search suggestions sent out to be processed is considered a privacy concern.
        </rationale>
        <fixtext fixref="F-MicrosoftEdge_Turnoffaddressbarsearchsuggestions_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Turn off address bar search suggestions
        </fixtext>
        <fix id="F-MicrosoftEdge_Turnoffaddressbarsearchsuggestions_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Turnoffaddressbarsearchsuggestions_var" export-name="oval:com.mcafee.oval:var:2486989" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486988" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge_TurnoffInPrivatebrowsing" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge: Turn off InPrivate browsing</title>
        <description xml:lang="en">This setting lets you decide whether employees can browse using InPrivate website browsing.
          The recommended state for this setting is: Disabled.</description>
        <rationale>
          Even though web filter logs can monitor traffic to and from websites, it is always a good practice to try and keep multiple source of logs. It can also be helpful to keep user from privately browsing in order to troubleshoot malicious site visits if a machine has become compromised.
        </rationale>
        <fixtext fixref="F-MicrosoftEdge_TurnoffInPrivatebrowsing_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Turn off InPrivate browsing
        </fixtext>
        <fix id="F-MicrosoftEdge_TurnoffInPrivatebrowsing_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnoffInPrivatebrowsing_var" export-name="oval:com.mcafee.oval:var:2486997" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486996" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge_TurnoffPasswordManager" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge: Turn off Password Manager</title>
        <description xml:lang="en">This setting lets you decide whether employees can save their passwords locally, using Password Manager.
          The recommended state for this setting is: Disabled.</description>
        <rationale>
          Using Password Manager can potentially makes it easier for an unauthorized user who gains access to the user’s desktop (including a coworker who sits down at a user’s desk soon after the user walks away and forgets to lock their workstation), to log in to sites as the user, without needing to know or enter the password
        </rationale>
        <fixtext fixref="F-MicrosoftEdge_TurnoffPasswordManager_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Turn off Password Manager
        </fixtext>
        <fix id="F-MicrosoftEdge_TurnoffPasswordManager_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnoffPasswordManager_var" export-name="oval:com.mcafee.oval:var:2894576" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894575" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge_TurnoffPopupBlocker" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge: Turn off Pop-up Blocker</title>
        <description xml:lang="en">This setting lets you decide whether to turn on Pop-up Blocker and whether to allow pop-ups to appear in secondary windows.</description>
        <rationale>
          The Pop-up Blocker can serve an important purpose by blocking malicious popups and helping prevent the machine from being compromised.
        </rationale>
        <fixtext fixref="F-MicrosoftEdge_TurnoffPopupBlocker_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Turn off Pop-up Blocker
        </fixtext>
        <fix id="F-MicrosoftEdge_TurnoffPopupBlocker_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnoffPopupBlocker_var" export-name="oval:com.mcafee.oval:var:2894585" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894584" />
        </check>
      </Rule>
      <Rule id="MicrosoftEdge_TurnofftheSmartScreenFilter" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Edge: Turn off Pop-up Blocker</title>
        <description xml:lang="en">This setting lets you decide whether to turn on SmartScreen Filter. SmartScreen Filter provides warning messages to help protect your employees from potential phishing scams and malicious software.
          The recommended state for this setting is: Enabled.</description>
        <rationale>
          SmartScreen serves an important purpose as it helps to warn users of possible malicious sites and files. Allowing users to turn off this setting can make the browser become more vulnerable to compromise.
        </rationale>
        <fixtext fixref="F-MicrosoftEdge_TurnofftheSmartScreenFilter_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Microsoft Edge\Turn off the SmartScreen Filter
        </fixtext>
        <fix id="F-MicrosoftEdge_TurnofftheSmartScreenFilter_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnofftheSmartScreenFilter_var" export-name="oval:com.mcafee.oval:var:2894593" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894592" />
        </check>
      </Rule>
    </Group>
    <Group id="MicrosoftPeer-to-PeerNetworking" xml:lang="en">
      <title xml:lang="en">Microsoft Peer-to-Peer Networking</title>
      <Value id="TurnOffPeer-to-PeerNetworkingServices_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="Network-MicrosoftPeer-to-PeerNetworkingServices_TurnOffMicrosoftPeer-to-PeerNetworkingServices" xml:lang="en" selected="false">
        <title xml:lang="en">Network - Microsoft Peer-to-Peer Networking Services: Turn Off Microsoft Peer-to-Peer Networking Services</title>
        <description xml:lang="en">This policy setting turns off Microsoft Peer-to-Peer Networking Services in its entirety, and will cause all dependent applications to stop working.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffPeer-to-PeerNetworkingServices_var" export-name="oval:com.mcafee.oval.windows:var:6662" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6662" />
        </check>
      </Rule>
    </Group>
    <Group id="MicrosoftSupportDiagnosticTool" xml:lang="en">
      <title xml:lang="en">Microsoft Support Diagnostic Tool</title>
      <Value id="TurnOnMSDTInteractiveCommunicationWithSupportProvider_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Rule id="MicrosoftSupportDiagnosticTool_TurnOnMSDTInteractiveCommunicationWithSupportProvider" xml:lang="en" selected="false">
        <title xml:lang="en">Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider</title>
        <description xml:lang="en">This policy setting determines whether the Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals.</description>
        <rationale xml:lang="en">Due to privacy concerns, data should never be sent to any 3rd party since this data could contain sensitive information.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34972-0</ident>
        <fixtext xml:lang="en" fixref="F-MicrosoftSupportDiagnosticTool_TurnOnMSDTInteractiveCommunicationWithSupportProvider_fix" reboot="false" strategy="unknown" disruption="unknown" complexity="unknown">To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool\Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider</fixtext>
        <fix id="F-MicrosoftSupportDiagnosticTool_TurnOnMSDTInteractiveCommunicationWithSupportProvider_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOnMSDTInteractiveCommunicationWithSupportProvider_var" export-name="oval:com.mcafee.oval:var:74952" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71724" />
        </check>
      </Rule>
    </Group>
    <Group id="MitigationOptions" xml:lang="en">
      <title xml:lang="en">Mitigation Options</title>
      <Value id="UntrustedFontBlocking_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1000000000000</value>
      </Value>
      <Rule id="MitigationOptions_SetUntrustedFontBlocking" xml:lang="en" selected="false">
        <title xml:lang="en">Mitigation Options: Set Untrusted Font Blocking</title>
        <description xml:lang="en">This policy setting allows you to set support for Kerberos to attempt authentication using the certificate for the device to the domain.</description>
        <rationale>
          Blocking untrusted fonts helps prevent both remote (web-based or email-based) and local EOP attacks that can happen during the font file-parsing process.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41386-4</ident>
        <fixtext fixref="F-MitigationOptions_SetUntrustedFontBlocking_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: Block untrusted fonts and log events: 
          Computer Configuration\Policies\Administrative Templates\System\Mitigation Options\Untrusted Font Blocking
        </fixtext>
        <fix id="F-MitigationOptions_SetUntrustedFontBlocking_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="UntrustedFontBlocking_var" export-name="oval:com.mcafee.oval:var:1415832" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415831" />
        </check>
      </Rule>
    </Group>
    <Group id="Netmeeting" xml:lang="en">
      <title xml:lang="en">Netmeeting</title>
      <Value id="DisableRemoteDesktopSharing_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="WindowsComponents-Netmeeting_DisableRemoteDesktopSharing" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Netmeeting: Disable Remote Desktop Sharing</title>
        <description xml:lang="en">This security setting determines whether the remote desktop sharing feature of NetMeeting is disabled.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisableRemoteDesktopSharing_var" export-name="oval:com.mcafee.oval:var:59512" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6595" />
        </check>
      </Rule>
    </Group>
    <Group id="NetworkConnections" xml:lang="en">
      <title xml:lang="en">Network Connections</title>
      <Value id="ProhibitNetworkBridge_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ProhibitInternetConnectionFirewall_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ProhibitInternetConnectionSharing_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="EnableHotspotAuthentication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="EnableHotspotAuthentication_var-selector-0">Not Configured</value>
        <value selector="EnableHotspotAuthentication_var-selector-1">Not Configured</value>
        <value selector="EnableHotspotAuthentication_var-selector-2">Not Configured</value>
      </Value>
      <Value id="RequireDomainUsersToElevate_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="NetworkConnections_RequireDomainUsersToElevateWhenSettingANetwork_sLocation" xml:lang="en" selected="false">
        <title xml:lang="en">Network Connections: Require domain users to elevate when setting a network's location</title>
        <description xml:lang="en">This policy setting determines whether to require domain users to elevate when setting a network's location.</description>
        <rationale>
          Allowing regular users to set a network location increases the risk and attack surface.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35554-5</ident>
        <fixtext fixref="NetworkConnections_RequireDomainUsersToElevateWhenSettingANetwork_sLocation_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Network\Network Connections\Require domain users to elevate when setting a network's location
        </fixtext>
        <fix id="F-NetworkConnections_RequireDomainUsersToElevateWhenSettingANetwork_sLocation_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequireDomainUsersToElevate_var" export-name="oval:com.mcafee.oval:var:72038" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71687" />
        </check>
      </Rule>
      <Rule id="Network-HotspotAuthenticationEnableHotspotAuthentication" xml:lang="en" selected="false">
        <title xml:lang="en">Network - Hotspot Authentication: Enable Hotspot Authentication</title>
        <description xml:lang="en">This policy setting defines whether Wi-Fi hotspots are probed for Wireless Internet Service Provider roaming (WISPr) protocol support.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableHotspotAuthentication_var" export-name="oval:com.mcafee.oval:var:244609" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404039" />
        </check>
      </Rule>
      <Rule id="Network-NetworkConnections_ProhibitInstallationAndConfigurationOfNetworkBridgeOnYourDNSDomainNetwork" xml:lang="en" selected="false">
        <title xml:lang="en">Network - Network Connections: Prohibit installation and configuration of Network Bridge on your DNS domain network</title>
        <description xml:lang="en">Determines whether a user can install and configure the Network Bridge.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ProhibitNetworkBridge_var" export-name="oval:com.mcafee.oval.windows:var:6026" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6026" />
        </check>
      </Rule>
      <Rule id="Network-NetworkConnections_ProhibitUseOfInternetConnectionFirewallOnYourDNSDomainNetwork" xml:lang="en" selected="false">
        <title xml:lang="en">Network - Network Connections: Prohibit use of Internet Connection Firewall on your DNS domain network</title>
        <description xml:lang="en">Determines whether users can enable the Internet Connection Firewall feature on a connection, and if the Internet Connection Firewall service can run on a computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ProhibitInternetConnectionFirewall_var" export-name="oval:com.mcafee.oval.windows:var:6025" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6025" />
        </check>
      </Rule>
      <Rule id="Network-NetworkConnections_ProhibitUseOfInternetConnectionSharingOnYourDNSDomainNetwork" xml:lang="en" selected="false">
        <title xml:lang="en">Network - Network Connections: Prohibit use of Internet Connection Sharing on your DNS domain network</title>
        <description xml:lang="en">Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connection and if the ICS service can run on the computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ProhibitInternetConnectionSharing_var" export-name="oval:com.mcafee.oval.windows:var:6024" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6024" />
        </check>
      </Rule>
    </Group>
    <Group id="TCPIPSettings" xml:lang="en">
      <title xml:lang="en">TCPIP Settings</title>
      <Group id="Parameters" xml:lang="en">
        <title xml:lang="en">Parameters</title>
        <Value id="DisableIPv6_var" interactive="false" operator="equals" type="string" xml:lang="en">
          <value selector="">255</value>
        </Value>
        <Rule id="Parameters_DisableIPv6" selected="false" xml:lang="en">
          <title xml:lang="en">Parameters: Disable IPv6</title>
          <description xml:lang="en">Internet Protocol version 6 (IPv6) is a set of protocols that computers use to exchange information over the Internet and over home and business networks. IPv6 allows for many more IP addresses to be assigned than IPv4 did. Older networking, hosts and operating systems may not support IPv6 natively. The recommended state for this setting is: DisabledComponents - 0xff (255)</description>
          <rationale>Since the vast majority of private corporate networks have no need to utilize IPv6 (because they have access to private IPv4 addressing), disabling IPv6 components reduces a possible attack surface that is also harder to monitor the traffic on. As a result, we recommend configuring IPv6 to a Disabled state when it is not needed.</rationale>
          <ident system="CIS_Critical_Security_Controls">CSC ID 9</ident>
          <fixtext fixref="F-Parameters_DisableIPv6_fix">To establish the recommended configuration, set the following Registry value to 0xff (255) (DWORD): HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters:DisabledComponents</fixtext>
          <fix id="F-Parameters_DisableIPv6_fix" />
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export export-name="oval:com.mcafee.oval:var:2895103" value-id="DisableIPv6_var" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2895100" />
          </check>
        </Rule>
      </Group>
    </Group>
    <Group id="NetworkSharing_1" xml:lang="en">
      <title xml:lang="en">Network Sharing</title>
      <Value id="Preventusersfromsharingfileswithintheirprofile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="NetworkSharing_SetPreventusersfromsharingfileswithintheirprofile" xml:lang="en" selected="false">
        <title xml:lang="en">Network Sharing: Set Prevent users from sharing files within their profile</title>
        <description xml:lang="en">This policy setting specifies whether users can share files within their profile.</description>
        <rationale xml:lang="en">If not properly controlled a user could accidentally share sensitive data with unauthorized users. In a corporate environment, the company should provide a managed location for file sharing, such as a file server or SharePoint.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33490-4</ident>
        <fixtext fixref="F-NetworkSharing_SetPreventusersfromsharingfileswithintheirprofile_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          User Configuration\Policies\Administrative Templates\Windows Components\Network Sharing\Prevent users from sharing files within their profile.
        </fixtext>
        <fix id="F-NetworkSharing_SetPreventusersfromsharingfileswithintheirprofile_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Preventusersfromsharingfileswithintheirprofile_var" export-name="oval:com.mcafee.oval:var:2486369" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486368" />
        </check>
      </Rule>
    </Group>
    <Group id="OnlineAssistance" xml:lang="en">
      <title xml:lang="en">Online Assistance</title>
      <Value id="TurnOffUntrustedContent_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="WindowsComponents-OnlineAssistance_TurnOffUntrustedContent" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Online Assistance: Turn off Untrusted Content</title>
        <description xml:lang="en">This policy setting determines whether untrusted content is rendered.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffUntrustedContent_var" export-name="oval:com.mcafee.oval.1:var:61091" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6109" />
        </check>
      </Rule>
    </Group>
    <Group id="OneDrive" xml:lang="en">
      <title xml:lang="en">OneDrive</title>
      <Value id="PreventtheusageofOneDriveforfilestorage_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="OneDrive_SetPreventtheusageofOneDriveforfilestorage" xml:lang="en" selected="false">
        <title xml:lang="en">OneDrive: Set Prevent the usage of OneDrive for file storage</title>
        <description xml:lang="en">This policy setting lets you prevent apps and features from working with files on OneDrive.</description>
        <rationale>
          Enabling this setting prevents users from accidentally uploading confidential or sensitive corporate information to OneDrive cloud service.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33826-9</ident>
        <fixtext fixref="F-OneDrive_SetPreventtheusageofOneDriveforfilestorage_fix">
          To establish the recommended configuration via GP, set the following Group Policy setting to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\OneDrive\Prevent the usage of OneDrive for file storage
        </fixtext>
        <fix id="F-OneDrive_SetPreventtheusageofOneDriveforfilestorage_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventtheusageofOneDriveforfilestorage_var" export-name="oval:com.mcafee.oval:var:2486289" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486288" />
        </check>
      </Rule>
    </Group>
    <Group id="PowerManagement" xml:lang="en">
      <title xml:lang="en">Power Management</title>
      <Value id="NetworkConnectivityDuringConnectedStandby_onBattery_._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="NetworkConnectivityDuringConnectedstandby_pluggedIn_._var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="RequireAPasswordWhenAComputerWakes_OnBattery__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="RequireAPasswordWhenAComputerWakes_Plugged__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="AllowStandbyStatesWhenSleeping_OnBattery__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="AllowStandbyStatesWhenSleeping_PluggedIn__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Rule id="PowerManagement_OnBattery_-AllowNetworkConnectivityDuringConnectedStandby_onBattery_" xml:lang="en" selected="false">
        <title xml:lang="en">Power Management  - Allow network connectivity during connected standby (on battery)</title>
        <description xml:lang="en">This policy setting allows you to control the network connectivity state in standby on modern standby-capable systems.</description>
        <rationale>Disabling this setting ensures that the computer will not be accessible to attackers over a WLAN network while left unattended, on battery and in a sleep state.</rationale>
        <fixtext fixref="F-PowerManagement_OnBattery_-AllowNetworkConnectivityDuringConnectedStandby_onBattery__fix">To establish the recommended configuration via GP, set the following UI path to Disabled:
          Computer Configuration\Policies\Administrative Templates\System\Power
          Management\Sleep Settings\Allow network connectivity during connected-standby
          (on battery)
        </fixtext>
        <fix id="F-PowerManagement_OnBattery_-AllowNetworkConnectivityDuringConnectedStandby_onBattery__fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NetworkConnectivityDuringConnectedStandby_onBattery_._var" export-name="oval:com.mcafee.oval:var:2899235" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899226" />
        </check>
      </Rule>
      <Rule id="PowerManagement-AllowNetworkConnectivityDuringConnectedstandby_pluggedIn_" xml:lang="en" selected="false">
        <title xml:lang="en">Power Management - Allow network connectivity during connectedstandby (plugged in)</title>
        <description xml:lang="en">This policy setting allows you to control the network connectivity state in standby on modern standby-capable systems.</description>
        <rationale>Disabling this setting ensures that the computer will not be accessible to attackers over a WLAN network while left unattended, plugged in and in a sleep state.</rationale>
        <fixtext fixref="F-PowerManagement-AllowNetworkConnectivityDuringConnectedstandby_pluggedIn__fix">To establish the recommended configuration via GP, set the following UI path to Disabled:
          Computer Configuration\Policies\Administrative Templates\System\Power
          Management\Sleep Settings\Allow network connectivity during connected-standby
          (plugged in</fixtext>
        <fix id="F-PowerManagement-AllowNetworkConnectivityDuringConnectedstandby_pluggedIn__fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NetworkConnectivityDuringConnectedstandby_pluggedIn_._var" export-name="oval:com.mcafee.oval:var:2899245" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899236" />
        </check>
      </Rule><Rule id="PowerManagement_RequireAPasswordWhenAComputerWakes_OnBattery_" xml:lang="en" selected="false">
        <title xml:lang="en">Power Management: Require a Password when a Computer Wakes (On Battery)</title>
        <description xml:lang="en">This policy setting determines whether or not the user is prompted for a password when the system resumes from sleep.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequireAPasswordWhenAComputerWakes_OnBattery__var" export-name="oval:com.mcafee.oval:var:59464" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6689" />
        </check>
      </Rule>
      <Rule id="PowerManagement_RequireAPasswordWhenAComputerWakes_PluggedIn_" xml:lang="en" selected="false">
        <title xml:lang="en">Power Management: Require a Password when a Computer Wakes (Plugged In)</title>
        <description xml:lang="en">This policy setting determines whether or not the user is prompted for a password when the system resumes from sleep.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequireAPasswordWhenAComputerWakes_Plugged__var" export-name="oval:com.mcafee.oval:var:59465" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6690" />
        </check>
      </Rule>
      <Rule id="SleepSettings_AllowStandbyStates_S1-S3_WhenSleeping_OnBattery_" xml:lang="en" selected="false">
        <title xml:lang="en">Sleep Settings: Allow standby states (S1-S3) when sleeping (On Battery)</title>
        <description xml:lang="en">This policy setting dictates whether or not Windows is allowed to use standby states when sleeping the computer while on battery power.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowStandbyStatesWhenSleeping_OnBattery__var" export-name="oval:com.mcafee.oval:var:244457" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215767" />
        </check>
      </Rule>
      <Rule id="SleepSettings_AllowStandbyStates_S1-S3_WhenSleeping_PluggedIn_" xml:lang="en" selected="false">
        <title xml:lang="en">Sleep Settings: Allow standby states (S1-S3) when sleeping (Plugged In)</title>
        <description xml:lang="en">This policy setting dictates whether or not Windows is allowed to use standby states when sleeping the computer while plugged in.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowStandbyStatesWhenSleeping_PluggedIn__var" export-name="oval:com.mcafee.oval:var:244458" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215768" />
        </check>
      </Rule>
    </Group>
    <Group id="Playback_1" xml:lang="en">
      <title xml:lang="en">Playback</title>
      <Value id="PreventCodecDownload_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="Playback_PreventCodecDownload" xml:lang="en" selected="false">
        <title xml:lang="en">Playback: Prevent Codec Download</title>
        <description xml:lang="en">This policy setting allows you to prevent Windows Media Player from downloading codecs.</description>
        <rationale xml:lang="en">Codecs could contain malicious code. Although Microsoft and other vendors of codecs used by Windows Media Player take steps to minimize this risk some organizations may want to remove it as a potential path of exploitation.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33793-1</ident>
        <fixtext fixref="F-Playback_PreventCodecDownload_fix">
          To establish the recommended configuration via GP, set the following UI path to Not Configured. 
          User Configuration\Administrative Templates\Windows Components\Windows Media Player\Playback\Prevent Codec Download
        </fixtext>
        <fix id="F-Playback_PreventCodecDownload_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventCodecDownload_var" export-name="oval:com.mcafee.oval:var:1413005" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1412997" />
        </check>
      </Rule>
    </Group>
    <Group id="RemoteAssistance" xml:lang="en">
      <title xml:lang="en">Remote Assistance</title>
      <Value id="OfferRemoteAssistance_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="SolicitedRemoteAssistance_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="TurnOnSessionLogging_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="RemoteAssistance_OfferRemoteAssistance" xml:lang="en" selected="false">
        <title xml:lang="en">Remote Assistance: Offer Remote Assistance</title>
        <description xml:lang="en">This policy setting determines whether or not a support person or IT administrator can offer remote assistance to this computer without a user explicitly requesting it first.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OfferRemoteAssistance_var" export-name="oval:com.mcafee.oval:var:59483" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6563" />
        </check>
      </Rule>
      <Rule id="RemoteAssistance_SolicitedRemoteAssistance" xml:lang="en" selected="false">
        <title xml:lang="en">Remote Assistance: Solicited Remote Assistance</title>
        <description xml:lang="en">This policy setting determines whether users can solicit another user’s assistance via Remote Assistance.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SolicitedRemoteAssistance_var" export-name="oval:com.mcafee.oval:var:59484" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6564" />
        </check>
      </Rule>
      <Rule id="RemoteAssistance_TurnOnSessionLogging" xml:lang="en" selected="false">
        <title xml:lang="en">Remote Assistance: Turn on session logging</title>
        <description xml:lang="en">This policy setting determines whether logging is turned on or off.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOnSessionLogging_var" export-name="oval:com.mcafee.oval:var:59466" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6694" />
        </check>
      </Rule>
    </Group>
    <Group id="RemoteProcedureCall" xml:lang="en">
      <title xml:lang="en">Remote Procedure Call</title>
      <Value id="RPCEndpointMapperClientAuthentication_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="RPCEndpointMapperClientAuthentication_var0-selector">Disabled</value>
      </Value>
      <Value id="RestrictionsForUnauthenticatedRPCClients_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
        <value selector="RestrictionsForUnauthenticatedRPCClients_var0-selector">1</value>
        <value selector="RestrictionsForUnauthenticatedRPCClients_var0-selector-7">1</value>
        <value selector="RestrictionsForUnauthenticatedRPCClients_var0-selector-8">1</value>
      </Value>
      <Rule id="RemoteProcedureCall_RPCEndpointMapperClient" xml:lang="en" selected="false">
        <title xml:lang="en">Remote Procedure Call: RPC Endpoint Mapper Client</title>
        <description xml:lang="en">This policy setting determines whether RPC Clients that need to communicate with the Endpoint Mapper Service are directed to authenticate as long as the RPC call for which the endpoint needs to be resolved has authentication information.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RPCEndpointMapperClientAuthentication_var0" export-name="oval:com.mcafee.oval:var:59485" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6566" />
        </check>
      </Rule>
      <Rule id="RemoteProcedureCall_RestrictionsForUnauthenticatedRPCClients" xml:lang="en" selected="false">
        <title xml:lang="en">Remote Procedure Call: Restrictions for Unauthenticated RPC clients</title>
        <description xml:lang="en">This policy setting determines whether the RPC Runtime on an RPC server is directed to restrict unauthenticated RPC clients connecting to RPC servers running on a machine.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RestrictionsForUnauthenticatedRPCClients_var0" export-name="oval:com.mcafee.oval.windows:var:6565" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6565" />
        </check>
      </Rule>
    </Group>
    <Group id="RSSFeeds" xml:lang="en">
      <title xml:lang="en">RSS Feeds</title>
      <Value id="TurnOffDownloadingOfEnclosures_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="RSSFeeds_TurnOff_PreventDownloadingOfEnclosures" xml:lang="en" selected="false">
        <title xml:lang="en">RSS Feeds: Turn off / Prevent downloading of enclosures</title>
        <description xml:lang="en">This policy setting prevents users from having enclosures (file attachments) downloaded from a feed to the user's computer.</description>
        <rationale xml:lang="en">Allowing attachments to be downloaded through the RSS feed can introduce files that could have malicious intent.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34822-7</ident>
        <fixtext xml:lang="en" fixref="F-RSSFeeds_TurnOff_PreventDownloadingOfEnclosures_fix" reboot="false" strategy="unknown" disruption="unknown" complexity="unknown">To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\RSS Feeds\Prevent downloading of enclosures</fixtext>
        <fix id="F-RSSFeeds_TurnOff_PreventDownloadingOfEnclosures_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffDownloadingOfEnclosures_var" export-name="oval:com.mcafee.oval.windows:var:61101" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6110" />
        </check>
      </Rule>
    </Group>
    <Group id="SCM_PassTheHashMitigations" xml:lang="en">
      <title xml:lang="en">SCM: Pass the Hash Mitigations</title>
      <Value id="SCMPassTheHashMitigationsApplyUACRestrictionsToLocalAccountsOnNetworkLogons_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SCMPassTheHashMitigationsSetWDigestAuthentication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="SCMPassTheHashMitigationsSetApplyUACRestrictionsToLocalAccountsOnNetworkLogons" xml:lang="en" selected="false">
        <title xml:lang="en">SCM: Pass the Hash Mitigations: Set Apply UAC restrictions to local accounts on network logons</title>
        <description xml:lang="en">This setting controls whether local accounts can be used for remote administration via network logon such as NET USE, connecting to C$, etc.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale xml:lang="en">Local accounts are at high risk for credential theft when the same account and password is configured on multiple systems. Enabling this policy significantly reduces that risk.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35486-0</ident>
        <fixtext fixref="F-SCMPassTheHashMitigationsSetApplyUACRestrictionsToLocalAccountsOnNetworkLogons_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. 
          Computer Configuration\Administrative Templates\SCM: Pass the Hash Mitigations
          Note: this UI path does not exist by default. An additional ADMX template is required.
        </fixtext>
        <fix id="F-SCMPassTheHashMitigationsSetApplyUACRestrictionsToLocalAccountsOnNetworkLogons_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SCMPassTheHashMitigationsApplyUACRestrictionsToLocalAccountsOnNetworkLogons_var" export-name="oval:com.mcafee.oval:var:1175634" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1175619" />
        </check>
      </Rule>
      <Rule id="SCM_PassTheHashMitigations_SetWDigestAuthentication" xml:lang="en" selected="false">
        <title xml:lang="en">SCM: Pass the Hash Mitigations: Set WDigest Authentication</title>
        <description xml:lang="en">When WDigest authentication is enabled, Lsass.exe retains a copy of the user's plaintext password in memory, where it can be at risk of theft.</description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale xml:lang="en">Prevent the plaintext storage of credentials may reduce opportunity for credential theft.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35815-0</ident>
        <fixtext fixref="F-SCM_PassTheHashMitigations_SetWDigestAuthentication_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled. 
          Computer Configuration\Administrative Templates\SCM: Pass the Hash Mitigations\WDigest Authentication (disabling may require KB2871997)
        </fixtext>
        <fix id="F-SCM_PassTheHashMitigations_SetWDigestAuthentication_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SCMPassTheHashMitigationsSetWDigestAuthentication_var" export-name="oval:com.mcafee.oval:var:1154379" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1154371" />
        </check>
      </Rule>
    </Group>
    <Group id="Search" xml:lang="en">
      <title xml:lang="en">Search</title>
      <Value id="AllowIndexingOfEncryptedFiles_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="EnableIndexingUncachedExchangeFolders_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var-selector-0">Not Configured</value>
        <value selector="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var-selector-1">Not Configured</value>
        <value selector="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DoNotSearchTheWebOrDisplayWebResults_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DoNotSearchTheWebOrDisplayWebResults_var-selector-0">Not Configured</value>
        <value selector="DoNotSearchTheWebOrDisplayWebResults_var-selector-1">Not Configured</value>
        <value selector="DoNotSearchTheWebOrDisplayWebResults_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DoNotSearchTheWebOrDisplayWebResults_metered__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DoNotSearchTheWebOrDisplayWebResults_metered__var-selector-0">Not Configured</value>
        <value selector="DoNotSearchTheWebOrDisplayWebResults_metered__var-selector-1">Not Configured</value>
        <value selector="DoNotSearchTheWebOrDisplayWebResults_metered__var-selector-2">Not Configured</value>
      </Value>
      <Value id="SetTheSafeSearchSettingForSearch_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="SetTheSafeSearchSettingForSearch_var-selector-0">99999</value>
        <value selector="SetTheSafeSearchSettingForSearch_var-selector-1">99999</value>
        <value selector="SetTheSafeSearchSettingForSearch_var-selector-2">99999</value>
      </Value>
      <Value id="SetWhatInformationIsSharedInSearch_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="SetWhatInformationIsSharedInSearch_var-selector-0">99999</value>
        <value selector="SetWhatInformationIsSharedInSearch_var-selector-1">99999</value>
        <value selector="SetWhatInformationIsSharedInSearch_var-selector-2">99999</value>
      </Value>
      <Value id="AllowsearchandCortanatouselocation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="AllowCortana_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="AllowCortanaAboveLockScreen_var" interactive="false" operator="equals" type="string" xml:lang="en">
        <value selector="">0</value>
      </Value>
      <Rule id="Search_SetAllowCortana" xml:lang="en" selected="false">
        <title xml:lang="en">Search - Set AllowCortana</title>
        <description xml:lang="en">This policy setting specifies whether Cortana is allowed on the device.</description>
        <rationale>
          If Cortana is enabled, sensitive information could be contained in search history and sent out to Microsoft.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41421-9</ident>
        <fixtext fixref="F-Search_SetAllowCortana_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Search\Allow Cortana     
        </fixtext>
        <fix id="F-Search_SetAllowCortana_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowCortana_var" export-name="oval:com.mcafee.oval:var:2486303" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486302" />
        </check>
      </Rule>
      <Rule id="Search_SetAllowCortanaAboveLockScreen" selected="false" xml:lang="en">
        <title xml:lang="en">Search - Set Allow Cortana above lock screen</title>
        <description xml:lang="en">This policy setting specifies whether Cortana is allowed on the device.</description>
        <rationale>Access to any computer resource should not be allowed when the device is locked.</rationale>
        <fixtext fixref="F-Search_SetAllowCortanaAboveLockScreen_fix">To establish the recommended configuration via GP, set the following UI path to Disabled:
          Computer Configuration\Policies\Administrative Templates\Windows
          Components\Search\Allow Cortana above lock screen
        </fixtext>
        <fix id="F-Search_SetAllowCortanaAboveLockScreen_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export export-name="oval:com.mcafee.oval:var:2899333" value-id="AllowCortanaAboveLockScreen_var" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899328" />
        </check>
      </Rule>
      <Rule id="Search_SetAllowsearchandCortanatouselocation" xml:lang="en" selected="false">
        <title xml:lang="en">Search - Set Allow search and Cortana to use location</title>
        <description xml:lang="en">This policy setting specifies whether search and Cortana can provide location aware search and Cortana results.</description>
        <rationale>
          In an Enterprise having Cortana and Search having access to location is unnecessary. Organizations may not want this information shared out.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41372-4</ident>
        <fixtext fixref="F-Search_SetAllowsearchandCortanatouselocation_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Search\Allow search and Cortana to use location     
        </fixtext>
        <fix id="F-Search_SetAllowsearchandCortanatouselocation_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowsearchandCortanatouselocation_var" export-name="oval:com.mcafee.oval:var:2486311" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486310" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-SearchDoNotAllowLocationsOnRemovableDrivesToBeAddedToLibraries" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Search: Do not allow locations on removable drives to be added to libraries</title>
        <description xml:lang="en">This policy setting configures whether or not locations on removable drives can be added to libraries.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowLocationsOnRemovableDrivesToBeAdded_var" export-name="oval:com.mcafee.oval:var:244590" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404018" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-SearchDontSearchTheWebOrDisplayWebResultsInSearch" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Search: Don't search the web or display web results in Search</title>
        <description xml:lang="en">This policy setting allows you to control whether or not Search can perform queries on the web, and if the web results are displayed in Search.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotSearchTheWebOrDisplayWebResults_var" export-name="oval:com.mcafee.oval:var:244591" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404019" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-SearchDontSearchTheWebOrDisplayWebResultsInSearchOverMeteredConnections" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Search: Don't search the web or display web results in Search over metered connections</title>
        <description xml:lang="en">This policy setting allows you to control whether or not Search can perform queries on the web over metered connections, and if the web results are displayed in Search.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotSearchTheWebOrDisplayWebResults_metered__var" export-name="oval:com.mcafee.oval:var:244592" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404020" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-SearchSetTheSafeSearchSettingForSearch" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Search: Set the SafeSearch setting for Search</title>
        <description xml:lang="en">This policy setting allows you to control the SafeSearch setting used when performing a query in Search.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SetTheSafeSearchSettingForSearch_var" export-name="oval:com.mcafee.oval:var:244593" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404021" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-SearchSetWhatInformationIsSharedInSearch" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Search: Set what information is shared in Search</title>
        <description xml:lang="en">This policy setting allows you to control what information is shared with Bing in Search.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SetWhatInformationIsSharedInSearch_var" export-name="oval:com.mcafee.oval:var:244594" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404022" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-Search_AllowIndexingOfEncryptedFiles" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Search: Allow indexing of encrypted files</title>
        <description xml:lang="en">This policy setting determines whether encrypted items are allowed to be indexed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowIndexingOfEncryptedFiles_var" export-name="oval:com.mcafee.oval:var:59470" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6704" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-Search_EnableIndexingUncachedExchangeFolders" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Search: Enable indexing uncached Exchange folders</title>
        <description xml:lang="en">This policy setting determines whether indexing of mail items on a Microsoft Exchange server is prevented when Microsoft Outlook is run in uncached mode.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableIndexingUncachedExchangeFolders_var" export-name="oval:com.mcafee.oval:var:59471" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6705" />
        </check>
      </Rule>
    </Group>
    <Group id="Skydrive" xml:lang="en">
      <title xml:lang="en">Skydrive</title>
      <Value id="PreventSkyDriveFilesFromSyncing_metered__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="PreventSkyDriveFilesFromSyncing_metered__var-selector-0">99999</value>
        <value selector="PreventSkyDriveFilesFromSyncing_metered__var-selector-1">99999</value>
        <value selector="PreventSkyDriveFilesFromSyncing_metered__var-selector-2">99999</value>
      </Value>
      <Value id="PreventTheUsageOfSkyDriveForFileStorage_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="PreventTheUsageOfSkyDriveForFileStorage_var-selector-0">Not Configured</value>
        <value selector="PreventTheUsageOfSkyDriveForFileStorage_var-selector-1">Not Configured</value>
        <value selector="PreventTheUsageOfSkyDriveForFileStorage_var-selector-2">Not Configured</value>
      </Value>
      <Value id="SaveDocumentsAndPicturesToTheLocalPC_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="SaveDocumentsAndPicturesToTheLocalPC_var-selector-0">Not Configured</value>
        <value selector="SaveDocumentsAndPicturesToTheLocalPC_var-selector-1">Not Configured</value>
        <value selector="SaveDocumentsAndPicturesToTheLocalPC_var-selector-2">Not Configured</value>
      </Value>
      <Rule id="WindowsComponents-SkyDrivePreventSkyDriveFilesFromSyncingOverMeteredConnections" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - SkyDrive: Prevent SkyDrive files from syncing over metered connections</title>
        <description xml:lang="en">This policy setting allows configuration of SkyDrive file sync behavior on metered connections.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventSkyDriveFilesFromSyncing_metered__var" export-name="oval:com.mcafee.oval:var:244595" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404023" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-SkyDrivePreventTheUsageOfSkyDriveForFileStorage" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - SkyDrive: Prevent the usage of SkyDrive for file storage</title>
        <description xml:lang="en">This policy setting lets you prevent apps and features from working with files on SkyDrive.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventTheUsageOfSkyDriveForFileStorage_var" export-name="oval:com.mcafee.oval:var:244596" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404024" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-SkyDriveSaveDocumentsAndPicturesToTheLocalPCByDefault" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - SkyDrive: Save documents and pictures to the local PC by default</title>
        <description xml:lang="en">This policy setting lets you select the local PC as the default save location.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SaveDocumentsAndPicturesToTheLocalPC_var" export-name="oval:com.mcafee.oval:var:244597" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404025" />
        </check>
      </Rule>
    </Group>
    <Group id="Store" xml:lang="en">
      <title xml:lang="en">Store</title>
      <Value id="TurnOffAutomaticDownloadAndInstallOfUpdates_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="TurnOffAutomaticDownloadAndInstallOfUpdates_var-selector-0">Not Configured</value>
        <value selector="TurnOffAutomaticDownloadAndInstallOfUpdates_var-selector-1">Not Configured</value>
        <value selector="TurnOffAutomaticDownloadAndInstallOfUpdates_var-selector-2">Not Configured</value>
      </Value>
      <Value id="TurnOffAutomaticDownloadOfUpdates_Win8__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="TurnOffAutomaticDownloadOfUpdates_Win8__var-selector-0">Not Configured</value>
        <value selector="TurnOffAutomaticDownloadOfUpdates_Win8__var-selector-1">Not Configured</value>
        <value selector="TurnOffAutomaticDownloadOfUpdates_Win8__var-selector-2">Not Configured</value>
      </Value>
      <Value id="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var-selector-0">Not Configured</value>
        <value selector="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var-selector-1">Not Configured</value>
        <value selector="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DisableallappsfromWindowsStore_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="TurnoffAutomaticDownloadandInstallofupdates_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">4</value>
      </Value>
      <Value id="TurnofftheoffertoupdatetothelatestversionofWindows_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="TurnofftheStoreapplication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="Store_DisableallappsfromWindowsStore" xml:lang="en" selected="false">
        <title xml:lang="en">Store: Disable all apps from Windows Store</title>
        <description xml:lang="en">This setting configures the launch of all apps from the Windows Store that came pre-installed or were downloaded.
          The recommended state for this setting is: Enabled.</description>
        <rationale>
          The Store service is a retail outlet built into Windows, primarily for consumer use. In an enterprise environment the IT department should be managing the installation of all applications to reduce the risk of the installation of vulnerable software.
        </rationale>
        <fixtext fixref="F-Store_DisableallappsfromWindowsStore_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Store\Disable all apps from Windows Store
        </fixtext>
        <fix id="F-Store_DisableallappsfromWindowsStore_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisableallappsfromWindowsStore_var" export-name="oval:com.mcafee.oval:var:2894601" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894600" />
        </check>
      </Rule>
      <Rule id="Store_TurnoffAutomaticDownloadandInstallofupdates" xml:lang="en" selected="false">
        <title xml:lang="en">Store: Turn off Automatic Download and Install of updates</title>
        <description xml:lang="en">This setting enables or disables the automatic download and installation of app updates.
          The recommended state for this setting is: Disabled.</description>
        <rationale>
          Keeping your system properly patched can help protect against 0 day vulnerabilities.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35807-7</ident>
        <fixtext fixref="F-Store_TurnoffAutomaticDownloadandInstallofupdates_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\WindowsStore\Turn off Automatic Download and Install of updates
        </fixtext>
        <fix id="F-Store_TurnoffAutomaticDownloadandInstallofupdates_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnoffAutomaticDownloadandInstallofupdates_var" export-name="oval:com.mcafee.oval:var:2894609" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894608" />
        </check>
      </Rule>
      <Rule id="Store_TurnofftheoffertoupdatetothelatestversionofWindows" xml:lang="en" selected="false">
        <title xml:lang="en">Store: Turn off the offer to update to the latest version of Windows</title>
        <description xml:lang="en">Enables or disables the Store offer to update to the latest version of Windows.
          The recommended state for this setting is: Enabled.</description>
        <rationale>
          Unplanned OS upgrades can lead to more preventable support calls. IT should be pushing only approved updates to the machine.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35809-3</ident>
        <fixtext fixref="F-Store_TurnofftheoffertoupdatetothelatestversionofWindows_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Store\Turn off the offer to update to the latest version of Windows
        </fixtext>
        <fix id="F-Store_TurnofftheoffertoupdatetothelatestversionofWindows_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnofftheoffertoupdatetothelatestversionofWindows_var" export-name="oval:com.mcafee.oval:var:2894617" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894616" />
        </check>
      </Rule>
      <Rule id="Store_TurnofftheStoreapplication" xml:lang="en" selected="false">
        <title xml:lang="en">Store: Turn off the Store application</title>
        <description xml:lang="en">This setting denies or allows access to the Store application.</description>
        <rationale>
          Only applications approved by an IT department should be installed. Allowing users to install 3rd party applications can lead to missed patches and potential zero day vulnerabilities.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35811-9</ident>
        <fixtext fixref="F-Store_TurnofftheStoreapplication_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Store\Turn off the Store application
        </fixtext>
        <fix id="F-Store_TurnofftheStoreapplication_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnofftheStoreapplication_var" export-name="oval:com.mcafee.oval:var:2894626" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2894625" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-StoreTurnOffAutomaticDownloadAndInstallOfUpdates" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Store: Turn off Automatic Download and Install of updates</title>
        <description xml:lang="en">This policy setting enables or disables the automatic download and installation of app updates.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffAutomaticDownloadAndInstallOfUpdates_var" export-name="oval:com.mcafee.oval:var:244598" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404026" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-StoreTurnOffAutomaticDownloadOfUpdatesOnWin8Machines" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Store: Turn off Automatic Download of updates on Win8 machines</title>
        <description xml:lang="en">This policy setting enables or disables the automatic download of app updates on PCs running Windows 8.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffAutomaticDownloadOfUpdates_Win8__var" export-name="oval:com.mcafee.oval:var:244599" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404027" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-StoreTurnOffTheOfferToUpdateToTheLatestVersionOfWindows" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Store: Turn off the offer to update to the latest version of Windows</title>
        <description xml:lang="en">This policy setting enables or disables the Store offer to update to the latest version of Windows.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffTheOfferToUpdateToTheLatestVersionOfWindows_var" export-name="oval:com.mcafee.oval:var:244600" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404028" />
        </check>
      </Rule>
    </Group>
    <Group id="SyncDataAndSettings" xml:lang="en">
      <title xml:lang="en">Sync data and settings</title>
      <Value id="DoNotSyncApps_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DoNotSyncApps_var-selector-0">Not Configured</value>
        <value selector="DoNotSyncApps_var-selector-1">Not Configured</value>
        <value selector="DoNotSyncApps_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DoNotSyncStartSettings_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DoNotSyncStartSettings_var-selector-0">Not Configured</value>
        <value selector="DoNotSyncStartSettings_var-selector-1">Not Configured</value>
        <value selector="DoNotSyncStartSettings_var-selector-2">Not Configured</value>
      </Value>
      <Value id="ForceAutomaticSetupForAllUsers_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="ForceAutomaticSetupForAllUsers_var-selector-0">Not Configured</value>
        <value selector="ForceAutomaticSetupForAllUsers_var-selector-1">Not Configured</value>
        <value selector="ForceAutomaticSetupForAllUsers_var-selector-2">Not Configured</value>
      </Value>
      <Rule id="WindowsComponents-SyncYourSettingsDoNotSyncApps" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Sync your settings: Do not sync Apps</title>
        <description xml:lang="en">This policy setting determines whether the "AppSync" group can sync to and from this PC.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotSyncApps_var" export-name="oval:com.mcafee.oval:var:244601" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404029" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-SyncYourSettingsDoNotSyncStartSettings" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Sync your settings: Do not sync start settings</title>
        <description xml:lang="en">This policy setting determines whether the "Start layout" group can sync to and from this PC.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotSyncStartSettings_var" export-name="oval:com.mcafee.oval:var:244602" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404030" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WorkFoldersForceAutomaticSetupForAllUsers" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Work Folders: Force automatic setup for all users</title>
        <description xml:lang="en">This policy setting specifies whether Work Folders should be set up automatically for all users of the affected computer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ForceAutomaticSetupForAllUsers_var" export-name="oval:com.mcafee.oval:var:244607" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404035" />
        </check>
      </Rule>
    </Group>
    <Group id="Security_1" xml:lang="en">
      <title xml:lang="en">Security</title>
      <Value id="RequireSecureRPCCommunication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="Security_RequireSecureRPCCommunication" xml:lang="en" selected="false">
        <title xml:lang="en">Security: Require secure RPC communication</title>
        <description xml:lang="en">This policy setting specifies whether a Remote Desktop Session Host server requires secure RPC communication with all clients or allows unsecured communication.</description>
        <rationale>
          Allowing unsecure RPC communication can exposes the server to man in the middle attacks and data disclosure attacks.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35723-6</ident>
        <fixtext fixref="F-Security_RequireSecureRPCCommunication_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security\Require secure RPC communication     
        </fixtext>
        <fix id="F-Security_RequireSecureRPCCommunication_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RequireSecureRPCCommunication_var" export-name="oval:com.mcafee.oval:var:244493" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215796" />
        </check>
      </Rule>
      </Group>
    <Group id="Setup" xml:lang="en">
      <title xml:lang="en">Setup</title>
      <Value id="ControlEventLogbehaviorwhenthelogfilereachesitsmaximumsize_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
       <Rule id="Setup_ControlEventLogbehaviorwhenthelogfilereachesitsmaximumsize" xml:lang="en" selected="false">
        <title xml:lang="en">Setup - Control Event Log behavior when the log file reaches its maximum size</title>
        <description xml:lang="en">This policy setting controls Event Log behavior when the log file reaches its maximum size. If you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost. If you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events. Note: Old events may or may not be retained according to the "Backup log automatically when full"• policy setting. The recommended state for this setting is: Disabled.</description>
        <rationale>
          If new events are not recorded it may be difficult or impossible to determine the root cause of system problems or the unauthorized activities of malicious users
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34170-1</ident>
        <fixtext fixref="F-Setup_ControlEventLogbehaviorwhenthelogfilereachesitsmaximumsize_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled. Computer Configuration\Administrative Templates\Windows Components\Event Log Service\Setup\Control Event Log behavior when the log file reaches its maximum size
        </fixtext>
        <fix id="F-Setup_ControlEventLogbehaviorwhenthelogfilereachesitsmaximumsize_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ControlEventLogbehaviorwhenthelogfilereachesitsmaximumsize_var" export-name="oval:com.mcafee.oval:var:79472" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101089" />
        </check>
      </Rule>
    </Group>
    <Group id="Server" xml:lang="en">
      <title xml:lang="en">Server</title>
      <Value id="AllowOnlySystemBackup_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="AllowOnlySystemBackup_var-selector-0">Not Configured</value>
        <value selector="AllowOnlySystemBackup_var-selector-1">Not Configured</value>
        <value selector="AllowOnlySystemBackup_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DisallowNetworkAsBackupTarget_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DisallowNetworkAsBackupTarget_var-selector-0">Not Configured</value>
        <value selector="DisallowNetworkAsBackupTarget_var-selector-1">Not Configured</value>
        <value selector="DisallowNetworkAsBackupTarget_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DisallowLocallyAttachedStorageAsBackupTarget_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DisallowLocallyAttachedStorageAsBackupTarget_var-selector-0">Not Configured</value>
        <value selector="DisallowLocallyAttachedStorageAsBackupTarget_var-selector-1">Not Configured</value>
        <value selector="DisallowLocallyAttachedStorageAsBackupTarget_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DisallowOpticalMediaAsBackupTarget_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DisallowOpticalMediaAsBackupTarget_var-selector-0">Not Configured</value>
        <value selector="DisallowOpticalMediaAsBackupTarget_var-selector-1">Not Configured</value>
        <value selector="DisallowOpticalMediaAsBackupTarget_var-selector-2">Not Configured</value>
      </Value>
      <Value id="DisallowRun-onceBackups_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DisallowRun-onceBackups_var-selector-0">Not Configured</value>
        <value selector="DisallowRun-onceBackups_var-selector-1">Not Configured</value>
        <value selector="DisallowRun-onceBackups_var-selector-2">Not Configured</value>
      </Value>
      <Rule id="WindowsComponents-Backup-ServerAllowOnlySystemBackup" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Backup - Server: Allow only system backup</title>
        <description xml:lang="en">This policy setting allows you to manage whether backups of only system volumes is allowed or both OS and data volumes can be backed up. (NOTE: In Windows 8.1, this policy setting can be found under Administrative Templates / Server.)</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowOnlySystemBackup_var" export-name="oval:com.mcafee.oval:var:244552" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215831" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-Backup-ServerDisallowNetworkAsBackupTarget" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Backup - Server: Disallow network as backup target</title>
        <description xml:lang="en">This policy setting allows you to manage whether backups of a machine can run to a network share or not. (NOTE: In Windows 8.1, this policy setting can be found under Administrative Templates / Server.)</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisallowNetworkAsBackupTarget_var" export-name="oval:com.mcafee.oval:var:244554" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215833" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-Backup-ServerDisallowLocallyAttachedStorageAsBackupTarget" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Backup - Server: Disallow locally attached storage as backup target</title>
        <description xml:lang="en">This policy setting allows you to manage whether backups of a machine can run to locally attached storage or not. (NOTE: In Windows 8.1, this policy setting can be found under Administrative Templates / Server.)</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisallowLocallyAttachedStorageAsBackupTarget_var" export-name="oval:com.mcafee.oval:var:244553" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215832" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-Backup-ServerDisallowOpticalMediaAsBackupTarget" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Backup - Server: Disallow optical media as backup target</title>
        <description xml:lang="en">This policy setting allows you to manage whether backups of a machine can run to an optical media or not. (NOTE: In Windows 8.1, this policy setting can be found under Administrative Templates / Server.)</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisallowOpticalMediaAsBackupTarget_var" export-name="oval:com.mcafee.oval:var:244555" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215834" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-Backup-ServerDisallowRun-onceBackups" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Backup - Server: Disallow run-once backups</title>
        <description xml:lang="en">This policy setting allows you to manage whether run-once backups of a machine can be run or not. (NOTE: In Windows 8.1, this policy setting can be found under Administrative Templates / Server.)</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisallowRun-onceBackups_var" export-name="oval:com.mcafee.oval:var:244556" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215835" />
        </check>
      </Rule>
    </Group>
    <Group id="SoftwareProtectionPlatform" xml:lang="en">
      <title xml:lang="en">Software Protection Platform</title>
      <Value id="TurnoffKMSClientOnlineAVSValidation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="SoftwareProtectionPlatform_SetTurnoffKMSClientOnlineAVSValidation" xml:lang="en" selected="false">
        <title xml:lang="en">Software Protection Platform: Set Turn off KMS Client Online AVS Validation</title>
        <description xml:lang="en">The Key Management Service (KMS) is a Microsoft license activation method that entails setting up a local server that stores the licenses.</description>
        <rationale>
          Even though the KMS licensing method does not require a connection to Microsoft, the clients using KMS licensing still send KMS client activation state data to Microsoft automatically. Preventing this information from being sent can help reduce privacy concerns.
        </rationale>
        <fixtext fixref="F-SoftwareProtectionPlatform_SetTurnoffKMSClientOnlineAVSValidation_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Software Protection Platform\Turn off KMS Client Online AVS Validation
        </fixtext>
        <fix id="F-SoftwareProtectionPlatform_SetTurnoffKMSClientOnlineAVSValidation_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnoffKMSClientOnlineAVSValidation_var" export-name="oval:com.mcafee.oval:var:2486319" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486318" />
        </check>
      </Rule>
    </Group>
     <Group id="StartMenuandTaskbar_1" xml:lang="en">
      <title xml:lang="en">Start Menu and Taskbar</title>
      <Group id="Notifications_1" xml:lang="en">
        <title xml:lang="en">Notifications</title>
        <Value id="Turnofftoastnotificationsonthelockscreen_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">1</value>
        </Value>
        <Rule id="StartMenuandTaskbar_Turnofftoastnotificationsonthelockscreen" xml:lang="en" selected="false">
          <title xml:lang="en">Start Menu and Taskbar: Turn off toast notifications on the lock screen</title>
          <description xml:lang="en">
            This policy setting turns off toast notifications on the lock screen. If you enable this policy setting, applications will not be able to raise toast notifications on the lock screen.
          </description>
          <rationale>
            While this feature can be handy for users applications that provide toast notifications might display sensitive personal or business data while the device is unattended.
          </rationale>
          <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33727-9</ident>
          <fixtext fixref="F-StartMenuandTaskbar_Turnofftoastnotificationsonthelockscreen_fix">
            To establish the recommended configuration via GP, set the following UI path to Enabled.
            User Configuration\Administrative Templates\Start Menu and Taskbar\Notifications\Turn off toast notifications on the lock screen
          </fixtext>
          <fix id="F-StartMenuandTaskbar_Turnofftoastnotificationsonthelockscreen_fix"/>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="Turnofftoastnotificationsonthelockscreen_var" export-name="oval:com.mcafee.oval:var:1177333" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:1177325" />
          </check>
        </Rule>
      </Group>
    </Group>
    <Group id="System" xml:lang="en">
      <title xml:lang="en">System</title>
      <Group id="AuditProcessCreation" xml:lang="en">
        <title xml:lang="en">Audit Process Creation</title>
        <Value id="IncludeCommandLineInProcessCreationEvents_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">Enabled</value>
          <value selector="IncludeCommandLineInProcessCreationEvents_var-selector-0">Enabled</value>
          <value selector="IncludeCommandLineInProcessCreationEvents_var-selector-1">Enabled</value>
          <value selector="IncludeCommandLineInProcessCreationEvents_var-selector-2">Enabled</value>
        </Value>
        <Rule id="System-AuditProcessCreationIncludeCommandLineInProcessCreationEvents" xml:lang="en" selected="false">
          <title xml:lang="en">System - Audit Process Creation: Include command line in process creation events</title>
          <description xml:lang="en">This policy setting determines what information is logged in security audit events when a new process has been created.</description>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="IncludeCommandLineInProcessCreationEvents_var" export-name="oval:com.mcafee.oval:var:244557" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:215836" />
          </check>
        </Rule>
      </Group>
      <Group id="CredentialsDelegation" xml:lang="en">
        <title xml:lang="en">Credentials Delegation</title>
        <Value id="RestrictDelegationOfCredentialsToRemoteServers_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">Not Configured</value>
          <value selector="RestrictDelegationOfCredentialsToRemoteServers_var-selector-0">Not Configured</value>
          <value selector="RestrictDelegationOfCredentialsToRemoteServers_var-selector-1">Not Configured</value>
          <value selector="RestrictDelegationOfCredentialsToRemoteServers_var-selector-2">Not Configured</value>
        </Value>
        <Rule id="System-CredentialsDelegationRestrictDelegationOfCredentialsToRemoteServers" xml:lang="en" selected="false">
          <title xml:lang="en">System - Credentials Delegation: Restrict delegation of credentials to remote servers</title>
          <description xml:lang="en">This policy setting determines whether restricted mode is enforced and participating apps will delegate credentials to remote computers.</description>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="RestrictDelegationOfCredentialsToRemoteServers_var" export-name="oval:com.mcafee.oval:var:244558" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:215837" />
          </check>
        </Rule>
      </Group>
     <Group id="NetLogon" xml:lang="en">
        <title xml:lang="en">Net Logon</title>
        <Group id="DC-Locator-DNS-Records" xml:lang="en">
          <title xml:lang="en">DC Locator DNS Records</title>
          <Value id="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var" xml:lang="en" type="string" operator="equals" interactive="false">
            <value selector="">Not Configured</value>
            <value selector="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var-selector-0">Not Configured</value>
            <value selector="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var-selector-1">Not Configured</value>
            <value selector="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var-selector-2">Not Configured</value>
          </Value>
          <Rule id="System-NetLogon-DCLocatorDNSRecordsUseDNSNameResolutionWhenASingle-labelDomainNameIsUsedByAppendingDifferentRegisteredDNSSuffixesIfTheAllowSingleLabelDnsDomainSettingIsNotEnabled" xml:lang="en" selected="false">
            <title xml:lang="en">System - Net Logon - DC Locator DNS Records: Use DNS name resolution when a single-label domain name is used, by appending different registered DNS suffixes, if the AllowSingleLabelDnsDomain setting is not enabled</title>
            <description xml:lang="en">This policy setting specifies whether the computers to which this setting is applied attemps DNS name resolution of single-lablel domain names, by appending different registered DNS suffixes, and uses NetBIOS name resolution only if DNS name resolution fails.</description>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
              <check-export value-id="UseDNSNameResolutionWhenASingle-labelDomainNameIsUsed_var" export-name="oval:com.mcafee.oval:var:244567" />
              <check-content-ref href="" name="oval:com.mcafee.oval:def:215846" />
            </check>
          </Rule>
        </Group>
      </Group>
      <Group id="UserProfiles" xml:lang="en">
        <title xml:lang="en">User Profiles</title>
        <Value id="TurnOffTheAdvertisingID_var" xml:lang="en" type="string" operator="equals" interactive="false">
          <value selector="">Not Configured</value>
          <value selector="TurnOffTheAdvertisingID_var-selector-0">Not Configured</value>
          <value selector="TurnOffTheAdvertisingID_var-selector-1">Not Configured</value>
          <value selector="TurnOffTheAdvertisingID_var-selector-2">Not Configured</value>
        </Value>
        <Rule id="System-UserProfilesTurnOffTheAdvertisingID" xml:lang="en" selected="false">
          <title xml:lang="en">System - User Profiles: Turn off the advertising ID</title>
          <description xml:lang="en">This policy setting turns off the advertising ID, preventing apps from using the ID for experiences across apps.</description>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="TurnOffTheAdvertisingID_var" export-name="oval:com.mcafee.oval:var:244569" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:215848" />
          </check>
        </Rule>
      </Group>
      </Group>
    <Group id="SessionTimeLimits" xml:lang="en">
      <title xml:lang="en">Session Time Limits</title>
      <Value id="Endadisconnectedsession_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">60000</value>
      </Value>
      <Rule id="SessionTimeLimits_Setatimelimitfordisconnectedsessions" xml:lang="en" selected="false">
        <title xml:lang="en">Session Time Limits: Set a time limit for disconnected sessions</title>
        <description xml:lang="en">This policy setting allows you to configure a time limit for disconnected Remote Desktop Services sessions.</description>
        <rationale>
          This setting helps to prevent active Remote Desktop sessions from tying up the computer for long periods of time while not in use, preventing computing resources from being consumed by large numbers of disconnected but still active sessions. In addition, old, forgotten Remote Desktops session that are still active can cause password lockouts if the user's password has changed but the old session is still running. For systems that limit the number of connected users (e.g. servers in the default Administrative mode - 2 sessions only), other users' old but still active sessions can prevent another user from connecting, resulting in an effective denial of service. This setting is important to ensure a disconnected session is properly terminated.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35599-0</ident>
        <fixtext fixref="F-SessionTimeLimits_SetTimeLimitForActiveButIdleRemoteDesktopServicesSessions_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 1 minute: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits\Set time limit for disconnected sessions
        </fixtext>
        <fix id="F-SessionTimeLimits_SetTimeLimitForActiveButIdleRemoteDesktopServicesSessions_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Endadisconnectedsession_var" export-name="oval:com.mcafee.oval:var:2486297" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486296" />
        </check>
      </Rule>
      </Group>
    <Group id="Temporaryfolders" xml:lang="en">
      <title xml:lang="en">Temporary folders</title>
      <Value id="Donotdeletetempfoldersuponexit_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DoNotUseTempFoldersPerSession_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Rule id="TemporaryFolders_Donotdeletetempfoldersuponexit" xml:lang="en" selected="false">
        <title xml:lang="en">Temporary Folders: Do not delete temp folders upon exit</title>
        <description xml:lang="en">This policy setting specifies whether Remote Desktop Services retains a user's per-session temporary folders at logoff.</description>
        <rationale xml:lang="en">Sensitive information could be contained inside the temporary folders and shared with other administrators that log into the system.</rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34136-2</ident>
        <fixtext xml:lang="en" fixref="F-TemporaryFolders_Donotdeletetempfoldersuponexit_fix" reboot="false" strategy="unknown" disruption="unknown" complexity="unknown">To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Temporary Folders\Do not delete temp folders upon exit</fixtext>
        <fix id="F-TemporaryFolders_Donotdeletetempfoldersuponexit_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Donotdeletetempfoldersuponexit_var" export-name="oval:com.mcafee.oval:var:2486666" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486662" />
        </check>
      </Rule>
      <Rule id="TemporaryFolders_SetDoNotUseTemporaryFoldersPerSession" xml:lang="en" selected="false">
        <title xml:lang="en">Temporary Folders: Do not use temporary folders per session</title>
        <description xml:lang="en">This policy setting allows you to prevent Terminal Services from creating session-specific temporary folders.</description>
        <rationale>
          By Disabling this setting you are keeping the cached data independent for each session, both reducing the chance of problems from shared cached data between sessions, and keeping possibly sensitive data separate to each user session.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34531-4</ident>
        <fixtext fixref="F-TemporaryFolders_SetDoNotUseTemporaryFoldersPerSession_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Temporary Folders\Do not use temporary folders per session
        </fixtext>
        <fix id="F-TemporaryFolders_SetDoNotUseTemporaryFoldersPerSession_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotUseTempFoldersPerSession_var" export-name="oval:com.mcafee.oval:var:216443" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215733" />
        </check>
      </Rule>
      
    </Group>
    <Group id="TerminalServices_RemoteDesktop_" xml:lang="en">
      <title xml:lang="en">Terminal Serivces (Remote Desktop)</title>
      <Value id="AlwaysPromptClientForPasswordUponConnection_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="SetClientConnectionEncryptionLevel_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">3</value>
      </Value>
      <Value id="DoNotAllowDriveRedirection_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="DoNotAllowDriveRedirection_var-selector">Not Configured</value>
        <value selector="DoNotAllowDriveRedirection_var-selector-1">Not Configured</value>
        <value selector="DoNotAllowDriveRedirection_var-selector-2">Not Configured</value>
        <value selector="DoNotAllowDriveRedirection_var-selector-3">Not Configured</value>
        <value selector="DoNotAllowDriveRedirection_var-selector-4">Not Configured</value>
      </Value>
      <Value id="AllowUsersToConnectRemotelyUsingTerminalServices_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
        <value selector="AllowUsersToConnectRemotelyUsingTerminalServices_var-selector-0">Not Configured</value>
      </Value>
      <Value id="DoNotAllowPasswordsToBeSaved_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="IdleSessionLimit_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">900000</value>
      </Value>
      <Value id="EndADisconnectedSession_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">60000</value>
      </Value>
      <Rule id="TerminalServices_AlwaysPromptClientForPasswordUponConnection" xml:lang="en" selected="false">
        <title xml:lang="en">Terminal Services: Always prompt client for password upon connection</title>
        <description xml:lang="en">This policy setting determines whether Terminal Services always prompts the client for a password upon connection.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AlwaysPromptClientForPasswordUponConnection_var" export-name="oval:com.mcafee.oval:var:59461" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6599" />
        </check>
      </Rule>
      <Rule id="TerminalServices_SetClientConnectionEncryptionLevel" xml:lang="en" selected="false">
        <title xml:lang="en">Terminal Services: Set client connection encryption level</title>
        <description xml:lang="en">This policy setting determines whether to enforce an encryption level for all data sent between the client and the server during the Terminal Services session.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SetClientConnectionEncryptionLevel_var" export-name="oval:com.mcafee.oval.windows:var:6600" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6600" />
        </check>
      </Rule>
      <Rule id="TerminalServices_DoNotAllowDriveRedirection" xml:lang="en" selected="false">
        <title xml:lang="en">Terminal Services: Do not allow drive redirection</title>
        <description xml:lang="en">This policy setting determines whether to prevent the mapping of client drives in a Terminal Services session (drive redirection).</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowDriveRedirection_var" export-name="oval:com.mcafee.oval:var:59460" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6598" />
        </check>
      </Rule>
      <Rule id="TerminalServices_AllowUsersToConnectRemotelyUsingTerminalServices" xml:lang="en" selected="false">
        <title xml:lang="en">Terminal Services: Allow users to connect remotely using Terminal Services</title>
        <description xml:lang="en">This policy setting determines whether to allow users to connect remotely using Terminal Services.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowUsersToConnectRemotelyUsingTerminalServices_var" export-name="oval:com.mcafee.oval:var:59514" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6597" />
        </check>
      </Rule>
      <Rule id="TerminalServices_DoNotAllowPasswordsToBeSaved" xml:lang="en" selected="false">
        <title xml:lang="en">Terminal Services: Do not allow passwords to be saved</title>
        <description xml:lang="en">This policy setting determines whether passwords can be saved on this computer from Terminal Services clients.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowPasswordsToBeSaved_var" export-name="oval:com.mcafee.oval:var:59513" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6596" />
        </check>
      </Rule>
      <Rule id="TerminalServices_SetTimeLimitForActiveButIdleRemoteDesktopServicesSessions" xml:lang="en" selected="false">
        <title xml:lang="en">Terminal Services: Set time limit for active but idle Remote Desktop Services sessions</title>
        <description xml:lang="en">This policy setting determines a time limit for active but idle Terminal Services sessions.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IdleSessionLimit_var" export-name="oval:com.mcafee.oval.windows:var:6725" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6725" />
        </check>
      </Rule>
      <Rule id="TerminalServices_SetATimeLimitForDisconnectedSessions" xml:lang="en" selected="false">
        <title xml:lang="en">Terminal Services: Set a time limit for disconnected sessions</title>
        <description xml:lang="en">This policy setting determines a time limit for disconnected Terminal Services sessions.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EndADisconnectedSession_var" export-name="oval:com.mcafee.oval.windows:var:6726" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6726" />
        </check>
      </Rule>
    </Group>
    <Group id="TimeProviders" xml:lang="en">
      <title xml:lang="en">Time Providers</title>
      <Value id="EnableWindowsNTPClient_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="EnableWindowsNTPServer_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="TimeProviders_SetEnableWindowsNTPClient" xml:lang="en" selected="false">
        <title xml:lang="en">Time Providers: Set Enable Windows NTP Client</title>
        <description xml:lang="en">This policy setting specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer to synchronize its computer clock with other NTP servers.</description>
        <rationale>
          A reliable and accurate account of time is important for a number of services and security requirements, including but not limited to distributed applications, authentication services, multi-user databases and logging services. The use of an NTP client (with secure operation) establishes functional accuracy and is a focal point when reviewing security relevant events.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33661-0</ident>
        <fixtext fixref="F-TimeProviders_SetEnableWindowsNTPClient_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\System\Windows Time Service\Time Providers\Enable Windows NTP Client
        </fixtext>
        <fix id="F-TimeProviders_SetEnableWindowsNTPClient_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableWindowsNTPClient_var" export-name="oval:com.mcafee.oval:var:1415840" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415839" />
        </check>
      </Rule>
      <Rule id="TimeProviders_SetEnableWindowsNTPServer" xml:lang="en" selected="false">
        <title xml:lang="en">Time Providers: Set Enable Windows NTP Server</title>
        <description xml:lang="en">This policy setting allows you to specify whether the Windows NTP Server is enabled.</description>
        <rationale>
          The configuration of proper time synchronization is critically important in a corporate environment both due to the sensitivity of Kerberos authentication timestamps and also to ensure accurate security logging.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35135-3</ident>
        <fixtext fixref="F-TimeProviders_SetEnableWindowsNTPClient_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\System\Windows Time Service\Time Providers\Enable Windows NTP Server
        </fixtext>
        <fix id="F-TimeProviders_SetEnableWindowsNTPClient_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableWindowsNTPServer_var" export-name="oval:com.mcafee.oval:var:1415854" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415853" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsPerformancePerfTrack" xml:lang="en">
      <title xml:lang="en">Windows Performance PerfTrack</title>
      <Value id="EnableDisablePerfTrack_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Rule id="WindowsPerformancePerfTrack_Enable_DisablePerfTrack" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Performance PerfTrack: Enable/Disable PerfTrack</title>
        <description xml:lang="en">This policy setting specifies whether to enable or disable tracking of responsiveness events.</description>
        <rationale>
          When enabled the aggregated data of a given event will be transmitted to Microsoft. The option exists to restrict this feature for a specific user, set the consent level, and designate specific programs for which error reports could be sent. However, centrally restricting the ability to execute PerfTrack to limit the potential for unauthorized or undesired usage, data leakage, or unintentional communications is highly recommended.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33662-8</ident>
        <fixtext fixref="F-RemoteProcedureCall_SetRestrictionsForUnauthenticatedRPCClients_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\System\Troubleshooting and Diagnostics\Windows Performance PerfTrack\Enable/Disable PerfTrack
        </fixtext>
        <fix id="F-RemoteProcedureCall_SetRestrictionsForUnauthenticatedRPCClients_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableDisablePerfTrack_var" export-name="oval:com.mcafee.oval:var:74958" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71730" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsConnectionManager" xml:lang="en">
      <title xml:lang="en">Windows Connection Manager</title>
      <Value id="MinimizethenumberofsimultaneousconnectionstotheInternetoraWindowsDomain_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="Prohibitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="WindowsConnectionManager_Prohibitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Connection Manager: Prohibit connection to non-domain networks when connected to domain authenticated network</title>
        <description xml:lang="en">This policy setting prevents computers from connecting to both a domain based network and a non-domain based network at the same time.</description>
        <rationale>
          The potential concern is that a user would unknowlingly allow network traffic to flow between the insecure public network and the managed corporate network.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35375-5</ident>
        <fixtext fixref="F-WindowsConnectionManager_Prohibitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork_fix">
          To establish the recommended configuration via GP, set the following UI path to Not Configured. 
          Computer Configuration\Administrative Templates\Network\Windows Connection Manager\Prohibit connection to non-domain networks when connected to domain authenticated network
        </fixtext>
        <fix id="F-WindowsConnectionManager_Prohibitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Prohibitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork_var" export-name="oval:com.mcafee.oval:var:1411840" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1411832" />
        </check>
      </Rule>
      <Rule id="AdministrativeTemplates_Network_MinimizethenumberofsimultaneousconnectionstotheInternetoraWindowsDomain" xml:lang="en" selected="false">
        <title xml:lang="en">Administrative Templates - Network: Minimize the number of simultaneous connections to the Internet or a Windows Domain</title>
        <description xml:lang="en">This policy setting prevents computers from establishing multiple simultaneous connections to either the Internet or to a Windows domain.</description>
        <rationale>
          The potential concern is that a user would unknowlingly allow network traffic to flow between the insecure public network and the managed corporate network.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35242-7</ident>
        <fixtext fixref="F-AdministrativeTemplates_Network_MinimizethenumberofsimultaneousconnectionstotheInternetoraWindowsDomain_fix">
          To establish the recommended configuration via GP, set the following UI path to Not Configured. 
          Computer Configuration\Administrative Templates\Network\Windows Connection Manager\Minimize the number of simultaneous connections to the Internet or a Windows Domain
        </fixtext>
        <fix id="F-AdministrativeTemplates_Network_MinimizethenumberofsimultaneousconnectionstotheInternetoraWindowsDomain_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MinimizethenumberofsimultaneousconnectionstotheInternetoraWindowsDomain_var" export-name="oval:com.mcafee.oval:var:1411831" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1411824" />
        </check>
      </Rule>
     </Group>
    <Group id="WindowsConnectNow" xml:lang="en">
      <title xml:lang="en">Windows Connect Now</title>
      <Value id="WirelessSettingsConfiguration_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ProhibitAccessToWCNWizards_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="Network-WindowsConnectNow_ConfigurationOfWirelessSettingsUsingWindowsConnectNow" xml:lang="en" selected="false">
        <title xml:lang="en">Network - Windows Connect Now: Configuration of Wireless Settings Using Windows Connect Now</title>
        <description xml:lang="en">This policy setting determines whether the configuration of wireless settings is allowed using Windows Connect Now (WCN).</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WirelessSettingsConfiguration_var" export-name="oval:com.mcafee.oval.vista:var:6665" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:6665" />
        </check>
      </Rule>
      <Rule id="Network-WindowsConnectNow_ProhibitAccessOfTheWindowsConnectNowWizards" xml:lang="en" selected="false">
        <title xml:lang="en">Network - Windows Connect Now: Prohibit Access of the Windows Connect Now Wizards</title>
        <description xml:lang="en">This policy setting determines whether access is prohibited to Windows Connect Now (WCN) wizards.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ProhibitAccessToWCNWizards_var" export-name="oval:com.mcafee.oval.vista:var:6666" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:6666" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsDefender" xml:lang="en">
      <title xml:lang="en">Windows Defender</title>
      <Value id="MicrosoftSpyNetMembership_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="WindowsComponents-WindowsDefender_ConfigureMicrosoftSpyNetReporting" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Defender: Configure Microsoft SpyNet Reporting</title>
        <description xml:lang="en">This policy setting determines whether Windows Defender will share and report its findings.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MicrosoftSpyNetMembership_var" export-name="oval:com.mcafee.oval.1:var:6727" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6727" />
        </check>
      </Rule>
    </Group>
    <Group id="Reporting" xml:lang="en">
      <title xml:lang="en">Reporting</title>
      <Value id="ConfigureWatsonEvents_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="ReportingConfigureWatsonEvents" xml:lang="en" selected="false">
        <title xml:lang="en">Reporting: Configure Watson events</title>
        <description xml:lang="en">This policy setting allows you to configure whether or not Watson events are sent.</description>
        <rationale>Watson events are the reports that get sent to Microsoft when a program or service crashes
          or fails, including the possibility of automatic submission. Preventing this information from
          being sent can help reduce privacy concerns.
        </rationale>
        <fixtext fixref="F-ReportingConfigureWatsonEvents_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled:
          Computer Configuration\Policies\Administrative Templates\Windows
          Components\Windows Defender\Reporting\Configure Watson events</fixtext>
        <fix id="F-ReportingConfigureWatsonEvents_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureWatsonEvents_var" export-name="oval:com.mcafee.oval:var:2899341" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899335" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsErrorReporting" xml:lang="en">
      <title xml:lang="en">Windows Error Reporting</title>
      <Value id="DisableLogging_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="DoNotSendAdditionalData_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DisableWindowsErrorReporting_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DisplayErrorNotification_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="WindowsComponents-WindowsErrorReporting_DisableLogging" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Error Reporting: Disable Logging</title>
        <description xml:lang="en">This policy setting determines whether Windows Error Reporting events will be logged to the system event log.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisableLogging_var" export-name="oval:com.mcafee.oval.1:var:61141" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6114" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsErrorReporting_DoNotSendAdditionalData" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Error Reporting: Do Not Send Additional Data</title>
        <description xml:lang="en">This policy setting determines whether any additional data requests from Microsoft in response to a Windows Error Reporting event will be automatically declined without notice to the user.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotSendAdditionalData_var" export-name="oval:com.mcafee.oval.1:var:61171" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6117" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsErrorReporting_DisableWindowsErrorReporting" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Error Reporting: Disable Windows Error Reporting</title>
        <description xml:lang="en">This policy setting determines whether Windows Error Reporting will send any problem information to Microsoft.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisableWindowsErrorReporting_var" export-name="oval:com.mcafee.oval.windows:var:61151" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6115" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsErrorReporting_DisplayErrorNotification" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Error Reporting: Display Error Notification</title>
        <description xml:lang="en">This policy setting determines whether or not a user is given the choice to report an error.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisplayErrorNotification_var" export-name="oval:com.mcafee.oval.windows:var:61161" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6116" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsExplorer" xml:lang="en">
      <title xml:lang="en">Windows Explorer</title>
      <Value id="TurnOffHeapTerminationOnCorruption_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="TurnOffShellProtocolProtectedMode_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="TurnOffDataExecutionPreventionForExplorer_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ConfigureWindowsSmartScreen_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Rule id="WindowsComponents-WindowsExplorer_TurnOffHeapTerminationOnCorruption" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Explorer: Turn off Heap termination on corruption</title>
        <description xml:lang="en">This policy setting determines whether certain legacy plug-in applications are allowed to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffHeapTerminationOnCorruption_var" export-name="oval:com.mcafee.oval.windows:var:61181" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6118" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsExplorer_TurnOffShellProtocolProtectedMode" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Explorer: Turn off shell protocol protected mode</title>
        <description xml:lang="en">This policy setting allows you to configure the amount of functionality that the shell protocol can have.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffShellProtocolProtectedMode_var" export-name="oval:com.mcafee.oval.windows:var:61191" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6119" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsExplorer_TurnOffDataExecutionPreventionForExplorer" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Explorer: Turn off Data Execution Prevention for Explorer</title>
        <description xml:lang="en">This policy setting determines whether certain legacy plug-in applications are allowed to function without terminating Explorer.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffDataExecutionPreventionForExplorer_var" export-name="oval:com.mcafee.oval:var:74980" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:71752" />
        </check>
      </Rule>
      <Rule id="FileExplorer_ConfigureWindowsSmartScreen" xml:lang="en" selected="false">
        <title xml:lang="en">File Explorer: Configure Windows SmartScreen</title>
        <description xml:lang="en">This policy setting allows you to manage the behavior of the Windows SmartScreen.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureWindowsSmartScreen_var" export-name="oval:com.mcafee.oval:var:244466" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215776" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsFirewallPolicy" xml:lang="en">
      <title xml:lang="en">Windows Firewall Policy</title>
      <Value id="WindowsFirewallProtectAllNetworkConnectionsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallDoNotAllowExceptionsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WindowsFirewallAllowLocalProgramExceptionsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallAllowInboundRemoteAdministrationExceptionDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallAllowInboundFileAndPrinterSharingExceptionDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="ICMPAllowOutboundDestinationUnreachable_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowOutboundSourceQuench_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowRedirect_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowInboundEchoRequest_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowInboundRouterRequest_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowOutboundTimeExceeded_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowOutboundParameterProblem_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowInboundTimestampRequest_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowInboundMaskRequest_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowOutboundPacketTooBig_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WindowsFirewallLogDroppedPacketsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallLogfilePathAndNameDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">c:\windows\system32\firewall_domain.log</value>
      </Value>
      <Value id="WindowsFirewallLogfileSizeLimitDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">4096</value>
      </Value>
      <Value id="WindowsFirewallLogSuccessfulConnectionsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallProhibitUnicastResponseToMulticastOrBroadcastRequestsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallDefineInboundPortExceptionsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
      </Value>
      <Value id="WindowsFirewallAllowLocalPortExceptionsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallAllowInboundRemoteDesktopExceptionsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallAllowInboundUPnPFrameworkExceptionsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallDefineInboundProgramExceptionsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
      </Value>
      <Value id="WindowsFirewallProhibitNotificationsDomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="LogDroppedPackets-DomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">No</value>
      </Value>
      <Value id="LogSuccessfulConnections-DomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">No</value>
      </Value>
      <Value id="FirewallState-DomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">On</value>
      </Value>
      <Value id="InboundConnections-DomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Block</value>
      </Value>
      <Value id="DisplayANotification-DomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
        <value selector="DisplayANotification-DomainProfile_var-selector-1">Not Configured</value>
        <value selector="DisplayANotification-DomainProfile_var-selector-2">Not Configured</value>
        <value selector="DisplayANotification-DomainProfile_var-selector-3">Not Configured</value>
        <value selector="DisplayANotification-DomainProfile_var-selector-4">Not Configured</value>
      </Value>
      <Value id="AllowUnicastResponse-DomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">No</value>
      </Value>
      <Value id="ApplyLocalFirewallRules-DomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="ApplyLocalFirewallRules-DomainProfile_var-selector-5">No</value>
        <value selector="ApplyLocalFirewallRules-DomainProfile_var-selector-6">Yes</value>
        <value selector="ApplyLocalFirewallRules-DomainProfile_var-selector-7">Yes</value>
        <value selector="ApplyLocalFirewallRules-DomainProfile_var-selector-8">Yes</value>
      </Value>
      <Value id="ApplyLocalConnectionSecurityRules-DomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-5">No</value>
        <value selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-6">Yes</value>
        <value selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-7">Yes</value>
        <value selector="ApplyLocalConnectionSecurityRules-DomainProfile_var-selector-8">Yes</value>
      </Value>
      <Value id="LogDroppedPackets-DomainProfile_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="LogSuccessfulConnections-DomainProfile_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="LogfilePathAndName_domain__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">%windir%\system32\logfiles\firewall\firewall_domain.log</value>
      </Value>
      <Value id="LogfileSizeLimit-DomainProfile_sizeIsKilobytes__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">16384</value>
      </Value>
      <Value id="OutboundConnections-DomainProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Allow</value>
      </Value>
      <Value id="WindowsFirewallProtectAllNetworkConnectionsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallDoNotAllowExceptionsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallAllowLocalProgramExceptionsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WindowsFirewallAllowInboundRemoteAdministrationExceptionStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WindowsFirewallAllowInboundFileAndPrinterSharingExceptionStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowOutboundDestinationUnreachable_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowOutboundSourceQuench_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="ICMPAllowOutboundSourceQuench_var0-selector-0">Disabled</value>
        <value selector="ICMPAllowOutboundSourceQuench_var0-selector-1">Disabled</value>
        <value selector="ICMPAllowOutboundSourceQuench_var0-selector-6">Disabled</value>
        <value selector="ICMPAllowOutboundSourceQuench_var0-selector-7">Disabled</value>
      </Value>
      <Value id="ICMPAllowRedirect_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowInboundEchoRequest_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="ICMPAllowInboundEchoRequest_var0-selector-0">Disabled</value>
        <value selector="ICMPAllowInboundEchoRequest_var0-selector-1">Disabled</value>
        <value selector="ICMPAllowInboundEchoRequest_var0-selector-6">Disabled</value>
        <value selector="ICMPAllowInboundEchoRequest_var0-selector-7">Disabled</value>
      </Value>
      <Value id="ICMPAllowInboundRouterRequest_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowOutboundTimeExceeded_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowOutboundParameterProblem_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowInboundTimestampRequest_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowInboundMaskRequest_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="ICMPAllowOutboundPacketTooBig_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
        <value selector="ICMPAllowOutboundPacketTooBig_var0-selector-0">Disabled</value>
        <value selector="ICMPAllowOutboundPacketTooBig_var0-selector-1">Disabled</value>
        <value selector="ICMPAllowOutboundPacketTooBig_var0-selector-6">Disabled</value>
        <value selector="ICMPAllowOutboundPacketTooBig_var0-selector-7">Disabled</value>
      </Value>
      <Value id="WindowsFirewallAllowInboundRemoteDesktopExceptionsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WindowsFirewallAllowInboundUPnPFrameworkExceptionsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WindowsFirewallProhibitNotificationsStandardProfile_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WindowsFirewallLogDroppedPacketsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallLogSuccessfulConnectionsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallLogfilePathAndNameStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">c:\windows\system32\firewall_standard.log</value>
      </Value>
      <Value id="WindowsFirewallLogfileSizeLimitStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">4096</value>
      </Value>
      <Value id="WindowsFirewallProhibitUnicastResponseToMulticastOrBroadcastRequestsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WindowsFirewallDefineInboundPortExceptionsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
      </Value>
      <Value id="WindowsFirewallDefineInboundProgramExceptionsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
      </Value>
      <Value id="WindowsFirewallAllowLocalPortExceptionsStandardProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="FirewallState-PrivateProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">On</value>
      </Value>
      <Value id="InboundConnections-PrivateProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Block</value>
      </Value>
      <Value id="DisplayANotification-PrivateProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
        <value selector="DisplayANotification-PrivateProfile_var-selector-0">Not Configured</value>
        <value selector="DisplayANotification-PrivateProfile_var-selector-1">Not Configured</value>
        <value selector="DisplayANotification-PrivateProfile_var-selector-2">Not Configured</value>
        <value selector="DisplayANotification-PrivateProfile_var-selector-3">Not Configured</value>
      </Value>
      <Value id="AllowUnicastResponse-PrivateProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">No</value>
      </Value>
      <Value id="ApplyLocalFirewallRules-PrivateProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-5">No</value>
        <value selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-6">Yes</value>
        <value selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-7">Yes</value>
        <value selector="ApplyLocalFirewallRules-PrivateProfile_var-selector-8">Yes</value>
      </Value>
      <Value id="ApplyLocalConnectionSecurityRules-PrivateProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-5">No</value>
        <value selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-6">Yes</value>
        <value selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-7">Yes</value>
        <value selector="ApplyLocalConnectionSecurityRules-PrivateProfile_var-selector-8">Yes</value>
      </Value>
      <Value id="LogDroppedPackets-PrivateProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="LogSuccessfulConnections-PrivateProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="LogfilePathAndName_private__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">%windir%\system32\logfiles\firewall\firewall_private.log</value>
      </Value>
      <Value id="LogfileSizeLimit-PrivateProfile_sizeIsKilobytes__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">16384</value>
      </Value>
      <Value id="OutboundConnections-PrivateProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Allow</value>
      </Value>
      <Value id="FirewallState-PublicProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">On</value>
      </Value>
      <Value id="InboundConnections-PublicProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Block</value>
      </Value>
      <Value id="DisplayANotification-PublicProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">No</value>
        <value selector="DisplayANotification-PublicProfile_var-selector">Yes</value>
        <value selector="DisplayANotification-PublicProfile_var-selector-0">Yes</value>
        <value selector="DisplayANotification-PublicProfile_var-selector-1">Yes</value>
      </Value>
      <Value id="AllowUnicastResponse-PublicProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">No</value>
      </Value>
      <Value id="ApplyLocalFirewallRules-PublicProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">No</value>
        <value selector="ApplyLocalFirewallRules-PublicProfile_var-selector">Yes</value>
        <value selector="ApplyLocalFirewallRules-PublicProfile_var-selector-0">Yes</value>
        <value selector="ApplyLocalFirewallRules-PublicProfile_var-selector-1">Yes</value>
      </Value>
      <Value id="ApplyLocalConnectionSecurityRules-PublicProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">No</value>
        <value selector="ApplyLocalConnectionSecurityRules-PublicProfile_var-selector">Yes</value>
        <value selector="ApplyLocalConnectionSecurityRules-PublicProfile_var-selector-0">Yes</value>
      </Value>
      <Value id="LogDroppedPackets-PublicProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="LogSuccessfulConnections-PublicProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="LogfilePathAndName_public__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">%windir%\system32\logfiles\firewall\firewall_public.log</value>
      </Value>
      <Value id="LogfileSizeLimit-PublicProfile_sizeIsKilobytes__var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">16384</value>
      </Value>
      <Value id="OutboundConnections-PublicProfile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Allow</value>
      </Value>
      <Rule id="WindowsFirewall_ProtectAllNetworkConnections-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Protect all network connections - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is enabled for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallProtectAllNetworkConnectionsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59446" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6547" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_DoNotAllowExceptions-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Do not allow exceptions - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall blocks all unsolicited incoming messages for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallDoNotAllowExceptionsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59443" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6544" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowLocalProgramExceptions-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow local program exceptions - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether administrators are allowed to use the Windows Firewall component in Control Panel to define a local program exceptions list for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowLocalProgramExceptionsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59440" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6541" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowInboundRemoteAdministrationException-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow inbound remote administration exception - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall allows the computer to receive the unsolicited incoming messages associated with remote administration for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowInboundRemoteAdministrationExceptionDomainProfile_var" export-name="oval:com.mcafee.oval:var:59436" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6537" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowInboundFileAndPrinterSharingException-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow inbound file and printer sharing exception - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether inbound file and printer sharing is allowed for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowInboundFileAndPrinterSharingExceptionDomainProfile_var" export-name="oval:com.mcafee.oval:var:59435" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6536" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound destination unreachable - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow destination unreachable messages to be sent out for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundDestinationUnreachable_var" export-name="oval:com.mcafee.oval:var:59136" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56834" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound source quench - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow source quenching on outbound data for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundSourceQuench_var" export-name="oval:com.mcafee.oval:var:59138" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56836" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowRedirect-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow redirect - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow redirection for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowRedirect_var" export-name="oval:com.mcafee.oval:var:59140" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56838" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow inbound echo request - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow inbound echo requests for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowInboundEchoRequest_var" export-name="oval:com.mcafee.oval:var:59142" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65825" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow inbound router request - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow inbound router requests for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowInboundRouterRequest_var" export-name="oval:com.mcafee.oval:var:59144" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65827" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound time exceeded - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow response times to be exceeded on outbound data for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundTimeExceeded_var" export-name="oval:com.mcafee.oval:var:59146" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65829" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound parameter problem - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow parameter problems on outbound data for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundParameterProblem_var" export-name="oval:com.mcafee.oval:var:59148" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65831" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow inbound timestamp request - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow inbound timestamp requests for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowInboundTimestampRequest_var" export-name="oval:com.mcafee.oval:var:59150" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65833" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow inbound mask request - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow inbound mask requests for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowInboundMaskRequest_var" export-name="oval:com.mcafee.oval:var:59152" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65835" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound packet too big - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow outbound data packets that are too big for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundPacketTooBig_var" export-name="oval:com.mcafee.oval:var:59154" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65837" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_Logging-LogDroppedPackets-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Logging - Log Dropped Packets - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether dropped packets will be logged for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallLogDroppedPacketsDomainProfile_var" export-name="oval:com.mcafee.oval:var:66116" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65847" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_Logging-LogfilePathAndName-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Logging - Logfile path and name - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether a non-default logfile path and name will be used for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallLogfilePathAndNameDomainProfile_var" export-name="oval:com.mcafee.oval:var:66118" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65849" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_Logging-LogfileSizeLimit-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Logging - Logfile size limit - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines the size limit for the firewall logfile for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallLogfileSizeLimitDomainProfile_var" export-name="oval:com.mcafee.oval:var:66119" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65850" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_Logging-LogSuccessfulConnections-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Logging - Log Successful Connections - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether successful connections will be logged for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallLogSuccessfulConnectionsDomainProfile_var" export-name="oval:com.mcafee.oval:var:66117" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65848" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_ProhibitUnicastResponseToMulticastOrBroadcastRequests-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Prohibit unicast response to multicast or broadcast requests - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether this computer is prevented from receiving unicast responses to its outgoing multicast or broadcast messages for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallProhibitUnicastResponseToMulticastOrBroadcastRequestsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59445" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6546" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_DefineInboundPortExceptions-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Define inbound port exceptions - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether the inbound port exceptions list defined by Group Policy can be viewed and changed for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallDefineInboundPortExceptionsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59441" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6542" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowLocalPortExceptions-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow local port exceptions - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether administrators are allowed to use the Windows Firewall component in Control Panel to define a local port exceptions list for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowLocalPortExceptionsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59439" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6540" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowInboundRemoteDesktopExceptions-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow inbound Remote Desktop exceptions - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether this computer is allowed to receive inbound Remote Desktop requests for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowInboundRemoteDesktopExceptionsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59437" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6538" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowInboundUPnPFrameworkExceptions-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow inbound UPnP framework exceptions - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether this computer is allowed to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with built-in firewalls for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowInboundUPnPFrameworkExceptionsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59438" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6539" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_DefineInboundProgramExceptions-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Define inbound program exceptions - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether the program exceptions list defined by Group Policy can be viewed and changed for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallDefineInboundProgramExceptionsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59442" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6543" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_ProhibitNotifications-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Prohibit notifications - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is prevented from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exceptions list for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallProhibitNotificationsDomainProfile_var" export-name="oval:com.mcafee.oval:var:59444" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6545" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_FirewallState-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Firewall state - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is enabled for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FirewallState-DomainProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6515" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6515" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_InboundConnections-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Inbound Connections - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether inbound connections are allowed for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="InboundConnections-DomainProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6516" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6516" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_DisplayANotification-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Display a Notification - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is prevented from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exceptions list for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisplayANotification-DomainProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6518" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6518" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_AllowUnicastResponse-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Allow Unicast Response - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether this computer is prevented from receiving unicast responses to its outgoing multicast or broadcast messages for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowUnicastResponse-DomainProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6519" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6519" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_ApplyLocalFirewallRules-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Apply Local Firewall Rules - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether local firewall rules are applied for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplyLocalFirewallRules-DomainProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6520" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6520" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Apply Local Connection Security Rules - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether local connection security rules are applied for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplyLocalConnectionSecurityRules-DomainProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6521" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6521" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Log Dropped Packets - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether dropped packets will be logged for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogDroppedPackets-DomainProfile_var0" export-name="oval:com.mcafee.oval.vistafirewall:var:6401" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6401" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Log Successful Connections - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether successful connections will be logged for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogSuccessfulConnections-DomainProfile_var0" export-name="oval:com.mcafee.oval.vistafirewall:var:6402" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6402" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Logfile path and name - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether a non-default logfile path and name will be used for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogfilePathAndName_domain__var" export-name="oval:com.mcafee.oval.vistafirewall:var:6403" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6403" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Logfile size limit - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines the size limit for the firewall logfile for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogfileSizeLimit-DomainProfile_sizeIsKilobytes__var" export-name="oval:com.mcafee.oval.vistafirewall:var:6404" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6404" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_OutboundConnections-DomainProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Outbound Connections - Domain Profile</title>
        <description xml:lang="en">This firewall setting determines whether outbound connections are allowed for the Domain Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OutboundConnections-DomainProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6517" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6517" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_ProtectAllNetworkConnections-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Protect all network connections - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is enabled for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallProtectAllNetworkConnectionsStandardProfile_var" export-name="oval:com.mcafee.oval:var:59458" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6559" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_DoNotAllowExceptions-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Do not allow exceptions - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall blocks all unsolicited incoming messages for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallDoNotAllowExceptionsStandardProfile_var" export-name="oval:com.mcafee.oval:var:59455" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6556" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowLocalProgramExceptions-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow local program exceptions - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether administrators are allowed to use the Windows Firewall component in Control Panel to define a local program exceptions list for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowLocalProgramExceptionsStandardProfile_var" export-name="oval:com.mcafee.oval:var:59452" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6553" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowInboundRemoteAdministrationException-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow inbound remote administration exception - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall allows the computer to receive the unsolicited incoming messages associated with remote administration for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowInboundRemoteAdministrationExceptionStandardProfile_var" export-name="oval:com.mcafee.oval:var:59448" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6549" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowInboundFileAndPrinterSharingException-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow inbound file and printer sharing exception - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether inbound file and printer sharing is allowed for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowInboundFileAndPrinterSharingExceptionStandardProfile_var" export-name="oval:com.mcafee.oval:var:59447" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6548" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundDestinationUnreachable-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound destination unreachable - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow destination unreachable messages to be sent out for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundDestinationUnreachable_var0" export-name="oval:com.mcafee.oval:var:59137" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56835" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundSourceQuench-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound source quench - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow source quenching on outbound data for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundSourceQuench_var0" export-name="oval:com.mcafee.oval:var:59139" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56837" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowRedirect-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow redirect - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow redirection for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowRedirect_var0" export-name="oval:com.mcafee.oval:var:59141" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65824" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowInboundEchoRequest-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow inbound echo request - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow inbound echo requests for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowInboundEchoRequest_var0" export-name="oval:com.mcafee.oval:var:59143" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65826" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowInboundRouterRequest-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow inbound router request - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow inbound router requests for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowInboundRouterRequest_var0" export-name="oval:com.mcafee.oval:var:59145" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65828" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundTimeExceeded-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound time exceeded - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow response times to be exceeded on outbound data for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundTimeExceeded_var0" export-name="oval:com.mcafee.oval:var:59147" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65830" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundParameterProblem-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound parameter problem - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow parameter problems on outbound data for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundParameterProblem_var0" export-name="oval:com.mcafee.oval:var:59149" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65832" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowInboundTimestampRequest-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow inbound timestamp request - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow inbound timestamp requests for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowInboundTimestampRequest_var0" export-name="oval:com.mcafee.oval:var:59151" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65834" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowInboundMaskRequest-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow inbound mask request - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow inbound mask requests for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowInboundMaskRequest_var0" export-name="oval:com.mcafee.oval:var:59153" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65836" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowICMPSettings-AllowOutboundPacketTooBig-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow ICMP settings - Allow outbound packet too big - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether ICMP will allow outbound data packets that are too big for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ICMPAllowOutboundPacketTooBig_var0" export-name="oval:com.mcafee.oval:var:59155" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65838" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowInboundRemoteDesktopExceptions-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow inbound Remote Desktop exceptions - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether this computer is allowed to receive inbound Remote Desktop requests for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowInboundRemoteDesktopExceptionsStandardProfile_var" export-name="oval:com.mcafee.oval:var:59449" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6550" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowInboundUPnPFrameworkExceptions-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow inbound UPnP framework exceptions - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether this computer is allowed to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with built-in firewalls for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowInboundUPnPFrameworkExceptionsStandardProfile_var" export-name="oval:com.mcafee.oval:var:59450" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6551" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_ProhibitNotifications-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Prohibit notifications - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is prevented from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exceptions list for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallProhibitNotificationsStandardProfile_var0" export-name="oval:com.mcafee.oval:var:59456" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6557" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_Logging-LogDroppedPackets-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Logging - Log Dropped Packets - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether dropped packets will be logged for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallLogDroppedPacketsStandardProfile_var" export-name="oval:com.mcafee.oval:var:66120" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65851" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_Logging-LogSuccessfulConnections-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Logging - Log Successful Connections - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether successful connections will be logged for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallLogSuccessfulConnectionsStandardProfile_var" export-name="oval:com.mcafee.oval:var:66121" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65852" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_Logging-LogfilePathAndName-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Logging - Logfile path and name - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether a non-default logfile path and name will be used for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallLogfilePathAndNameStandardProfile_var" export-name="oval:com.mcafee.oval:var:66122" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65853" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_Logging-LogfileSizeLimit-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Logging - Logfile size limit - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines the size limit for the firewall logfile for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallLogfileSizeLimitStandardProfile_var" export-name="oval:com.mcafee.oval:var:66123" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65854" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_ProhibitUnicastResponseToMulticastOrBroadcastRequests-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Prohibit unicast response to multicast or broadcast requests - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether this computer is prevented from receiving unicast responses to its outgoing multicast or broadcast messages for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallProhibitUnicastResponseToMulticastOrBroadcastRequestsStandardProfile_var" export-name="oval:com.mcafee.oval:var:59457" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6558" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_DefineInboundPortExceptions-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Define inbound port exceptions - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether the inbound port exceptions list defined by Group Policy can be viewed and changed for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallDefineInboundPortExceptionsStandardProfile_var" export-name="oval:com.mcafee.oval:var:59453" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6554" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_DefineInboundProgramExceptions-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Define inbound program exceptions - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether the program exceptions list defined by Group Policy can be viewed and changed for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallDefineInboundProgramExceptionsStandardProfile_var" export-name="oval:com.mcafee.oval:var:59454" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6555" />
        </check>
      </Rule>
      <Rule id="WindowsFirewall_AllowLocalPortExceptions-StandardProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall: Allow local port exceptions - Standard Profile</title>
        <description xml:lang="en">This firewall setting determines whether administrators are allowed to use the Windows Firewall component in Control Panel to define a local port exceptions list for the Standard Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsFirewallAllowLocalPortExceptionsStandardProfile_var" export-name="oval:com.mcafee.oval:var:59451" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6552" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_FirewallState-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Firewall state - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is enabled for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FirewallState-PrivateProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6522" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6522" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_InboundConnections-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Inbound Connections - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether inbound connections are allowed for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="InboundConnections-PrivateProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6523" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6523" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_DisplayANotification-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Display a Notification - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is prevented from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exceptions list for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisplayANotification-PrivateProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6525" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6525" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_AllowUnicastResponse-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Allow Unicast Response - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether this computer is prevented from receiving unicast responses to its outgoing multicast or broadcast messages for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowUnicastResponse-PrivateProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6526" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6526" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_ApplyLocalFirewallRules-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Apply Local Firewall Rules - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether local firewall rules are applied for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplyLocalFirewallRules-PrivateProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6527" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6527" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Apply Local Connection Security Rules - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether local connection security rules are applied for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplyLocalConnectionSecurityRules-PrivateProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6528" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6528" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Log Dropped Packets - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether dropped packets will be logged for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogDroppedPackets-PrivateProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6411" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6411" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Log Successful Connections - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether successful connections will be logged for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogSuccessfulConnections-PrivateProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6412" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6412" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Logfile path and name - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether a non-default logfile path and name will be used for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogfilePathAndName_private__var" export-name="oval:com.mcafee.oval.vistafirewall:var:6413" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6413" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Logfile size limit - Private Profile</title>
        <description xml:lang="en">This firewall setting determines the size limit for the firewall logfile for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogfileSizeLimit-PrivateProfile_sizeIsKilobytes__var" export-name="oval:com.mcafee.oval.vistafirewall:var:6414" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6414" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PrivateProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Outbound Connections - Private Profile</title>
        <description xml:lang="en">This firewall setting determines whether outbound connections are allowed for the Private Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OutboundConnections-PrivateProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6524" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6524" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_FirewallState-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Firewall state - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is enabled for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FirewallState-PublicProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6529" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6529" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_InboundConnections-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Inbound Connections - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether inbound connections are allowed for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="InboundConnections-PublicProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6530" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6530" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_DisplayANotification-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Display a Notification - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether the Windows Firewall is prevented from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exceptions list for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisplayANotification-PublicProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6532" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6532" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_AllowUnicastResponse-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Allow Unicast Response - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether this computer is prevented from receiving unicast responses to its outgoing multicast or broadcast messages for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowUnicastResponse-PublicProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6533" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6533" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_ApplyLocalFirewallRules-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Apply Local Firewall Rules - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether local firewall rules are applied for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplyLocalFirewallRules-PublicProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6534" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6534" />
        </check>
      </Rule>
      <Rule id="WindowsVistaFirewall_ApplyLocalConnectionSecurityRules-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Apply Local Connection Security Rules - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether local connection security rules are applied for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ApplyLocalConnectionSecurityRules-PublicProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6535" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6535" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogDroppedPackets-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Log Dropped Packets - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether dropped packets will be logged for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogDroppedPackets-PublicProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6421" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6421" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogSuccessfulConnections-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Log Successful Connections - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether successful connections will be logged for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogSuccessfulConnections-PublicProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6422" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6422" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogfilePathAndName-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Logfile path and name - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether a non-default logfile path and name will be used for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogfilePathAndName_public__var" export-name="oval:com.mcafee.oval.vistafirewall:var:6423" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6423" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_LogfileSizeLimit-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Logfile size limit - Public Profile</title>
        <description xml:lang="en">This firewall setting determines the size limit for the firewall logfile for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LogfileSizeLimit-PublicProfile_sizeIsKilobytes__var" export-name="oval:com.mcafee.oval.vistafirewall:var:6424" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6424" />
        </check>
      </Rule>
      <Rule id="WindowsFirewallWithAdvancedSecurity_OutboundConnections-PublicProfile" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Firewall with Advanced Security: Outbound Connections - Public Profile</title>
        <description xml:lang="en">This firewall setting determines whether outbound connections are allowed for the Public Profile.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="OutboundConnections-PublicProfile_var" export-name="oval:com.mcafee.oval.vistafirewall:var:6531" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vistafirewall:def:6531" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsInstaller" xml:lang="en">
      <title xml:lang="en">Windows Installer</title>
      <Value id="DisableIESecurityPromptForWindowsInstallerScripts_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="EnableUserControlOverInstalls_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ProhibitNon-administratorsFromApplyingVendorSignedUpdates_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="AlwaysInstallWithElevatedPrivileges_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
     <Rule id="WindowsInstaller_SetAlwaysInstallWithElevatedPrivileges" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Installer: Always install with elevated privileges</title>
        <description xml:lang="en">This setting directs Windows Installer to use system permissions when it installs any program on the system.</description>
        <rationale>
          Users with limited privileges can exploit this feature by creating a Windows Installer installation package that creates a new local account that belongs to the local built-in Administrators group, adds their current account to the local built-in Administrators group, installs malicious software, or performs other unauthorized activities.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34788-0</ident>
        <fixtext fixref="F-WindowsInstaller_SetAlwaysInstallWithElevatedPrivileges_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled. 
          User Configuration\Administrative Templates\Windows Components\Windows Installer\Always install with elevated privileges
        </fixtext>
        <fix id="F-WindowsInstaller_SetAlwaysInstallWithElevatedPrivileges_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AlwaysInstallWithElevatedPrivileges_var" export-name="oval:com.mcafee.oval:var:244465" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1413855" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsInstaller_DisableIESecurityPromptForWindowsInstallerScripts" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Installer: Disable IE security prompt for Windows Installer scripts</title>
        <description xml:lang="en">This policy setting determines whether Web-based programs are allowed to install software on the computer without notifying the user.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DisableIESecurityPromptForWindowsInstallerScripts_var" export-name="oval:com.mcafee.oval.windows:var:61201" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6120" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsInstaller_EnableUserControlOverInstalls" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Installer: Enable user control over installs</title>
        <description xml:lang="en">This policy setting determines whether users are permitted to change installation options that typically are available only to system administrators.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="EnableUserControlOverInstalls_var" export-name="oval:com.mcafee.oval.windows:var:61211" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6121" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsInstaller_ProhibitNon-administratorsFromApplyingVendorSignedUpdates" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Installer: Prohibit non-administrators from applying vendor signed updates</title>
        <description xml:lang="en">This setting controls the ability of non-administrators to install updates that have been digitally signed by the application vendor.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ProhibitNon-administratorsFromApplyingVendorSignedUpdates_var" export-name="oval:com.mcafee.oval.windows:var:61221" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6122" />
        </check>
      </Rule>
      <Rule id="WindowsInstaller_AlwaysInstallWithElevatedPrivileges" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Installer: Always install with elevated privileges</title>
        <description xml:lang="en">This setting directs Windows Installer to use system permissions when it installs any program on the system.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AlwaysInstallWithElevatedPrivileges_var" export-name="oval:com.mcafee.oval:var:244465" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215775" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsInkWorkspace" xml:lang="en">
      <title xml:lang="en">Windows Ink Workspace</title>
      <Value id="AllowSuggestedAppsInWindowsInkWorkspace_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="AllowWindowsInkWorkspace_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="WindowsInkWorkspaceAllowSuggestedAppsInWindowsInkWorkspace" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Ink Workspace: Allow suggested apps in Windows Ink Workspace</title>
        <description xml:lang="en">This policy setting determines whether suggested apps in Windows Ink Workspace are allowed.</description>
        <rationale>Disabling this setting will help ensure your data is not shared with any third party. The
          Microsoft feature will collect data and suggested apps based on that data collected.
        </rationale>
        <fixtext fixref="F-WindowsInkWorkspaceAllowSuggestedAppsInWindowsInkWorkspace_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled:
          Computer Configuration\Policies\Administrative Templates\Windows
          Components\Windows Ink Workspace\Allow suggested apps in Windows Ink
          Workspace
        </fixtext>
        <fix id="F-WindowsInkWorkspaceAllowSuggestedAppsInWindowsInkWorkspace_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowSuggestedAppsInWindowsInkWorkspace_var" export-name="oval:com.mcafee.oval:var:2899349" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899343" />
        </check>
      </Rule>
      <Rule id="WindowsInkWorkspaceAllowWindowsInkWorkspace" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Ink Workspace: Allow Windows Ink Workspace</title>
        <description xml:lang="en">This policy setting determines whether Windows Ink items are allowed above the lock screen.</description>
        <rationale>Allowing any apps to be accessed while system is locked is not recommended. If this
          feature is permitted, it should only be accessible once a user authenticates with the proper
          credentials.
        </rationale>
        <fixtext fixref="F-WindowsInkWorkspaceAllowWindowsInkWorkspace_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled:
          On, but disallow access above lock OR Disabled:
          Computer Configuration\Policies\Administrative Templates\Windows
          Components\Windows Ink Workspace\Allow Windows Ink Workspace
        </fixtext>
        <fix id="F-WindowsInkWorkspaceAllowWindowsInkWorkspace_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowWindowsInkWorkspace_var" export-name="oval:com.mcafee.oval:var:2899357" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899351" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsLogonOptions" xml:lang="en">
      <title xml:lang="en">Windows Logon Options</title>
      <Value id="ReportNoLogonServer_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="WindowsComponents-WindowsLogonOptions_ReportWhenLogonServerWasNotAvailableDuringUserLogon" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Logon Options: Report when logon server was not available during user logon</title>
        <description xml:lang="en">This policy setting determines whether the logged on user should be notified if the logon server could not be contacted during logon and he has been logged on using previously stored account information.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ReportNoLogonServer_var" export-name="oval:com.mcafee.oval:var:72016" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:65869" />
        </check>
      </Rule>
    </Group>
    <Group id="WLANSettings" xml:lang="en">
      <title xml:lang="en">WLAN Settings</title>
      <Value id="AllowWindowstoautomaticallyconnecttosuggestedopenhotspots_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="WLANSettings_AllowWindowstoautomaticallyconnecttosuggestedopenhotspots_tonetworkssharedbycontacts_andtohotspotsofferingpaidservices" xml:lang="en" selected="false">
        <title xml:lang="en">WLAN Settings: Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services</title>
        <description xml:lang="en">This policy setting determines whether users can enable the following WLAN settings: "Connect to suggested open hotspots," "Connect to networks shared by my contacts," and "Enable paid services".</description>
        <rationale>
          Automatically connecting to an open hotspot or network can introduce the system to a rogue network with malicious intent.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41378-1</ident>
        <fixtext fixref="F-WLANSettings_AllowWindowstoautomaticallyconnecttosuggestedopenhotspots_tonetworkssharedbycontacts_andtohotspotsofferingpaidservices_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Network\WLAN Service\WLAN Settings\Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services
        </fixtext>
        <fix id="F-WLANSettings_AllowWindowstoautomaticallyconnecttosuggestedopenhotspots_tonetworkssharedbycontacts_andtohotspotsofferingpaidservices_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowWindowstoautomaticallyconnecttosuggestedopenhotspots_var" export-name="oval:com.mcafee.oval:var:1415778" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1415777" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsMail" xml:lang="en">
      <title xml:lang="en">Windows Mail</title>
      <Value id="TurnOffTheCommunitiesFeatures_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="TurnOffWindowsMailApplication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="WindowsComponents-WindowsMail_TurnOffTheCommunitiesFeatures" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Mail: Turn off the communities features</title>
        <description xml:lang="en">This policy setting determines whether Windows Mail will check your newsgroup servers for Communities support.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffTheCommunitiesFeatures_var" export-name="oval:com.mcafee.oval.1:var:61241" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6124" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsMail_TurnOffWindowsMailApplication" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Mail: Turn off Windows Mail application</title>
        <description xml:lang="en">This policy setting determines whether access to the Windows Mail application is allowed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffWindowsMailApplication_var" export-name="oval:com.mcafee.oval.1:var:61251" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6125" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsMediaDigitalRightsManagement" xml:lang="en">
      <title xml:lang="en">Windows Media Digital Rights Management</title>
      <Value id="PreventWindowsMediaDRMInternetAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="WindowsComponents-WindowsMediaDigitalRightsManagement_PreventWindowsMediaDRMInternetAccess" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Media Digital Rights Management: Prevent Windows Media DRM Internet Access</title>
        <description xml:lang="en">This policy setting determines whether Windows Media Digital Rights Management (DRM) is prevented from accessing the Internet (or intranet).</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventWindowsMediaDRMInternetAccess_var" export-name="oval:com.mcafee.oval.1:var:61261" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6126" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsMediaPlayer" xml:lang="en">
      <title xml:lang="en">Windows Media Player</title>
      <Value id="DoNotShowFirstUseDialogBoxes_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="PreventAutomaticUpdates_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="WindowsComponents-WindowsMediaPlayer_DoNotShowFirstUseDialogBoxes" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Media Player: Do Not Show First Use Dialog Boxes</title>
        <description xml:lang="en">This policy setting prevents the Privacy Options and Installation Options dialog boxes from being displayed the first time a user starts Windows Media Player.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotShowFirstUseDialogBoxes_var" export-name="oval:com.mcafee.oval.windows:var:612261221" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:612261221" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsMediaPlayer_PreventAutomaticUpdates" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Media Player: Prevent Automatic Updates</title>
        <description xml:lang="en">This policy prevents the Player from being updated and prevents users with administrator rights from being prompted to update the Player if an updated version is available.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PreventAutomaticUpdates_var" export-name="oval:com.mcafee.oval.windows:var:612261222" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:612261222" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsMeetingSpace" xml:lang="en">
      <title xml:lang="en">Windows Meeting Space</title>
      <Value id="TurnOffWindowsMeetingSpace_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="WindowsComponents-WindowsMeetingSpace_TurnOffWindowsMeetingSpace" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Meeting Space: Turn off Windows Meeting Space</title>
        <description xml:lang="en">Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for passing notes. If you enable this setting, Windows Meeting Space will be turned off.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffWindowsMeetingSpace_var" export-name="oval:com.mcafee.oval.1:var:61271" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6127" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsMessenger" xml:lang="en">
      <title xml:lang="en">Windows Messenger</title>
      <Value id="DoNotAutomaticallyStartWindowsMessengerInitially_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DoNotAllowWindowsMessengerToBeRun_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="WindowsComponents-WindowsMessenger_DoNotAutomaticallyStartWindowsMessengerInitially" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Messenger: Do not automatically start Windows Messenger initially</title>
        <description xml:lang="en">This policy setting is used to stop Windows Messenger from automatically being run at logon.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAutomaticallyStartWindowsMessengerInitially_var" export-name="oval:com.mcafee.oval.windows:var:612261224" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:612261224" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsMessenger_DoNotAllowWindowsMessengerToBeRun" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Messenger: Do not allow Windows Messenger to be run</title>
        <description xml:lang="en">This policy setting determines whether Windows Messenger is allowed to be run.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowWindowsMessengerToBeRun_var" export-name="oval:com.mcafee.oval:var:59515" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6601" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsPowerShell" xml:lang="en">
      <title xml:lang="en">Windows PowerShell</title>
      <Value id="TurnonPowerShellScriptBlockLogging_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="TurnonPowerShellTranscription_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="WindowsPowerShell_SetTurnonPowerShellScriptBlockLogging" xml:lang="en" selected="false">
        <title xml:lang="en">Windows PowerShell: Set Turn on PowerShell Script Block Logging</title>
        <description xml:lang="en">This policy setting enables logging of all PowerShell script input to the Microsoft-Windows-PowerShell/Operational event log.</description>
        <rationale>Due to the potential risks of capturing passwords in the logs. This setting should only be needed for debugging purposes, and not in normal operation, it is important to ensure this is set to Disabled.</rationale>
        <fixtext fixref="F-WindowsPowerShell_SetTurnonPowerShellScriptBlockLogging_fix">
          To establish the recommended configuration via GP, set the following Group Policy setting to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Windows PowerShell\Turn on PowerShell Script Block Logging
        </fixtext>
        <fix id="F-WindowsPowerShell_SetTurnonPowerShellScriptBlockLogging_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnonPowerShellScriptBlockLogging_var" export-name="oval:com.mcafee.oval:var:2486336" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486335" />
        </check>
      </Rule>
      <Rule id="WindowsPowerShell_SetTurnonPowerShellTranscription" xml:lang="en" selected="false">
        <title xml:lang="en">Windows PowerShell: Set Turn on PowerShell Transcription</title>
        <description xml:lang="en">This Policy setting lets you capture the input and output of Windows PowerShell commands into text-based transcripts.</description>
        <rationale>If this setting is enabled there is a risk that passwords could get stored in plain text in the PowerShell_transcript output file.</rationale>
        <fixtext fixref="F-WindowsPowerShell_SetTurnonPowerShellTranscription_fix">
          To establish the recommended configuration via GP, set the following Group Policy setting to Disabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Windows PowerShell\Turn on PowerShell Transcription
        </fixtext>
        <fix id="F-WindowsPowerShell_SetTurnonPowerShellTranscription_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnonPowerShellTranscription_var" export-name="oval:com.mcafee.oval:var:2486344" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2486343" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsRemoteManagement_WinRM_" xml:lang="en">
      <title xml:lang="en">Windows Remote Management (WinRM)</title>
      <Value id="WinRMClient-DisallowDigestAuthentication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WinRMClient-AllowBasicAuthentication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WinRMClient-AllowUnencryptedTraffic_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="WinRMService-AllowBasicAuthentication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="AllowRemoteServerManagementThroughWinRM_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
      </Value>
      <Value id="WinRMService-DisallowWinRMFromStoringRunAsCredentials_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="WinRMService-AllowUnencryptedTraffic_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="UseAdvancedRemoteFXGraphicsForRemoteApp_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="UseAdvancedRemoteFXGraphicsForRemoteApp_var-selector-0">Not Configured</value>
        <value selector="UseAdvancedRemoteFXGraphicsForRemoteApp_var-selector-1">Not Configured</value>
        <value selector="UseAdvancedRemoteFXGraphicsForRemoteApp_var-selector-2">Not Configured</value>
      </Value>
      <Value id="LimitUsersToASingleRemoteSession_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="DoNotAllowCOMPortRedirection_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="DoNotAllowLPTPortRedirection_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="DoNotAllowSupportedPnPDeviceRedirection_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Rule id="DeviceandResourceRedirection_SetDonotallowCOMportredirection" xml:lang="en" selected="false">
        <title xml:lang="en">Device and Resource Redirection - Set Do not allow COM port redirection</title>
        <description xml:lang="en">This policy setting prevents users from sharing the local drives on their client computers to Terminal Servers that they access. Mapped drives appear in the session folder tree in Windows Explorer in the following format: \\TSClient\driveletter$ If local drives are shared they are left vulnerable to intruders who want to exploit the data that is stored on them. The recommended state for this setting is: Enabled.</description>
        <rationale>
          In a more security-sensitive environment, it is desirable to reduce the possible attack surface. The need for COM port redirection within a Remote Desktop session is very rare, so makes sense to reduce the number of unexpected avenues for data exfiltration and/or malicious code transfer.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34496-0</ident>
        <fixtext fixref="F-DeviceandResourceRedirection_SetDonotallowCOMportredirection_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection\Do not allow COM port redirection
        </fixtext>
        <fix id="F-DeviceandResourceRedirection_SetDonotallowCOMportredirection_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowCOMPortRedirection_var" export-name="oval:com.mcafee.oval:var:244495" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215799" />
        </check>
      </Rule> 
      <Rule id="DeviceAndResourceRedirection_DoNotAllowLPTPortRedirection" xml:lang="en" selected="false">
        <title xml:lang="en">Device and Resource Redirection: Do not allow LPT port redirection</title>
        <description xml:lang="en">This policy setting determines whether to prevent the redirection of data to client LPT ports from the remote computer in a Terminal Services session.</description>
        <rationale>
          In a more security-sensitive environment, it is desirable to reduce the possible attack surface. The need for LPT port redirection within a Remote Desktop session is very rare, so makes sense to reduce the number of unexpected avenues for data exfiltration and/or malicious code transfer.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34698-1</ident>
        <fixtext fixref="F-DeviceAndResourceRedirection_DoNotAllowLPTPortRedirection_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection\Do not allow LPT port redirection
        </fixtext>
        <fix id="F-DeviceAndResourceRedirection_DoNotAllowLPTPortRedirection_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowLPTPortRedirection_var" export-name="oval:com.mcafee.oval:var:244496" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215800" />
        </check>
      </Rule>
      <Rule id="DeviceAndResourceRedirection_DoNotAllowSupportedPlugAndPlayDeviceRedirection" xml:lang="en" selected="false">
        <title xml:lang="en">Device and Resource Redirection: Do not allow supported Plug and Play device redirection</title>
        <description xml:lang="en">This policy setting allows you to control the redirection of supported Plug and Play devices, such as Windows Portable Devices, to the remote computer in a Terminal Services session.</description>
        <rationale>
          In a more security-sensitive environment, it is desirable to reduce the possible attack surface. The need for Plug and Play device redirection within a Remote Desktop session is very rare, so makes sense to reduce the number of unexpected avenues for data exfiltration and/or malicious code transfer.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-34790-6</ident>
        <fixtext fixref="F-DeviceAndResourceRedirection_DoNotAllowSupportedPlugAndPlayDeviceRedirection_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection\Do not allow supported Plug and Play device redirection
        </fixtext>
        <fix id="F-DeviceAndResourceRedirection_DoNotAllowSupportedPlugAndPlayDeviceRedirection_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAllowSupportedPnPDeviceRedirection_var" export-name="oval:com.mcafee.oval:var:244497" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215801" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-RemoteDesktopServices-RemoteDesktopSessionHost-RemoteSessionEnvironmentUseAdvancedRemoteFXGraphicsForRemoteApp" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Remote Desktop Services - Remote Desktop Session Host - Remote Session Environment: Use advanced RemoteFX graphics for RemoteApp</title>
        <description xml:lang="en">This policy setting allows you to enable RemoteApp programs to use advanced graphics, including support for transparency, live thumbnails, and seamless application moves.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="UseAdvancedRemoteFXGraphicsForRemoteApp_var" export-name="oval:com.mcafee.oval:var:244589" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404017" />
        </check>
      </Rule>
      <Rule id="Connections_RestrictRemoteDesktopServicesUsersToASingleRemoteDesktopServicesSession" xml:lang="en" selected="false">
        <title xml:lang="en">Connections: Restrict Remote Desktop Services users to a single Remote Desktop Services session</title>
        <description xml:lang="en">This policy setting allows you to restrict users to a single remote Remote Desktop Services session.</description>
        <rationale xml:lang="en">This setting ensures that users and administrators who Remote Desktop to a server will continue to use the same session - if they disconnect and reconnect, they will go back to the same session they were using before, preventing the creation of a second simultaneous session.</rationale>
        <ident system="https://nvd.nist.gov/cce/index.cfm">CCE-37708-5</ident>
        <fixtext xml:lang="en" fixref="F-Connections_RestrictRemoteDesktopServicesUsersToASingleRemoteDesktopServicesSession_fix" reboot="false" strategy="unknown" disruption="unknown" complexity="unknown">To establish the recommended configuration via GP, set the following UI path to Enabled: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections\Restrict Remote Desktop Services users to a single Remote Desktop Services session</fixtext>
        <fix id="F-Connections_RestrictRemoteDesktopServicesUsersToASingleRemoteDesktopServicesSession_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LimitUsersToASingleRemoteSession_var" export-name="oval:com.mcafee.oval:var:216445" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215735" />
        </check>
      </Rule>
      <Rule id="WinRMClient_DisallowDigestAuthentication" xml:lang="en" selected="false">
        <title xml:lang="en">WinRM Client: Disallow Digest authentication</title>
        <description xml:lang="en">This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Digest authentication.</description>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-12266-3</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WinRMClient-DisallowDigestAuthentication_var" export-name="oval:com.mcafee.oval:var:244459" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215769" />
        </check>
      </Rule>
      <Rule id="WinRMClient_AllowBasicAuthentication" xml:lang="en" selected="false">
        <title xml:lang="en">WinRM Client: Allow Basic authentication</title>
        <description xml:lang="en">This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication.</description>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-10454-7</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WinRMClient-AllowBasicAuthentication_var" export-name="oval:com.mcafee.oval:var:244460" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215770" />
        </check>
      </Rule>
      <Rule id="WinRMClient_AllowUnencryptedTraffic" xml:lang="en" selected="false">
        <title xml:lang="en">WinRM Client: Allow unencrypted traffic</title>
        <description xml:lang="en">This policy setting allows you to manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted messages over the network.</description>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-11954-5</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WinRMClient-AllowUnencryptedTraffic_var" export-name="oval:com.mcafee.oval:var:244464" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215774" />
        </check>
      </Rule>
      <Rule id="WinRMService_AllowBasicAuthentication" xml:lang="en" selected="false">
        <title xml:lang="en">WinRM Service: Allow Basic authentication</title>
        <description xml:lang="en">This policy setting allows you to manage whether the Windows Remote Management (WinRM) service uses Basic authentication.</description>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-11131-0</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WinRMService-AllowBasicAuthentication_var" export-name="oval:com.mcafee.oval:var:244461" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215771" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsRemoteManagement_WinRM_-WinRMServiceAllowRemoteServerManagementThroughWinRM" xml:lang="en" selected="false">
        <title xml:lang="en">WinRM Service: Allow remote server management through WinRM</title>
        <description xml:lang="en">This policy setting allows you to manage whether the Windows Remote Management (WinRM) service automatically listens on the network for requests on the HTTP transport over the default HTTP port.</description>
        <rationale>Any feature is a potential avenue of attack, those that enable inbound network connections
          are particularly risky. Only enable the use of the Windows Remote Management (WinRM)
          service on trusted networks and when feasible employ additional controls such as IPsec.</rationale>
        <fixtext fixref="F-WindowsComponents-WindowsRemoteManagement_WinRM_-WinRMServiceAllowRemoteServerManagementThroughWinRM_fix">To implement the recommended configuration state, set the following Group Policy setting
          to Disabled:
          Computer Configuration\Administrative Templates\Windows Components\Windows
          Remote Management (WinRM)\WinRM Service\Allow remote server management through WinRM</fixtext>
        <fix id="F-WindowsComponents-WindowsRemoteManagement_WinRM_-WinRMServiceAllowRemoteServerManagementThroughWinRM_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowRemoteServerManagementThroughWinRM_var" export-name="oval:com.mcafee.oval:var:2898050" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2898047" />
        </check>
      </Rule>
      <Rule id="WinRMService_DisallowWinRMFromStoringRunAsCredentials" xml:lang="en" selected="false">
        <title xml:lang="en">WinRM Service: Disallow WinRM from storing RunAs credentials</title>
        <description xml:lang="en">This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not allow RunAs credentials to be stored for any plug-ins.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WinRMService-DisallowWinRMFromStoringRunAsCredentials_var" export-name="oval:com.mcafee.oval:var:244462" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215772" />
        </check>
      </Rule>
      <Rule id="WinRMService_AllowUnencryptedTraffic" xml:lang="en" selected="false">
        <title xml:lang="en">WinRM Service: Allow unencrypted traffic</title>
        <description xml:lang="en">This policy setting allows you to manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the network.</description>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-11290-4</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WinRMService-AllowUnencryptedTraffic_var" export-name="oval:com.mcafee.oval:var:244463" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:215773" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsRemoteShell" xml:lang="en">
      <title xml:lang="en">Windows Remote Shell</title>
      <Value id="AllowRemoteShellAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
        <value selector="AllowRemoteShellAccess_var-selector">Enabled</value>
      </Value>
      <Rule id="WindowsComponents-WindowsRemoteShell_AllowRemoteShellAccess" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Remote Shell: Allow Remote Shell Access</title>
        <description xml:lang="en">This policy setting determines whether or not the user is granted access to remote shells.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AllowRemoteShellAccess_var" export-name="oval:com.mcafee.oval:var:79475" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101092" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsSidebar" xml:lang="en">
      <title xml:lang="en">Windows Sidebar</title>
      <Value id="TurnOffUnsignedGadgets_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="TurnOffUserInstalledWindowsSidebarGadgets_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="WindowsComponents-WindowsSidebar_DisableUnpackingAndInstallationOfGadgetsThatAreNotDigitallySigned" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Sidebar: Disable unpacking and installation of gadgets that are not digitally signed</title>
        <description xml:lang="en">This policy setting determines whether the Windows Sidebar will extract any gadgets that have not been digitally signed.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffUnsignedGadgets_var" export-name="oval:com.mcafee.oval.1:var:61291" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6129" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsSidebar_OverrideTheMoreGadgetsLink" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Sidebar: Override the More Gadgets Link</title>
        <description xml:lang="en">This policy setting determines whether the Gadget Gallery in the Windows Sidebar will direct users to the default or an alternate web site.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6130" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsSidebar_TurnOffUserInstalledWindowsSidebarGadgets" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Sidebar: Turn Off User Installed Windows Sidebar Gadgets</title>
        <description xml:lang="en">This policy setting determines whether the Windows Sidebar will run any user installed gadgets.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffUserInstalledWindowsSidebarGadgets_var" export-name="oval:com.mcafee.oval.1:var:61311" />
          <check-content-ref href="" name="oval:com.mcafee.oval.1:def:6131" />
        </check>
      </Rule>
    </Group>
    <Group id="WindowsUpdate" xml:lang="en">
      <title xml:lang="en">Windows Update</title>
      <Value id="DoNotDisplayInstallUpdatesAndShutDownOptionInTheShutDownWindowsDialogBox_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="NoAuto-restartForScheduledAutomaticUpdatesInstallations_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="RescheduleAutomaticUpdatesScheduledInstallations_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">10</value>
      </Value>
      <Value id="DoNotAdjustDefaultOptionToInstallUpdatesAndShutDownInShutDownWindowsDialogBox_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Disabled</value>
      </Value>
      <Value id="AlwaysAutomaticallyRestartAtTheScheduledTime_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
        <value selector="AlwaysAutomaticallyRestartAtTheScheduledTime_var-selector-0">99999</value>
        <value selector="AlwaysAutomaticallyRestartAtTheScheduledTime_var-selector-1">99999</value>
        <value selector="AlwaysAutomaticallyRestartAtTheScheduledTime_var-selector-2">99999</value>
      </Value>
      <Value id="DoNotConnectToAnyWUInternetLocations_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="DoNotConnectToAnyWUInternetLocations_var-selector-0">Not Configured</value>
        <value selector="DoNotConnectToAnyWUInternetLocations_var-selector-1">Not Configured</value>
        <value selector="DoNotConnectToAnyWUInternetLocations_var-selector-2">Not Configured</value>
      </Value>
      <Value id="ConfigureAutomaticUpdates_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ConfigureAutomaticUpdatesScheduledinstallday_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="DeferUpgrade_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="Deferupgradesduration_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">8</value>
      </Value>
      <Value id="Deferupdatesduration_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="PauseUpgradesandUpdates_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">99999</value>
      </Value>
      <Value id="NoAuto-restartWithLoggedOnUsersForScheduledAutomaticUpdatesInstallations_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="WindowsUpdate_ConfigureAutomaticUpdates" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Update: Configure Automatic Updates</title>
        <description xml:lang="en">This policy setting specifies whether computers in your environment will receive security updates from Windows Update or WSUS. If you configure this policy setting to Enabled, the operating system will recognize when a network connection is available and then use the network connection to search Windows Update or your designated intranet site for updates that apply to them. After you configure this policy setting to Enabled, select one of the following three options in the Configure Automatic Updates Properties dialog box to specify how the service will work: - Notify before downloading any updates and notify again before installing them. - Download the updates automatically and notify when they are ready to be installed. (Default setting) - Automatically download updates and install them on the schedule specified below. If you disable this policy setting, you will need to download and manually install any available updates from Windows Update. The recommended state for this setting is: Enabled.</description>
        <rationale>
          Although each version of Windows is thoroughly tested before release, it is possible that problems will be discovered after the products are shipped. The Configure Automatic Updates setting can help you ensure that the computers in your environment will always have the most recent critical operating system updates and service packs installed.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35111-4</ident>
        <fixtext fixref="F-WindowsUpdate_ConfigureAutomaticUpdates_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled. Computer Configuration\Administrative Templates\Windows Components\Windows Update\Configure Automatic Updates
        </fixtext>
        <fix id="F-WindowsUpdate_ConfigureAutomaticUpdates_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureAutomaticUpdates_var" export-name="oval:com.mcafee.oval:var:1177336" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1177335" />
        </check>
      </Rule>
      <Rule id="WindowsUpdate_ConfigureAutomaticUpdatesScheduledinstallday" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Update: Configure Automatic Updates: Scheduled install day</title>
        <description xml:lang="en">
          This policy setting specifies whether computers in your environment will receive security updates from Windows Update or WSUS.
        </description>
        <reference>CIS Microsoft Windows 8.1 Benchmark v1.1.0</reference>
        <rationale>
          Although each version of Windows is thoroughly tested before release, it is possible that problems will be discovered after the products are shipped. 
          The Configure Automatic Updates setting can help you ensure that the computers in your environment will always have the most recent critical operating system updates and service packs installed.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-35111-4</ident>
        <fixtext fixref="F-WindowsUpdate_ConfigureAutomaticUpdatesScheduledinstallday_fix">
          To establish the recommended configuration via GP, set the following UI path to 0 - Every day.
          Computer Configuration\Administrative Templates\Windows Components\Windows Update\Configure Automatic Updates: Scheduled install day
        </fixtext>
        <fix id="F-WindowsUpdate_ConfigureAutomaticUpdatesScheduledinstallday_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureAutomaticUpdatesScheduledinstallday_var" export-name="oval:com.mcafee.oval:var:1177354" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:1177349" />
        </check>
      </Rule>
      <Rule id="WindowsUpdate_DeferUpgradesandUpdates" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Update: Defer Upgrades and Updates</title>
        <description xml:lang="en">If you enable this policy setting, in Pro and Enterprise SKUs you can defer upgrades till the next upgrade period (at least a few months). If you do not have it set you will receive upgrades once they are available that will be installed as part of your update policies. Security updates will not be impacted by this policy. For more information on available upgrades see windows.com/itpro.
          The recommended state for this setting is:
          Defer Upgrades and Updates - Enabled 
          Defer upgrades for the following duration (months) - 8 months 
          Defer updates for the following duration (weeks) - 0 weeks 
          Pause Upgrades and Updates - unchecked
        </description>
        <rationale>
          Forcing upgrades to features without testing in your environment could cause software incompatibilities as well as introducing new bugs into the operating system.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-41427-6</ident>
        <fixtext fixref="F-WindowsUpdate_DeferUpgradesandUpdates_fix">
          To establish the recommended configuration via GP, set the following UI path to Enabled: 8 months, 0 weeks: 
          Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Update\Defer Upgrades and Updates
        </fixtext>
        <fix id="F-WindowsUpdate_DeferUpgradesandUpdates_fix"/>
        <complex-check operator="AND">
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="DeferUpgrade_var" export-name="oval:com.mcafee.oval:var:2486352" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2486351" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="Deferupgradesduration_var" export-name="oval:com.mcafee.oval:var:2894905" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894904" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="Deferupdatesduration_var" export-name="oval:com.mcafee.oval:var:2894910" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894909" />
          </check>
          <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export value-id="PauseUpgradesandUpdates_var" export-name="oval:com.mcafee.oval:var:2894915" />
            <check-content-ref href="" name="oval:com.mcafee.oval:def:2894914" />
          </check>
        </complex-check>
      </Rule>
      <Rule id="WindowsUpdate_SetNoAuto-restartWithLoggedOnUsersForScheduledAutomaticUpdatesInstallations" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Update: Set No auto-restart with logged on users for scheduled automatic updates installations</title>
        <description xml:lang="en">This policy setting specifies that Automatic Updates will wait for computers to be restarted by the users who are logged on to them to complete a scheduled installation. If you enable the No auto-restart for scheduled Automatic Updates installations setting, Automatic Updates does not restart computers automatically during scheduled installations. Instead, Automatic Updates notifies users to restart their computers to complete the installations. You should note that Automatic Updates will not be able to detect future updates until restarts occur on the affected computers. If you disable or do not configure this setting, Automatic Updates will notify users that their computers will automatically restart in 5 minutes to complete the installations. The possible values for the No auto-restart for scheduled Automatic Updates installations setting are: - Enabled - Disabled - Not Configured Note: This setting applies only when you configure Automatic Updates to perform scheduled update installations. If you configure the Configure Automatic Updates setting to Disabled, this setting has no effect. The recommended state for this setting is: Disabled.</description>
        <rationale>
          Sometimes updates require updated computers to be restarted to complete an installation. If the computer cannot restart automatically, then the most recent update will not completely install and no new updates will download to the computer until it is restarted.
        </rationale>
        <ident system="http%3A%2F%2Fcce.mitre.org">CCE-33813-7</ident>
        <fixtext fixref="F-WindowsUpdate_SetNoAuto-restartWithLoggedOnUsersForScheduledAutomaticUpdatesInstallations_fix">
          To establish the recommended configuration via GP, set the following UI path to Disabled. Computer Configuration\Administrative Templates\Windows Components\Windows Update\No auto-restart with logged on users for scheduled automatic updates installations
        </fixtext>
        <fix id="F-WindowsUpdate_SetNoAuto-restartWithLoggedOnUsersForScheduledAutomaticUpdatesInstallations_fix"/>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NoAuto-restartWithLoggedOnUsersForScheduledAutomaticUpdatesInstallations_var" export-name="oval:com.mcafee.oval:var:512751" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:512735" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsUpdateAlwaysAutomaticallyRestartAtTheScheduledTime" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Update: Always automatically restart at the scheduled time</title>
        <description xml:lang="en">This policy setting determins whether a restart timer will always begin immediately after Windows Update installs important updates, instead of first notifying users on the login screen for at least two days.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AlwaysAutomaticallyRestartAtTheScheduledTime_var" export-name="oval:com.mcafee.oval:var:244605" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404033" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsUpdateDoNotConnectToAnyWindowsUpdateInternetLocations" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Update: Do not connect to any Windows Update Internet locations</title>
        <description xml:lang="en">This policy setting controls whether Windows Update will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Windows Store.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotConnectToAnyWUInternetLocations_var" export-name="oval:com.mcafee.oval:var:244606" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404034" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsUpdate_ConfigureAutomaticUpdates" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Update: Configure Automatic Updates</title>
        <description xml:lang="en">This policy setting determines whether this computer will receive security updates and other important downloads through the Windows automatic updating service.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ConfigureAutomaticUpdates_var" export-name="oval:com.mcafee.oval:var:59518" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6604" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsUpdate_DoNotDisplay_InstallUpdatesAndShutDown_OptionInTheShutDownWindowsDialogBox" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Update: Do not display 'Install Updates and Shut Down' option in the Shut Down Windows dialog box</title>
        <description xml:lang="en">This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows dialog box.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotDisplayInstallUpdatesAndShutDownOptionInTheShutDownWindowsDialogBox_var" export-name="oval:com.mcafee.oval:var:59516" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6602" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsUpdate_NoAuto-restartForScheduledAutomaticUpdatesInstallations" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Update: No auto-restart for scheduled Automatic Updates installations</title>
        <description xml:lang="en">This policy setting determines whether Automatic Updates will wait for the computer to be restarted by any user who is logged on, instead of causing the computer to restart automatically.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NoAuto-restartForScheduledAutomaticUpdatesInstallations_var" export-name="oval:com.mcafee.oval:var:59519" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6605" />
        </check>
      </Rule>
      <Rule id="WindowsComponents-WindowsUpdate_RescheduleAutomaticUpdatesScheduledInstallations" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Windows Update: Reschedule Automatic Updates scheduled installations</title>
        <description xml:lang="en">This policy setting determines the amount of time for Automatic Updates to wait, following system startup, before proceeding with a scheduled installation that was missed previously.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RescheduleAutomaticUpdatesScheduledInstallations_var" export-name="oval:com.mcafee.oval:var:59520" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6606" />
        </check>
      </Rule>
      <Rule id="WindowsUpdate_DoNotAdjustDefaultOptionTo_InstallUpdatesAndShutDown_InShutDownWindowsDialogBox" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Update: Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows Dialog Box</title>
        <description xml:lang="en">This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice in the Shut Down Windows dialog.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotAdjustDefaultOptionToInstallUpdatesAndShutDownInShutDownWindowsDialogBox_var" export-name="oval:com.mcafee.oval:var:59517" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6603" />
        </check>
      </Rule>
    </Group>
    <Group id="DeferWindowsUpdates" xml:lang="en">
      <title xml:lang="en">Defer Windows Updates</title>
      <Value id="DeferQualityUpdatesInstallation_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="SelectWhenQualityUpdatesAreReceived_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Enabled</value>
      </Value>
      <Value id="FeaturesUpdates_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">32</value>
      </Value>
      <Value id="DeferFeatureUpdatesPeriodInDays_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">180</value>
      </Value>
      <Rule id="DeferUpdatesSelectWhenQualityUpdatesAreReceived" xml:lang="en" selected="false">
        <title xml:lang="en">Defer Updates: Select when Quality Updates are received</title>
        <description xml:lang="en">This settings controls when Quality Updates are received.</description>
        <rationale xml:lang="en">Quality Updates can contain important bug fixes and/or security patches, and should be
          installed as soon as possible</rationale>
        <ident system="CIS_Critical_Security_Controls">CSC ID 4.5</ident>
        <fixtext fixref="F-DeferUpdatesSelectWhenQualityUpdatesAreReceived_fix">To establish the recommended configuration via GP, set the following UI path to Enabled:
          Current Branch for Business, 180 days:
          Computer Configuration\Policies\Administrative Templates\Windows
          Components\Windows Update\Defer Windows Updates\Select when Feature Updates
          are received
        </fixtext>
        <fix id="F-DeferUpdatesSelectWhenQualityUpdatesAreReceived_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SelectWhenQualityUpdatesAreReceived_var" export-name="oval:com.mcafee.oval:var:2899382" />
          <check-export value-id="DeferQualityUpdatesInstallation_var" export-name="oval:com.mcafee.oval:var:2899392" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899373" />
        </check>
      </Rule>
      <Rule id="DeferWindowsUpdatesSelectWhenFeatureUpdatesAreReceived" xml:lang="en" selected="false">
        <title xml:lang="en">Defer Windows Updates: Select when Feature Updates are received</title>
        <description xml:lang="en">This policy setting determines what type of feature updates to receive, and when.</description>
        <rationale xml:lang="en">Forcing new features without prior testing in your environment could cause software
          incompatibilities as well as introducing new bugs into the operating system. </rationale>
        <ident system="CIS_Critical_Security_Controls">CSC ID 3</ident>
        <fixtext fixref="F-DeferWindowsUpdatesSelectWhenFeatureUpdatesAreReceived_fix">To establish the recommended configuration via GP, set the following UI path to Enabled:
          Current Branch for Business, 180 days: Computer Configuration\Policies\Administrative Templates\Windows
          Components\Windows Update\Defer Windows Updates\Select when Feature Updates
          are received
        </fixtext>
        <fix id="F-DeferWindowsUpdatesSelectWhenFeatureUpdatesAreReceived_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FeaturesUpdates_var" export-name="oval:com.mcafee.oval:var:2899432" />
          <check-export value-id="DeferFeatureUpdatesPeriodInDays_var" export-name="oval:com.mcafee.oval:var:2899372" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899359" />
        </check>
      </Rule>
    </Group>
    <Group id="Workgroup" xml:lang="en">
      <title xml:lang="en">Workgroup</title>
      <Value id="AutomaticallyWorkplaceJoinClientComputers_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Not Configured</value>
        <value selector="AutomaticallyWorkplaceJoinClientComputers_var-selector-0">Not Configured</value>
        <value selector="AutomaticallyWorkplaceJoinClientComputers_var-selector-1">Not Configured</value>
        <value selector="AutomaticallyWorkplaceJoinClientComputers_var-selector-2">Not Configured</value>
      </Value>
      <Rule id="WindowsComponents-WorkplaceJoinAutomaticallyWorkplaceJoinClientComputers" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Components - Workplace Join: Automatically workplace join client computers</title>
        <description xml:lang="en">This setting lets you configure how domain joined client computers become workplace joined with domain users at your organization.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AutomaticallyWorkplaceJoinClientComputers_var" export-name="oval:com.mcafee.oval:var:244608" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:404036" />
        </check>
      </Rule>
    </Group>
    <Group id="CloudContent_1" xml:lang="en">
      <title xml:lang="en">Cloud Content</title>
      <Value id="WindowsSpotlightOnLockScreen_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">2</value>
      </Value>
      <Value id="DoNotSuggestThird-partyContentInWindowsSpotlight_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="TurnOffAllWindowsSpotlightFeatures_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Rule id="CloudContentConfigureWindowsSpotlightOnLockScreen" xml:lang="en" selected="false">
        <title xml:lang="en">Cloud Content: Configure Windows spotlight on Lock Screen</title>
        <description xml:lang="en">This policy setting lets you configure Windows Spotlight on the lock screen.</description>
        <rationale xml:lang="en">Enabling this setting will help ensure your data is not shared with any third party. The
          Windows Spotlight feature will collect data and display suggested apps as well as images
          from the internet.
        </rationale>
        <fixtext fixref="F-CloudContentConfigureWindowsSpotlightOnLockScreen_fix">To establish the recommended configuration via GP, set the following UI path to Disabled:
          User Configuration\Policies\Administrative Templates\Windows Components\Cloud
          Content\Configure Windows spotlight on Lock Screen</fixtext>
        <fix id="F-CloudContentConfigureWindowsSpotlightOnLockScreen_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsSpotlightOnLockScreen_var" export-name="oval:com.mcafee.oval:var:2899400" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899393" />
        </check>
      </Rule>
      <Rule id="CloudContentDoNotSuggestThird-partyContentInWindowsSpotlight" xml:lang="en" selected="false">
        <title xml:lang="en">Cloud Content: Do not suggest third-party content in Windows spotlight</title>
        <description xml:lang="en">This policy setting determines whether Windows will suggest apps and content from thirdparty software publishers.</description>
        <rationale xml:lang="en">Enabling this setting will help ensure your data is not shared with any third party. The
          Windows Spotlight feature will collect data and display suggested apps as well as images
          from the internet.
        </rationale>
        <fixtext fixref="F-CloudContentDoNotSuggestThird-partyContentInWindowsSpotlight_fix">To establish the recommended configuration via GP, set the following UI path to Enabled:
          User Configuration\Policies\Administrative Templates\Windows Components\Cloud
          Content\Do not suggest third-party content in Windows spotlight
        </fixtext>
        <fix id="F-CloudContentDoNotSuggestThird-partyContentInWindowsSpotlight_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoNotSuggestThird-partyContentInWindowsSpotlight_var" export-name="oval:com.mcafee.oval:var:2899409" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899401" />
        </check>
      </Rule>
      <Rule id="CloudContentTurnOffAllWindowsSpotlightFeatures" xml:lang="en" selected="false">
        <title xml:lang="en">Cloud Content: Turn off all Windows spotlight features</title>
        <description xml:lang="en">This policy setting lets you turn off all Windows Spotlight features at once.</description>
        <rationale xml:lang="en">Enabling this setting will help ensure your data is not shared with any third party. The
          Windows Spotlight feature will collect data and display suggested apps as well as images
          from the Internet.
        </rationale>
        <fixtext fixref="F-CloudContentTurnOffAllWindowsSpotlightFeatures_fix">To establish the recommended configuration via GP, set the following UI path to Enabled:
          User Configuration\Policies\Administrative Templates\Windows Components\Cloud
          Content\Turn off all Windows spotlight features
        </fixtext>
        <fix id="F-CloudContentTurnOffAllWindowsSpotlightFeatures_fix" />
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TurnOffAllWindowsSpotlightFeatures_var" export-name="oval:com.mcafee.oval:var:2899418" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2899411" />
        </check>
      </Rule>
    </Group>
  </Group>
  
  <Group id="WindowsServices" xml:lang="en">
    <title xml:lang="en">Windows Services</title>
    <Value id="AlerterService_Alerter_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="ClipBookService_ClipSrv_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="FaxService_Fax_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">3</value>
      <value selector="FaxService_Fax_StartupType_var-selector">4</value>
      <value selector="FaxService_Fax_StartupType_var-selector-3">4</value>
      <value selector="FaxService_Fax_StartupType_var-selector-6">4</value>
    </Value>
    <Value id="MessengerService_Messenger_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="NetMeetingRemoteDesktopSharingService_mnmsrvc_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="TelnetService_TlntSvr_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="ComputerBrowserService_Browser_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="FTPPublishingService_MSFTPSVC_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="IISAdminService_IISADMIN_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="InternetConnectionSharing_ICS_Service_SharedAccess_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RemoteRegistryService_RemoteRegistry_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RoutingAndRemoteAccessService_RemoteAccess_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="SimpleMailTransferProtocol_SMTP_Service_SMTPSVC_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="SNMPService_SNMP_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="SNMPTrapService_SNMPTRAP_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="WorldWideWebPublishingService_W3SVC_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="AutomaticUpdatesService_wuauserv_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="BackgroundIntelligentTransferService_BITS_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="IndexingService_CISVC_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="NetLogonService_Netlogon_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RemoteDesktopHelpSessionManagerService_RDSessMgr_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="TaskSchedulerService_Schedule_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="TerminalServicesService_TermService_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="UniversalPlugAndPlayDeviceHostService_upnphost_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="ClientServiceForNetWareService_NWCWorkstation_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="FileReplicationService_NtFrs_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="FileServerForMacintoshService_MacFile_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="HelpAndSupportService_helpsvc_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="HTTPSSLService_HTTPFilter_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="LicenseLoggingService_LicenseService_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="MicrosoftPOP3Service_Pop3Svc_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="NetworkConnectionsService_Netman_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">3</value>
    </Value>
    <Value id="NetworkNewsTransferProtocol_NNTP_Service_NntpSvc_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="PrintServerForMacintoshService_MacPrint_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="PrintSpoolerService_Spooler_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RemoteAccessAutoConnectionManagerService_RasAuto_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RemoteAccessConnectionManagerService_RasMan_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RemoteAdministrationService_srvcsurg_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RemoteProcedureCall_RPC_LocatorService_RpcLocator_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RemoteServerManagerService_appmgr_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="TelephonyService_TapiSrv_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="TrivialFTPDaemonService_TFTPD_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="VolumeShadowCopyService_VSS_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">2</value>
    </Value>
    <Value id="WirelessZeroConfigurationService_WZCSVC_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="BINLSVCWDSServerStartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RemoteStorageNotificationService_Remote_Storage_User_Link_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="RemoteStorageServerService_Remote_Storage_Server_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="DEPConfigurationSetting_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">OptIn</value>
    </Value>
    <Value id="WindowsMediaServicesService_WMServer_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="WLANAutoConfigService_Wlansvc_StartupType_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Rule id="Service_AlerterService_Alerter_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Alerter Service (Alerter) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Alerter Service (Alerter) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AlerterService_Alerter_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7771" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:209" />
        </check>
      </Rule>
      <Rule id="Service_ClipBookService_ClipSrv_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: ClipBook Service (ClipSrv) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the ClipBook Service (ClipSrv) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ClipBookService_ClipSrv_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7773" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:210" />
        </check>
      </Rule>
      <Rule id="Service_FaxService_Fax_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Fax Service (Fax) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Fax Service (Fax) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FaxService_Fax_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7777" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:212" />
        </check>
      </Rule>
      <Rule id="Service_MessengerService_Messenger_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Messenger Service (Messenger) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Messenger Service (Messenger) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MessengerService_Messenger_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7780" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:216" />
        </check>
      </Rule>
      <Rule id="Service_NetMeetingRemoteDesktopSharingService_Mnmsrvc_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: NetMeeting Remote Desktop Sharing Service (mnmsrvc) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the NetMeeting Remote Desktop Sharing Service (mnmsrvc) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NetMeetingRemoteDesktopSharingService_mnmsrvc_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7781" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:217" />
        </check>
      </Rule>
      <Rule id="Service_TelnetService_TlntSvr_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Telnet Service (TlntSvr) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Telnet Service (TlntSvr) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TelnetService_TlntSvr_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7789" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:225" />
        </check>
      </Rule>
      <Rule id="Service_ComputerBrowserService_Browser_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Computer Browser Service (Browser) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Computer Browser Service (Browser) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ComputerBrowserService_Browser_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7774" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:211" />
        </check>
      </Rule>
      <Rule id="Service_FTPPublishingService_MSFTPSVC_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: FTP Publishing Service (MSFTPSVC) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the FTP Publishing Service (MSFTPSVC) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FTPPublishingService_MSFTPSVC_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7778" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:213" />
        </check>
      </Rule>
      <Rule id="Service_IISAdminService_IISADMIN_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: IIS Admin Service (IISADMIN) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the IIS Admin Service (IISADMIN) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IISAdminService_IISADMIN_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:613721" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6137" />
        </check>
      </Rule>
      <Rule id="Service_InternetConnectionSharing_ICS_Service_SharedAccess_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Internet Connection Sharing (ICS) Service (SharedAccess) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Internet Connection Sharing (ICS) Service (SharedAccess) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="InternetConnectionSharing_ICS_Service_SharedAccess_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54575" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54375" />
        </check>
      </Rule>
      <Rule id="Service_RemoteRegistryService_RemoteRegistry_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Registry Service (RemoteRegistry) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Registry Service (RemoteRegistry) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemoteRegistryService_RemoteRegistry_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54584" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54384" />
        </check>
      </Rule>
      <Rule id="Service_RoutingAndRemoteAccessService_RemoteAccess_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Routing and Remote Access Service (RemoteAccess) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Routing and Remote Access Service (RemoteAccess) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RoutingAndRemoteAccessService_RemoteAccess_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7785" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:219" />
        </check>
      </Rule>
      <Rule id="Service_SimpleMailTransferProtocol_SMTP_Service_SMTPSVC_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Simple Mail Transfer Protocol (SMTP) Service (SMTPSVC) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Simple Mail Transfer Protocol (SMTP) Service (SMTPSVC) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SimpleMailTransferProtocol_SMTP_Service_SMTPSVC_StartupType_var" export-name="oval:com.mcafee.oval:var:59114" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56817" />
        </check>
      </Rule>
      <Rule id="Service_SNMPService_SNMP_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: SNMP Service (SNMP) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the SNMP Service (SNMP) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SNMPService_SNMP_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:614221" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6142" />
        </check>
      </Rule>
      <Rule id="Service_SNMPTrapService_SNMPTRAP_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: SNMP Trap Service (SNMPTRAP) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the SNMP Trap Service (SNMPTRAP) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="SNMPTrapService_SNMPTRAP_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:614321" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6143" />
        </check>
      </Rule>
      <Rule id="Service_WorldWideWebPublishingService_W3SVC_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: World Wide Web Publishing Service (W3SVC) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the World Wide Web Publishing Service (W3SVC) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WorldWideWebPublishingService_W3SVC_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7795" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:228" />
        </check>
      </Rule>
      <Rule id="Service_AutomaticUpdatesService_Wuauserv_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Automatic Updates Service (wuauserv) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Automatic Updates Service (wuauserv) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="AutomaticUpdatesService_wuauserv_StartupType_var" export-name="oval:com.mcafee.oval:var:56432" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56570" />
        </check>
      </Rule>
      <Rule id="Service_BackgroundIntelligentTransferService_BITS_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Background Intelligent Transfer Service (BITS) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Background Intelligent Transfer Service (BITS) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="BackgroundIntelligentTransferService_BITS_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:613221" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:6132" />
        </check>
      </Rule>
      <Rule id="Service_IndexingService_CISVC_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Indexing Service (CISVC) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Indexing Service (CISVC) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="IndexingService_CISVC_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7779" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:215" />
        </check>
      </Rule>
      <Rule id="Service_NetLogonService_Netlogon_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Net Logon Service (Netlogon) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Net Logon Service (Netlogon) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NetLogonService_Netlogon_StartupType_var" export-name="oval:com.mcafee.oval:var:56404" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56542" />
        </check>
      </Rule>
      <Rule id="Service_RemoteDesktopHelpSessionManagerService_RDSessMgr_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Desktop Help Session Manager Service (RDSessMgr) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Desktop Help Session Manager Service (RDSessMgr) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemoteDesktopHelpSessionManagerService_RDSessMgr_StartupType_var" export-name="oval:com.mcafee.oval:var:56749" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56582" />
        </check>
      </Rule>
      <Rule id="Service_TaskSchedulerService_Schedule_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Task Scheduler Service (Schedule) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Task Scheduler Service (Schedule) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TaskSchedulerService_Schedule_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7787" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:224" />
        </check>
      </Rule>
      <Rule id="Service_TerminalServicesService_TermService_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Terminal Services Service (TermService) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Terminal Services Service (TermService) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TerminalServicesService_TermService_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:22611" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:226" />
        </check>
      </Rule>
      <Rule id="Service_UniversalPlugAndPlayDeviceHostService_Upnphost_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Universal Plug and Play Device Host Service (upnphost) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Universal Plug and Play Device Host Service (upnphost) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="UniversalPlugAndPlayDeviceHostService_upnphost_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7791" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:227" />
        </check>
      </Rule>
      <Rule id="Service_ClientServiceForNetWareService_NWCWorkstation_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Client Service for NetWare Service (NWCWorkstation) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Client Service for NetWare Service (NWCWorkstation) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ClientServiceForNetWareService_NWCWorkstation_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54591" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54391" />
        </check>
      </Rule>
      <Rule id="Service_FileReplicationService_NtFrs_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: File Replication Service (NtFrs) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the File Replication Service (NtFrs) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FileReplicationService_NtFrs_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54573" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54373" />
        </check>
      </Rule>
      <Rule id="Service_FileServerForMacintoshService_MacFile_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: File Server for Macintosh Service (MacFile) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the File Server for Macintosh Service (MacFile) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="FileServerForMacintoshService_MacFile_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54574" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54374" />
        </check>
      </Rule>
      <Rule id="Service_HelpAndSupportService_Helpsvc_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Help and Support Service (helpsvc) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Help and Support Service (helpsvc) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="HelpAndSupportService_helpsvc_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54571" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54371" />
        </check>
      </Rule>
      <Rule id="Service_HTTPSSLService_HTTPFilter_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: HTTP SSL Service (HTTPFilter) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the HTTP SSL Service (HTTPFilter) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="HTTPSSLService_HTTPFilter_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54572" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54372" />
        </check>
      </Rule>
      <Rule id="Service_LicenseLoggingService_LicenseService_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: License Logging Service (LicenseService) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the License Logging Service (LicenseService) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="LicenseLoggingService_LicenseService_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54576" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54376" />
        </check>
      </Rule>
      <Rule id="Service_MicrosoftPOP3Service_Pop3Svc_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Microsoft POP3 Service (Pop3Svc) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Microsoft POP3 Service (Pop3Svc) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="MicrosoftPOP3Service_Pop3Svc_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54577" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54377" />
        </check>
      </Rule>
      <Rule id="Service_NetworkConnectionsService_Netman_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Network Connections Service (Netman) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Network Connections Service (Netman) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NetworkConnectionsService_Netman_StartupType_var" export-name="oval:com.mcafee.oval:var:56406" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56544" />
        </check>
      </Rule>
      <Rule id="Service_NetworkNewsTransferProtocol_NNTP_Service_NntpSvc_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Network News Transfer Protocol (NNTP) Service (NntpSvc) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Network News Transfer Protocol (NNTP) Service (NntpSvc) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="NetworkNewsTransferProtocol_NNTP_Service_NntpSvc_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54578" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54378" />
        </check>
      </Rule>
      <Rule id="Service_PrintServerForMacintoshService_MacPrint_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Print Server for Macintosh Service (MacPrint) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Print Server for Macintosh Service (MacPrint) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PrintServerForMacintoshService_MacPrint_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54579" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54379" />
        </check>
      </Rule>
      <Rule id="Service_PrintSpoolerService_Spooler_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Print Spooler Service (Spooler) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Print Spooler Service (Spooler) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="PrintSpoolerService_Spooler_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54580" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54380" />
        </check>
      </Rule>
      <Rule id="Service_RemoteAccessAutoConnectionManagerService_RasAuto_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Access Auto Connection Manager Service (RasAuto) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Access Auto Connection Manager Service (RasAuto) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemoteAccessAutoConnectionManagerService_RasAuto_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54581" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54381" />
        </check>
      </Rule>
      <Rule id="Service_RemoteAccessConnectionManagerService_RasMan_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Access Connection Manager Service (RasMan) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Access Connection Manager Service (RasMan) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemoteAccessConnectionManagerService_RasMan_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:7784" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:247" />
        </check>
      </Rule>
      <Rule id="Service_RemoteAdministrationService_Srvcsurg_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Administration Service (srvcsurg) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Administration Service (srvcsurg) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemoteAdministrationService_srvcsurg_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54582" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54382" />
        </check>
      </Rule>
      <Rule id="Service_RemoteProcedureCall_RPC_LocatorService_RpcLocator_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Procedure Call (RPC) Locator Service (RpcLocator) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Procedure Call (RPC) Locator Service (RpcLocator) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemoteProcedureCall_RPC_LocatorService_RpcLocator_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54583" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54383" />
        </check>
      </Rule>
      <Rule id="Service_RemoteServerManagerService_Appmgr_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Server Manager Service (appmgr) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Server Manager Service (appmgr) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemoteServerManagerService_appmgr_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54585" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54385" />
        </check>
      </Rule>
      <Rule id="Service_TelephonyService_TapiSrv_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Telephony Service (TapiSrv) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Telephony Service (TapiSrv) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TelephonyService_TapiSrv_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54588" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54388" />
        </check>
      </Rule>
      <Rule id="Service_TrivialFTPDaemonService_TFTPD_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Trivial FTP Daemon Service (TFTPD) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Trivial FTP Daemon Service (TFTPD) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="TrivialFTPDaemonService_TFTPD_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54589" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54389" />
        </check>
      </Rule>
      <Rule id="Service_VolumeShadowCopyService_VSS_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Volume Shadow Copy Service (VSS) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Volume Shadow Copy Service (VSS) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="VolumeShadowCopyService_VSS_StartupType_var" export-name="oval:com.mcafee.oval:var:56759" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:56794" />
        </check>
      </Rule>
      <Rule id="Service_WirelessZeroConfigurationService_WZCSVC_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Wireless Zero Configuration Service (WZCSVC) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Wireless Zero Configuration Service (WZCSVC) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WirelessZeroConfigurationService_WZCSVC_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:28812" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:2881" />
        </check>
      </Rule>
      <Rule id="Service_RemoteInstallation_WindowsDeploymentService_BINLSVC_WDSServer_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Installation/Windows Deployment Service (BINLSVC/WDSServer) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Installation/Windows Deployment Service (BINLSVC/WDSServer) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="BINLSVCWDSServerStartupType_var" export-name="oval:com.mcafee.oval:var:79424" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:79027" />
        </check>
      </Rule>
      <Rule id="Service_RemoteStorageNotificationService_Remote_Storage_User_Link_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Storage Notification Service (Remote_Storage_User_Link) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Storage Notification Service (Remote_Storage_User_Link) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemoteStorageNotificationService_Remote_Storage_User_Link_StartupType_var" export-name="oval:com.mcafee.oval.windows:var:54586" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:54386" />
        </check>
      </Rule>
      <Rule id="Service_RemoteStorageServerService_Remote_Storage_Server_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Remote Storage Server Service (Remote_Storage_Server) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Remote Storage Server Service (Remote_Storage_Server) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="RemoteStorageServerService_Remote_Storage_Server_StartupType_var" export-name="oval:com.mcafee.oval:var:79425" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:79028" />
        </check>
      </Rule>
      <Rule id="Service_DataExecutionPrevention" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Data Execution Prevention</title>
        <description xml:lang="en">This check verifies the security level of Data Execution Prevention (DEP) on your system.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DEPConfigurationSetting_var" export-name="oval:com.mcafee.oval:var:79422" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:79026" />
        </check>
      </Rule>
      <Rule id="Service_WindowsMediaServicesService_WMServer_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: Windows Media Services Service (WMServer) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the Windows Media Services Service (WMServer) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WindowsMediaServicesService_WMServer_StartupType_var" export-name="oval:com.mcafee.oval:var:79426" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:79029" />
        </check>
      </Rule>
      <Rule id="Service_WLANAutoConfigService_Wlansvc_StartupType" xml:lang="en" selected="false">
        <title xml:lang="en">Service: WLAN AutoConfig Service (Wlansvc) Startup Type</title>
        <description xml:lang="en">This check evaluates the Startup Type for the WLAN AutoConfig Service (Wlansvc) and compares it to the value defined in the benchmark.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WLANAutoConfigService_Wlansvc_StartupType_var" export-name="oval:com.mcafee.oval.vista:var:6148211" />
          <check-content-ref href="" name="oval:com.mcafee.oval.vista:def:61481" />
        </check>
      </Rule>
  </Group>
  <Group id="File_FolderPermissions" xml:lang="en">
    <title xml:lang="en">File &amp; Folder Permissions</title>
      <Value id="DoYouExpectAt.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectNtbackup.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRcp.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRegedit.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRegedt32.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRexec.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRsh.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectArp.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectAttrib.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectCacls.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectDebug.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectDrwatson.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectDrwtsn32.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectEdlin.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToEdlin.exe_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectEdlin.exeToExistOnTheMachine_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectEventcreate.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectEventtriggers.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectFtp.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToFtp.exe_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectFtp.exeToExistOnTheMachine_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectNbtstat.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectNet.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToNet.exe_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectNet.exeToExistOnTheMachine_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectNet1.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToNet1.exe_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectNet1.exeToExistOnTheMachine_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectNetsh.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectNetstat.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectNslookup.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectReg.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRegini.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRegsvr32.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRoute.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRunas.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToRunas.exe_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectRunas.exeToExistOnTheMachine_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectSc.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectSecedit.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectSubst.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectSysteminfo.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTelnet.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTelnet.exeToExistOnTheMachine_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToTelnet.exe_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTftp.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToTftp.exe_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTftp.exeToExistOnTheMachine_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTlntsvr.exeToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToSystemdrive_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheSystemdriveFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheSystemdriveFolderToExistOnTheMachine_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToSystemdrive_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheAutoexec.batFileToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheBoot.iniFileToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheConfig.sysFileToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheNtdetect.comFileToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheNtldrFileToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheIo.sysFileToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheMsdos.sysFileToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheNtbootdd.sysFileToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheDocumentsAndSettingsFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToDocumentsAndSettings_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheAllUsersFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToAllUsers_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToDefaultUser_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheDefaultUserFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheAdministratorFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToTemp_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheTempFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToTemp_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheTempFolderToExistOnTheMachine_var0" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToProgramFiles_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheProgramFilesFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToSYSTEMROOT_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheSYSTEMROOTFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheDebugFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToDebug_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheSystem32FolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToSystem32_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToAppmgmt_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheAppmgmtFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheDTCLogFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToDTCLog_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToSetup_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheSetupFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheResourceKitFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheResourceProKitFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheNtServicePackUninstallFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheCSCFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheSecurityFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheConfigFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheDllcacheFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheAuthenticatedUsersGroupToHaveAccessToGroupPolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheGroupPolicyFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheIasFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheNTMSDataFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheRegistrationFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToRegistration_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheSpoolprintersFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheUsersGroupToHaveAccessToSpoolprinters_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectThePowerUsersGroupToHaveAccessToReinstallBackups_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheReinstallBackupsFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Value id="DoYouExpectTheRepairFolderToExistOnTheMachine_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">Yes</value>
      </Value>
      <Rule id="WindowsFilePermissions__Systemroot__system32_at.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\at.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectAt.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:79499" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101115" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_ntbackup.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\ntbackup.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectNtbackup.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98905" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101130" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_rcp.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\rcp.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRcp.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98906" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101131" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__regedit.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\regedit.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRegedit.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98908" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101133" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_regedt32.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\regedt32.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRegedt32.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98909" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101134" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_rexec.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\rexec.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRexec.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98912" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101137" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_rsh.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\rsh.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRsh.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98914" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101139" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_secedit.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\secedit.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectSecedit.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98916" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101141" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_attrib.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\attrib.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectAttrib.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:79500" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101116" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_cacls.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\cacls.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectCacls.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:79501" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101117" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_debug.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\debug.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectDebug.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:79502" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101118" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_drwatson.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\drwatson.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectDrwatson.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98926" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101151" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_drwtsn32.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\drwtsn32.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectDrwtsn32.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98927" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101152" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_edlin.exe-Administrators_SYSTEM_INTERACTIVE" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\edlin.exe - Administrators, SYSTEM, INTERACTIVE</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectEdlin.exeToExistOnTheMachine_var0" export-name="oval:com.mcafee.oval:var:98894" />
          <check-export value-id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToEdlin.exe_var" export-name="oval:com.mcafee.oval:var:98936" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101157" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_edlin.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\edlin.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectEdlin.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98894" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101119" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_eventcreate.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\eventcreate.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectEventcreate.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98895" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101120" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_eventtriggers.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\eventtriggers.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectEventtriggers.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98896" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101121" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_ftp.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\ftp.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectFtp.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98898" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101123" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_ftp.exe-Administrators_SYSTEM_INTERACTIVE" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\ftp.exe - Administrators, SYSTEM, INTERACTIVE</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectFtp.exeToExistOnTheMachine_var0" export-name="oval:com.mcafee.oval:var:98898" />
          <check-export value-id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToFtp.exe_var" export-name="oval:com.mcafee.oval:var:98937" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101158" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_nbtstat.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\nbtstat.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectNbtstat.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98899" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101124" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_net.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\net.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectNet.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98900" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101125" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_net.exe-Administrators_SYSTEM_INTERACTIVE" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\net.exe - Administrators, SYSTEM, INTERACTIVE</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectNet.exeToExistOnTheMachine_var0" export-name="oval:com.mcafee.oval:var:98900" />
          <check-export value-id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToNet.exe_var" export-name="oval:com.mcafee.oval:var:98938" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101159" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_net1.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\net1.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectNet1.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98901" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101126" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_net1.exe-Administrators_SYSTEM_INTERACTIVE" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\net1.exe - Administrators, SYSTEM, INTERACTIVE</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectNet1.exeToExistOnTheMachine_var0" export-name="oval:com.mcafee.oval:var:98901" />
          <check-export value-id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToNet1.exe_var" export-name="oval:com.mcafee.oval:var:98939" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101160" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_netsh.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\netsh.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectNetsh.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98902" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101127" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_arp.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\arp.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectArp.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:79498" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101114" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_netstat.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\netstat.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectNetstat.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98903" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101128" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_nslookup.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\nslookup.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectNslookup.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98904" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101129" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_reg.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\reg.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectReg.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98907" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101132" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_regini.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\regini.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRegini.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98910" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101135" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_regsvr32.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\regsvr32.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRegsvr32.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98911" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101136" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_route.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\route.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRoute.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98913" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101138" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_runas.exe-Administrators_SYSTEM_INTERACTIVE" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\runas.exe - Administrators, SYSTEM, INTERACTIVE</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRunas.exeToExistOnTheMachine_var0" export-name="oval:com.mcafee.oval:var:79497" />
          <check-export value-id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToRunas.exe_var" export-name="oval:com.mcafee.oval:var:98940" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101161" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_sc.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\sc.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectSc.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98915" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101140" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_subst.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\subst.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectSubst.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98917" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101142" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_systeminfo.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\systeminfo.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectSysteminfo.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98918" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101143" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_telnet.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\telnet.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTelnet.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98919" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101144" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_telnet.exe-Administrators_SYSTEM_INTERACTIVE" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\telnet.exe - Administrators, SYSTEM, INTERACTIVE</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTelnet.exeToExistOnTheMachine_var0" export-name="oval:com.mcafee.oval:var:98919" />
          <check-export value-id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToTelnet.exe_var" export-name="oval:com.mcafee.oval:var:98941" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101162" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_tftp.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\tftp.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTftp.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98920" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101145" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_tftp.exe-Administrators_SYSTEM_INTERACTIVE" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\tftp.exe - Administrators, SYSTEM, INTERACTIVE</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTftp.exeToExistOnTheMachine_var0" export-name="oval:com.mcafee.oval:var:98920" />
          <check-export value-id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToTftp.exe_var" export-name="oval:com.mcafee.oval:var:98942" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101163" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_tlntsvr.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\tlntsvr.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTlntsvr.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98921" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101146" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemroot__system32_runas.exe-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemroot%\system32\runas.exe - Administrators, SYSTEM</title>
        <description xml:lang="en">Make sure that only approved users have permissions to the specified file or folder.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectRunas.exeToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:79497" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:101113" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemdrive_-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemdrive% - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemdrive%\
            The following accounts should have the specified permissions:
            Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
            Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
            Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
            No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheSystemdriveFolderToExistOnTheMachine_var0" export-name="oval:com.mcafee.oval:var:214343" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToSystemdrive_var" export-name="oval:com.mcafee.oval:var:214345" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213974" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemdrive_-Administrators_SYSTEM_INTERACTIVE" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemdrive% - Administrators, SYSTEM, INTERACTIVE</title>
        <description xml:lang="en">For folder: %systemdrive%\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-4; Name = INTERACTIVE; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheSystemdriveFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214343" />
          <check-export value-id="DoYouExpectTheINTERACTIVEGroupToHaveAccessToSystemdrive_var" export-name="oval:com.mcafee.oval:var:214425" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213975" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemdrive__autoexec.bat-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemdrive%\autoexec.bat - Administrators, SYSTEM</title>
        <description xml:lang="en">For file: %systemdrive%\autoexec.bat
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheAutoexec.batFileToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214362" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213976" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemdrive__boot.ini-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemdrive%\boot.ini - Administrators, SYSTEM</title>
        <description xml:lang="en">For file: %systemdrive%\boot.ini
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheBoot.iniFileToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214357" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213977" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemdrive__config.sys-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemdrive%\config.sys - Administrators, SYSTEM</title>
        <description xml:lang="en">For file: %systemdrive%\config.sys
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheConfig.sysFileToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214366" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213978" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemdrive__ntdetect.com-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemdrive%\ntdetect.com - Administrators, SYSTEM</title>
        <description xml:lang="en">For file: %systemdrive%\ntdetect.com
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheNtdetect.comFileToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214358" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213979" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemdrive__ntldr-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemdrive%\ntldr - Administrators, SYSTEM</title>
        <description xml:lang="en">For file: %systemdrive%\ntldr
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheNtldrFileToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214359" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213980" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemdrive__io.sys-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemdrive%\io.sys - Administrators, SYSTEM</title>
        <description xml:lang="en">For file: %systemdrive%\io.sys
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheIo.sysFileToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214379" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213981" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemdrive__msdos.sys-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemdrive%\msdos.sys - Administrators, SYSTEM</title>
        <description xml:lang="en">For file: %systemdrive%\msdos.sys
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheMsdos.sysFileToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214380" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213982" />
        </check>
      </Rule>
      <Rule id="WindowsFilePermissions__Systemdrive__ntbootdd.sys-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows File Permissions: %systemdrive%\ntbootdd.sys - Administrators, SYSTEM</title>
        <description xml:lang="en">For file: %systemdrive%\ntbootdd.sys
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheNtbootdd.sysFileToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214381" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213983" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemdrive__DocumentsAndSettings-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemdrive%\Documents and Settings - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemdrive%\Documents and Settings\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheDocumentsAndSettingsFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214383" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToDocumentsAndSettings_var" export-name="oval:com.mcafee.oval:var:214384" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213984" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemdrive__DocumentsAndSettings_AllUsers-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemdrive%\Documents and Settings\All Users - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemdrive%\Documents and Settings\All Users\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheAllUsersFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214386" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToAllUsers_var" export-name="oval:com.mcafee.oval:var:214387" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213985" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemdrive__DocumentsAndSettings_DefaultUser-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemdrive%\Documents and Settings\Default User - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemdrive%\Documents and Settings\Default User\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheDefaultUserFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214389" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToDefaultUser_var" export-name="oval:com.mcafee.oval:var:214390" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213986" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemdrive__DocumentsAndSettings_Administrator-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemdrive%\Documents and Settings\Administrator - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %systemdrive%\Documents and Settings\Administrator\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheAdministratorFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214392" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213987" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemdrive__Temp-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemdrive%\Temp - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemdrive%\temp\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Traverse Folders/Execute Files, Create Files/Write Data, Create Folders/Append Data
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheTempFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214394" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToTemp_var" export-name="oval:com.mcafee.oval:var:214395" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213988" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__Temp-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\Temp - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemroot%\temp\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Traverse Folders/Execute Files, Create Files/Write Data, Create Folders/Append Data
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheTempFolderToExistOnTheMachine_var0" export-name="oval:com.mcafee.oval:var:214397" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToTemp_var0" export-name="oval:com.mcafee.oval:var:214398" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213989" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Programfiles_-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %programfiles% - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %programfiles%\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Traverse Folders/Execute Files, Create Files/Write Data, Create Folders/Append Data
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheProgramFilesFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214400" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToProgramFiles_var" export-name="oval:com.mcafee.oval:var:214401" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213990" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot_-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot% - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemroot%\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheSYSTEMROOTFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98928" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToSYSTEMROOT_var" export-name="oval:com.mcafee.oval:var:98930" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213991" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__Debug-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\Debug - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemroot%\debug\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheDebugFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214405" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToDebug_var" export-name="oval:com.mcafee.oval:var:214406" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213992" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32 - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemroot%\system32\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheSystem32FolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98975" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToSystem32_var" export-name="oval:com.mcafee.oval:var:98977" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213993" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_Appmgmt-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\Appmgmt - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemroot%\system32\appmgmt\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheAppmgmtFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214408" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToAppmgmt_var" export-name="oval:com.mcafee.oval:var:214409" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213994" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_DTCLog-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\DTCLog - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemroot%\system32\DTCLog\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheDTCLogFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214411" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToDTCLog_var" export-name="oval:com.mcafee.oval:var:214412" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213995" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_Setup-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\Setup - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemroot%\system32\setup\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheSetupFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214414" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToSetup_var" export-name="oval:com.mcafee.oval:var:214415" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213996" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Programfiles__ResourceKit-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %programfiles%\Resource Kit - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %programfiles%\Resource Kit\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheResourceKitFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214417" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213997" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Programfiles__ResourceProKit-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %programfiles%\Resource Pro Kit - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %programfiles%\Resource Pro Kit\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheResourceProKitFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214419" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213998" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot___NtServicePackUninstall_-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\$NtServicePackUninstall$ - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %systemroot%\$NtServicePackUninstall$\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheNtServicePackUninstallFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214421" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:213999" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__CSC-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\CSC - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %systemroot%\CSC\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheCSCFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214423" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214000" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__Security-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\Security - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %systemroot%\security\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheSecurityFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214354" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214001" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_Config-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\Config - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %systemroot%\system32\config\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheConfigFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214348" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214002" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_Dllcache-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\Dllcache - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %systemroot%\system32\dllcache\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheDllcacheFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214356" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214003" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_GroupPolicy-Administrators_SYSTEM_AuthenticatedUsers" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\GroupPolicy - Administrators, SYSTEM, Authenticated Users</title>
        <description xml:lang="en">For folder: %systemroot%\system32\GroupPolicy\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-11; Name = Authenticated Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheAuthenticatedUsersGroupToHaveAccessToGroupPolicy_var" export-name="oval:com.mcafee.oval:var:214424" />
          <check-export value-id="DoYouExpectTheGroupPolicyFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:98990" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214004" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_Ias-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\Ias - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %systemroot%\system32\ias\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheIasFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214427" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214005" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_NTMSData-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\NTMSData - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %systemroot%\system32\NTMSData\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheNTMSDataFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214429" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214006" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__Registration-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\Registration - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemroot%\Registration\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Read
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheRegistrationFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214431" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToRegistration_var" export-name="oval:com.mcafee.oval:var:214432" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214007" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_Spool_Printers-Administrators_SYSTEM_Users" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\Spool\Printers - Administrators, SYSTEM, Users</title>
        <description xml:lang="en">For folder: %systemroot%\system32\spool\printers\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-545; Name = Users; Permissions = Traverse Folder / Execute File, Read Attributes, Read Extended Attributes and Create Folders / Append Data
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheSpoolprintersFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:216260" />
          <check-export value-id="DoYouExpectTheUsersGroupToHaveAccessToSpoolprinters_var" export-name="oval:com.mcafee.oval:var:216261" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214008" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__System32_ReinstallBackups-Administrators_SYSTEM_PowerUsers" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\System32\ReinstallBackups - Administrators, SYSTEM, Power Users</title>
        <description xml:lang="en">For folder: %systemroot%\system32\ReinstallBackups\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
    Account Sid = S-1-5-32-547; Name = Power Users; Permissions = Read and Execute
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheReinstallBackupsFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:216264" />
          <check-export value-id="DoYouExpectThePowerUsersGroupToHaveAccessToReinstallBackups_var" export-name="oval:com.mcafee.oval:var:216265" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214009" />
        </check>
      </Rule>
      <Rule id="WindowsFolderPermissions__Systemroot__Repair-Administrators_SYSTEM" xml:lang="en" selected="false">
        <title xml:lang="en">Windows Folder Permissions: %systemroot%\Repair - Administrators, SYSTEM</title>
        <description xml:lang="en">For folder: %systemroot%\Repair\
The following accounts should have the specified permissions:
    Account Sid = S-1-5-32-544; Name = Administrators; Permissions = Full
    Account Sid = S-1-5-18; Name = SYSTEM; Permissions = Full
No other accounts should have any access.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="DoYouExpectTheRepairFolderToExistOnTheMachine_var" export-name="oval:com.mcafee.oval:var:214352" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:214010" />
        </check>
      </Rule>
  </Group>
  <Group id="MiscellaneousRegistrySettings" xml:lang="en">
    <title xml:lang="en">Miscellaneous Registry Settings</title>
      <Value id="Dr.WatsonStatus_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="CreateAMemoryCrashDumpFile_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="CDDVDAutorun_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="EnablePMTUDiscovery_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="TcpMaxHalfOpenNumberOfConnectionsPermitted_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">100</value>
      </Value>
      <Value id="TcpMaxHalfOpenRetriedNumberOfConnectionsPermitted_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">80</value>
      </Value>
      <Value id="ProtectAgainstComputerBrowserSpoofing_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SystemFileCheckerStatus_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">4</value>
      </Value>
      <Value id="SystemFileCheckerScanStatus_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="SystemFileCheckerProgressMeterStatus_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="SharePasswordsHidden_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="DisableDialinCapabilities_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="WebDAVBasicAuthentication_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="MakeUSBStorageDeviceReadonly_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="TCPMaxPortsExhaustedNumberOfConnectionsRefused_var" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">5</value>
      </Value>
      <Rule id="RegistrySetting_AEDebugAuto" xml:lang="en" selected="false">
        <title xml:lang="en">Registry Setting: AEDebugAuto</title>
        <description xml:lang="en">This setting determines whether the system debugger is enabled or not.</description>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="Dr.WatsonStatus_var" export-name="oval:com.mcafee.oval.windows:var:401" />
          <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:401" />
        </check>
      </Rule>
    <Rule id="RegistrySetting_CreateCrashDump" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: Create Crash Dump</title>
      <description xml:lang="en">Dr. Watson is an internal debugging tool to provide detailed memory information at the time of a program crash.
        
        This setting determines whether the system will create a memory dump file when a STOP error occurs.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="CreateAMemoryCrashDumpFile_var" export-name="oval:com.mcafee.oval.windows:var:400" />
        <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:400" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_CD_DVDDeviceAutorun" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: CD/DVD Device Autorun</title>
      <description xml:lang="en">This setting determines whether CD/DVD devices will automatically start when media is inserted.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="CDDVDAutorun_var" export-name="oval:com.mcafee.oval.windows:var:402" />
        <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:402" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_EnablePMTUDiscovery" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: Enable PMTU Discovery</title>
      <description xml:lang="en">This setting determines whether the system will attempt to discover the Maximum Transmission Unit (MTU).</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnablePMTUDiscovery_var" export-name="oval:com.mcafee.oval.windows:var:407" />
        <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:407" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_TCPMaxHalfOpen" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: TCP Max Half Open</title>
      <description xml:lang="en">This setting specifies the number of connections permitted in the SYN-RCVD state before SynAttackProtect measures are implemented.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="TcpMaxHalfOpenNumberOfConnectionsPermitted_var" export-name="oval:com.mcafee.oval.windows:var:404" />
        <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:404" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_TCPMaxHalfOpenRetried" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: TCP Max Half Open Retried</title>
      <description xml:lang="en">This setting specifies the number of connections permitted in the SYN-RCVD state for which at least one retransmission of the SYN has been sent, before SynAttackProtect measures are implemented.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="TcpMaxHalfOpenRetriedNumberOfConnectionsPermitted_var" export-name="oval:com.mcafee.oval.windows:var:405" />
        <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:405" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_ProtectAgainstComputerBrowserSpoofing-RefuseReset" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: Protect against computer browser spoofing - Refuse Reset</title>
      <description xml:lang="en">This registry setting determines whether the system is protected against computer browser spoofing attacks.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ProtectAgainstComputerBrowserSpoofing_var" export-name="oval:com.mcafee.oval:var:72006" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:65858" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_SystemFileChecker-SFCDisable" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: System File Checker - SFCDisable</title>
      <description xml:lang="en">This registry setting determines whether the System File Checker is enabled.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SystemFileCheckerStatus_var" export-name="oval:com.mcafee.oval:var:72007" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:65859" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_SystemFileChecker-SFCScan" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: System File Checker - SFCScan</title>
      <description xml:lang="en">This registry setting determines whether the System File Checker will scan protected files at boot.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SystemFileCheckerScanStatus_var" export-name="oval:com.mcafee.oval:var:72008" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:65860" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_SystemFileChecker-SFCShowProgress" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: System File Checker - SFCShowProgress</title>
      <description xml:lang="en">This registry setting determines whether the System File Checker progress meter is displayed.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SystemFileCheckerProgressMeterStatus_var" export-name="oval:com.mcafee.oval:var:72009" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:65861" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_HideSharePasswordsWithAsterisks-HideSharePwds" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: Hide share passwords with asterisks - HideSharePwds</title>
      <description xml:lang="en">This registry setting determines whether the password typed when accessing a file share is shown in clear text or as asterisks.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SharePasswordsHidden_var" export-name="oval:com.mcafee.oval:var:72011" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:65863" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_DisableDial-inAccess-NoDialIn" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: Disable dial-in access - NoDialIn</title>
      <description xml:lang="en">This registry setting determines whether dial-in access is allowed to the system.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="DisableDialinCapabilities_var" export-name="oval:com.mcafee.oval:var:72012" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:65864" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_DisableWebDAVBasicAuthentication" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: Disable WebDAV basic authentication</title>
      <description xml:lang="en">This registry setting determines whether WebDAV basic authentication is enabled.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WebDAVBasicAuthentication_var" export-name="oval:com.mcafee.oval:var:72013" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:65865" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_USBBlockStorageDevicePolicy" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: USB block storage device policy</title>
      <description xml:lang="en">This registry setting determines whether USB block storage devices function as read-only while connected.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="MakeUSBStorageDeviceReadonly_var" export-name="oval:com.mcafee.oval:var:72014" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:65866" />
      </check>
    </Rule>
    <Rule id="RegistrySetting_TCPMaxPortsExhausted" xml:lang="en" selected="false">
      <title xml:lang="en">Registry Setting: TCP Max Ports Exhausted</title>
      <description xml:lang="en">This setting specifies how many connection requests can be refused before SynAttackProtect measures are implemented.</description>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="TCPMaxPortsExhaustedNumberOfConnectionsRefused_var" export-name="oval:com.mcafee.oval.windows:var:406" />
        <check-content-ref href="" name="oval:com.mcafee.oval.windows:def:406" />
      </check>
    </Rule>
  </Group>
</Benchmark>