<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/windows-definitions-schema.xsd">
  <generator>
    <oval:product_name>repotool</oval:product_name>
    <oval:schema_version>5.8</oval:schema_version>
    <oval:timestamp>2016-12-28T15:32:08</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:mil.disa.fso.windows:def:2908" version="5" class="compliance">
      <metadata>
        <title>Unsupported Service Packs</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1073" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Systems must be at supported service packs (SP) or release levels.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:290800" comment="Verifies the OS Build is equal to or greater than 7601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2909" version="3" class="compliance">
      <metadata>
        <title>Display Shutdown Button</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1075" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10419-0" />
        <description>The shutdown option must not be available from the logon dialog box.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:290900" comment="Verifies 'Shutdown: Allow system to be shutdown without having to log on' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2911" version="2" class="compliance">
      <metadata>
        <title>NTFS Requirement</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1081" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Local volumes must be formatted using NTFS.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291100" comment="Verifies local volumes are formatted using NTFS" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2912" version="3" class="compliance">
      <metadata>
        <title>Legal Notice Display</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1089" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10673-2" />
        <description>The required legal notice must be configured to display before console logon.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291200" comment="Legal Notice is configured with the required text." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291201" comment="Legal Notice is configured with the required text." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2913" version="3" class="compliance">
      <metadata>
        <title>Caching of logon credentials</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1090" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10926-4" />
        <description>Caching of logon credentials must be limited.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291300" comment="Verifies 'Interactive Logon: Number of previous logons to cache (in case domain controller is not available)' is set to '2' logons or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:434200" comment="System is not a member of a domain" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2914" version="2" class="compliance">
      <metadata>
        <title>Restrict Anonymous Network Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1093" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10557-7" />
        <description>Anonymous enumeration of shares must be restricted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291400" comment="Verifies 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2915" version="5" class="compliance">
      <metadata>
        <title>Bad Logon Attempts</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1097" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11046-0" />
        <description>The number of allowed bad logon attempts must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291500" comment="Verifies 'Account lockout threshold' is set to '3' or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291501" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2916" version="6" class="compliance">
      <metadata>
        <title>Bad Logon Counter Reset</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1098" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11059-3" />
        <description>The time before the bad-logon counter is reset must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291600" comment="Verifies 'Reset account lockout counter after' is set to at least '60' minutes" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291501" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2917" version="7" class="compliance">
      <metadata>
        <title>Lockout Duration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1099" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10399-4" />
        <description>Lockout duration must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291700" comment="Verifies 'Account lockout duration' is set to '0'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291501" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2918" version="2" class="compliance">
      <metadata>
        <title>UR: Act as part of the operating system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1102" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10232-7" />
        <description>Unauthorized accounts must not have the Act as part of the operating system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291800" comment="Act as part of the operating system - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2919" version="3" class="compliance">
      <metadata>
        <title>Maximum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1104" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10562-7" />
        <description>Maximum password age must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291900" comment="Verifies 'Maximum Password Age' is set to '60' days or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291901" comment="Verifies 'Maximum Password Age' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2920" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1105" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10760-7" />
        <description>Minimum password age does not meet minimum requirements.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3188" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2921" version="3" class="compliance">
      <metadata>
        <title>Password Uniqueness</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1107" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10809-2" />
        <description>Password uniqueness must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292100" comment="Verifies 'Enforce password history' is set to '24' passwords or more" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2922" version="4" class="compliance">
      <metadata>
        <title>Disable Guest Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9989-5" />
        <description>The built-in guest account must be disabled.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292200" comment="Verifies 'Accounts: Guest account status' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292201" comment="Verifies built-in guest account does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2923" version="3" class="compliance">
      <metadata>
        <title>Rename Built-in Guest Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1114" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10747-4" />
        <description>The built-in guest account must be renamed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292300" comment="Verifies 'Accounts: Rename guest account' is set to a value other than 'Guest'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292201" comment="Verifies built-in guest account does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2924" version="4" class="compliance">
      <metadata>
        <title>Rename Built-in Administrator Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1115" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10976-9" />
        <description>The built-in administrator account must be renamed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292400" comment="Verifies 'Accounts: Rename administrator account' is set to a value other than 'Administrator'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2925" version="1" class="compliance">
      <metadata>
        <title>Forcibly Disconnect when Logon Hours Expire</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1136" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10983-5" />
        <description>Users are not forcibly disconnected when logon hours expire.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3194" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2926" version="1" class="compliance">
      <metadata>
        <title>Unencrypted Password is Sent to SMB Server.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1141" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10838-1" />
        <description>Unencrypted password is sent to 3rd party SMB Server.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3198" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2927" version="3" class="compliance">
      <metadata>
        <title>Disable Automatic Logon</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1145" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10745-8" />
        <description>Automatic logons must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292700" comment="Verifes 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292701" comment="Verifies the automatic logon password registry value (DefaultPassword) does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2928" version="3" class="compliance">
      <metadata>
        <title>Microsoft Strong Password Filtering</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1150" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10901-7" />
        <description>The built-in Microsoft password complexity filter must be enabled.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292800" comment="Verifies 'Password must meet complexity requirements' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2929" version="2" class="compliance">
      <metadata>
        <title>Secure Print Driver Installation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1151" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9999-4" />
        <description>The print driver installation privilege must be restricted to administrators.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292900" comment="Verifies 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2930" version="1" class="compliance">
      <metadata>
        <title>LanMan Authentication Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1153" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10984-3" />
        <description>The Send download LanMan compatible password option is not set to Send NTLMv2 response only\refuse LM and NTLM.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3206" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2931" version="1" class="compliance">
      <metadata>
        <title>Ctrl+Alt+Del Security Attention Sequence</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1154" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10810-0" />
        <description>Ctrl+Alt+Del security attention sequence is Disabled.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3210" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2933" version="4" class="compliance">
      <metadata>
        <title>Smart Card Removal Option</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1157" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10573-4" />
        <description>The Smart Card removal option must be configured to Force Logoff or Lock Workstation.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:293300" comment="Verifies 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:293301" comment="Verifies 'Interactive logon: Smart card removal behavior' is set to 'Force Logoff'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2936" version="1" class="compliance">
      <metadata>
        <title>SMB Server Packet Signing (if client agrees)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1162" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10978-5" />
        <description>The Windows SMB server is not enabled to perform SMB packet signing when possible.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3220" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2937" version="1" class="compliance">
      <metadata>
        <title>Encryption of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1163" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10875-3" />
        <description>Outgoing secure channel traffic is not encrypted when possible.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3224" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3228" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2938" version="1" class="compliance">
      <metadata>
        <title>Signing of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1164" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10871-2" />
        <description>Outgoing secure channel traffic is not signed when possible.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3224" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3232" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2939" version="1" class="compliance">
      <metadata>
        <title>Computer Account Password Reset</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1165" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10775-5" />
        <description>The computer account password is prevented from being reset.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3236" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2940" version="1" class="compliance">
      <metadata>
        <title>SMB Client Packet Signing (if server agrees)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1166" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10974-4" />
        <description>The Windows SMB client is not enabled to perform SMB packet signing when possible.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3240" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2941" version="1" class="compliance">
      <metadata>
        <title>Format and Eject Removable Media</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1171" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10637-7" />
        <description>Ejection of removable NTFS media is not restricted to Administrators.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3244" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2942" version="1" class="compliance">
      <metadata>
        <title>Password Expiration Warning</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1172" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10930-6" />
        <description>Users are not warned in advance that their passwords will expire.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3248" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2943" version="1" class="compliance">
      <metadata>
        <title>Global System Objects Permission Strength</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1173" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11010-6" />
        <description>The default permissions of Global system objects are not increased.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3252" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2944" version="1" class="compliance">
      <metadata>
        <title>Idle Time Before Suspending a Session.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1174" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10362-2" />
        <description>Amount of idle time required before suspending a session is improperly set.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3256" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2945" version="3" class="compliance">
      <metadata>
        <title>Reversible Password Encryption</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2372" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10905-8" />
        <description>Reversible password encryption must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294500" comment="Verifies 'Store password using reversible encryption' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2946" version="1" class="compliance">
      <metadata>
        <title>Disable Media Autoplay</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2374" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11126-0" />
        <description>The system is configured to autoplay removable media.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3260" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2947" version="6" class="compliance">
      <metadata>
        <title>Anonymous Access to Named Pipes - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3338" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10944-7" />
        <description>Named pipes that can be accessed anonymously must be configured to contain no values.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294700" comment="Verifies 'Network access: Named Pipes that can be accessed anonymously' is configured to contain no values" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2948" version="5" class="compliance">
      <metadata>
        <title>Remotely Accessible Registry Paths</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3339" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10949-6" />
        <description>Unauthorized registry paths must not be remotely accessible.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294800" comment="Verifies 'Network access: Remotely accessible registry paths' is configured with no entries" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294801" comment="Verifies 'Network access: Remotely accessible registry paths' is configured to contain authorized registry paths" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294802" comment="Verifies 'Network access: Remotely accessible registry paths' is not configured" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2949" version="5" class="compliance">
      <metadata>
        <title>Anonymous Access to Network Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3340" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10821-7" />
        <description>Unauthorized shares must not be accessed anonymously.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294900" comment="Verifies 'Network access: Shares that can be accessed anonymously' is not configured" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294901" comment="Verifies 'Network access: Shares that can be accessed anonymously' is blank" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2950" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Solicit Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3343" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11723-4" />
        <description>Solicited Remote Assistance is allowed.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3264" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2951" version="1" class="compliance">
      <metadata>
        <title>Limit Blank Passwords</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3344" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9992-9" />
        <description>The use of local accounts with blank passwords is not restricted to console logons only.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3268" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2952" version="1" class="compliance">
      <metadata>
        <title>Undock Without Logging On</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3372" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10883-7" />
        <description>The system can be removed from the docking station without logging on first.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3272" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2953" version="4" class="compliance">
      <metadata>
        <title>Maximum Machine Account Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3373" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10903-3" />
        <description>The maximum age for machine account passwords must be set to requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:295300" comment="Verifies 'Domain member: Maximum machine account password age' is set to '30' days or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:295301" comment="Verifies 'Domain member: Maximum machine account password age' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2954" version="1" class="compliance">
      <metadata>
        <title>Strong Session Key</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3374" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10541-1" />
        <description>The system is not configured to require a strong session key.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3280" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2955" version="1" class="compliance">
      <metadata>
        <title>Storage of Passwords and Credentials</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3376" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10292-1" />
        <description>The system is configured to permit storage of credentials or .NET Passports.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3284" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2956" version="3" class="compliance">
      <metadata>
        <title>Everyone Anonymous Rights</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3377" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10297-0" />
        <description>The system must not be configured to give anonymous users Everyone rights.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:295600" comment="Verifies 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2957" version="1" class="compliance">
      <metadata>
        <title>Sharing and Security Model for Local Accounts</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3378" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10825-8" />
        <description>The system is not configured to use the Classic security model.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3288" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2958" version="1" class="compliance">
      <metadata>
        <title>LAN Manager Hash Value Stored</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3379" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10830-8" />
        <description>The system is configured to store the LAN Manager hash of the password in the SAM.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3292" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2959" version="3" class="compliance">
      <metadata>
        <title>Force Logoff When Logon Hours Expire</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3380" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10588-2" />
        <description>The system must be configured to force users to log off when their allowed logon hours expire.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:295900" comment="Verifies 'Network security: Force logoff when logon hours expire' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2960" version="1" class="compliance">
      <metadata>
        <title>LDAP Client Signing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3381" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10614-6" />
        <description>The system is not configured to recommended LDAP client signing requirements.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3296" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2961" version="1" class="compliance">
      <metadata>
        <title>Session Security for NTLM SSP Based Clients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3382" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10035-4" />
        <description>The system is not configured to meet the minimum requirement for session security for NTLM SSP based Clients.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2962" version="1" class="compliance">
      <metadata>
        <title>FIPS Compliant Algorithms</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3383" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10789-6" />
        <description>The system is not configured to use FIPS compliant Algorithms for Encryption, Hashing, and Signing.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3304" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2963" version="1" class="compliance">
      <metadata>
        <title>Case Insensitivity for Non-Windows</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3385" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10986-8" />
        <description>The system is configured to allow case insensitivity.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3308" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2964" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - Session Limit</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3449" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12016-2" />
        <description>Remote Desktop Services must limit users to one remote session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:296400" comment="Verifies 'Restrict Remote Desktop Services users to a Single Remote Desktop Services Session' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2965" version="4" class="compliance">
      <metadata>
        <title>TS/RDS - Password Prompting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3453" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11299-5" />
        <description>Remote Desktop Services must always prompt a client for passwords upon connection.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:296500" comment="Verifies 'Always prompt for password upon connection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2966" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Set Encryption Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3454" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11677-2" />
        <description>Terminal Services is not configured with the client connection encryption set to the required level.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3312" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2967" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Do Not Use Temp Folders</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3455" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10669-0" />
        <description>Terminal Services is configured to use a common temporary folder for all sessions.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3316" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2968" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Delete Temp Folders</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3456" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12046-9" />
        <description>Terminal Services is not configured to delete temporary folders.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3320" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2971" version="3" class="compliance">
      <metadata>
        <title>Group Policy - Do Not Turn off Background Refresh</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3469" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-14437-8" />
        <description>Group Policies must be refreshed in the background if the user is logged on.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297100" comment="Verifies 'Turn Off Background Refresh of Group Policy' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297101" comment="Verifies 'DisableBkGndGroupPolicy' registry value is set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2972" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Offer Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3470" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11625-1" />
        <description>The system is configured to allow unsolicited remote assistance offers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3335" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2975" version="3" class="compliance">
      <metadata>
        <title>Safe DLL Search Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3479" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10772-2" />
        <description>The system must be configured to use Safe DLL Search Mode.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297500" comment="Verifies 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2976" version="1" class="compliance">
      <metadata>
        <title>Media Player - Disable Automatic Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3480" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11298-7" />
        <description>Media Player is configured to allow automatic checking for updates.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3346" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2977" version="2" class="compliance">
      <metadata>
        <title>Session Security for NTLM SSP Based Servers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10040-4" />
        <description>The system is not configured to meet the minimum requirement for session security for NTLM SSP based Servers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3350" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2978" version="3" class="compliance">
      <metadata>
        <title>Audit Log Warning Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4108" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11011-4" />
        <description>The system must generate an audit event when the audit log reaches a percentage of full threshold.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297800" comment="Verifies 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 90 percent or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2979" version="3" class="compliance">
      <metadata>
        <title>Disable IP Source Routing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4110" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10732-6" />
        <description>The system must be configured to prevent IP source routing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297900" comment="Verifies 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2980" version="3" class="compliance">
      <metadata>
        <title>Disable ICMP Redirect</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4111" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10518-9" />
        <description>The system must be configured to prevent ICMP redirects from overriding OSPF generated routes.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298000" comment="Verifies 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2981" version="3" class="compliance">
      <metadata>
        <title>Disable Router Discovery</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4112" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10768-0" />
        <description>The system must be configured to disable the Internet Router Discovery Protocol (IRDP).</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298100" comment="Verifies 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2982" version="3" class="compliance">
      <metadata>
        <title>TCP Connection Keep-Alive Time</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10381-2" />
        <description>The system must be configured to limit how often keep-alive packets are sent.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298200" comment="Verifies 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to '300000 or 5 minutes (recommended)' or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2983" version="3" class="compliance">
      <metadata>
        <title>Name-Release Attacks</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4116" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10653-4" />
        <description>The system must be configured to ignore NetBIOS name release requests except from WINS servers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298300" comment="Verifies 'MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2984" version="3" class="compliance">
      <metadata>
        <title>TCP Data Retransmissions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4438" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10941-3" />
        <description>The system must limit how many times unacknowledged TCP data is retransmitted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298400" comment="Verifies 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2985" version="3" class="compliance">
      <metadata>
        <title>Screen Saver Grace Period</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4442" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10019-8" />
        <description>The system must be configured to have password protection take effect within a limited time frame when the screen saver becomes active.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298500" comment="Verifies 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 5 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2986" version="5" class="compliance">
      <metadata>
        <title>Remotely Accessible Registry Paths and Sub-Paths</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4443" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10935-5" />
        <description>Unauthorized remotely accessible registry paths and sub-paths must not be configured.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298600" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is configured to contain authorized registry paths" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298601" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is not configured" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298602" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is configured but contains no entries" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2987" version="1" class="compliance">
      <metadata>
        <title>Strong Key Protection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4444" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11035-3" />
        <description>Users are not required to enter a password to access private keys.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3354" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2988" version="4" class="compliance">
      <metadata>
        <title>Optional Subsystems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4445" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10913-2" />
        <description>Optional Subsystems must not be permitted to operate on the system.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298800" comment="Verifies 'System Settings: Optional Subsystems' is blank" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2990" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - Secure RPC Connection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4447" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11368-8" />
        <description>The Remote Desktop Session Host must require secure RPC communications.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:299000" comment="Verifies 'Require secure RPC communication' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2991" version="2" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4448" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12754-8" />
        <description>Group Policy objects are not reprocessed if they have not changed.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3366" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2992" version="3" class="compliance">
      <metadata>
        <title>Encrypting and Signing of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6831" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10871-2" />
        <description>Outgoing secure channel traffic must be encrypted or signed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:299200" comment="Verifies 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2993" version="1" class="compliance">
      <metadata>
        <title>SMB Client Packet Signing (Always)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6832" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10970-2" />
        <description>The Windows Server SMB client is not enabled to always perform SMB packet signing.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3370" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2994" version="1" class="compliance">
      <metadata>
        <title>SMB Server Packet Signing (Always)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6833" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10992-6" />
        <description>The Windows Server SMB server is not enabled to always perform SMB packet signing.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3374" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2995" version="1" class="compliance">
      <metadata>
        <title>Anonymous Access to Named Pipes and Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6834" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10940-5" />
        <description>Named Pipes and Shares can be accessed anonymously.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3378" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2996" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Length</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6836" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10372-1" />
        <description>For systems utilizing a logon ID as the individual identifier, passwords are not at a minimum of 14-characters.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3382" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2999" version="1" class="compliance">
      <metadata>
        <title>Display of Last User Name</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11806" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10788-8" />
        <description>The system is configured to allow the display of the last user name on the logon screen.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3384" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3000" version="1" class="compliance">
      <metadata>
        <title>Audit Access to Global System Objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14228" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10487-7" />
        <description>Audit Access to Global System Objects is not turned off.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3388" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3001" version="1" class="compliance">
      <metadata>
        <title>Audit Backup and Restore Privileges</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14229" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10619-5" />
        <description>Audit of Backup and Restore Privileges is not turned off.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3392" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3002" version="1" class="compliance">
      <metadata>
        <title>Audit Policy Subcategory Setting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14230" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10112-1" />
        <description>Audit policy using subcategories is enabled.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3396" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3003" version="3" class="compliance">
      <metadata>
        <title>IPSec Exemptions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14232" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10018-0" />
        <description>IPSec Exemptions must be limited.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300300" comment="Verifies 'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic' is set to 'Only ISAKMP is exempt (recommended for Windows Server 2003)'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3004" version="1" class="compliance">
      <metadata>
        <title>UAC - Admin Approval Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14234" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11028-8" />
        <description>User Account Control - Built In Admin Approval Mode</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3005" version="3" class="compliance">
      <metadata>
        <title>UAC - Admin Elevation Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14235" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11023-9" />
        <description>User Account Control must, at a minimum, prompt administrators for consent on the secure desktop.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300500" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for credentials on the secure desktop'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300501" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300502" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for credentials'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300503" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3006" version="3" class="compliance">
      <metadata>
        <title>UAC - User Elevation Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14236" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10807-6" />
        <description>User Account Control must automatically deny standard user requests for elevation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300600" comment="Verifies 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3007" version="1" class="compliance">
      <metadata>
        <title>UAC - Application Installations</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14237" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10794-6" />
        <description>User Account Control - Detect Application Installations</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3404" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3008" version="1" class="compliance">
      <metadata>
        <title>UAC - UIAccess Application Elevation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14239" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10570-0" />
        <description>User Account Control - Elevate UIAccess applications that are in secure locations</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3408" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3009" version="1" class="compliance">
      <metadata>
        <title>UAC - All Admin Approval Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14240" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10684-9" />
        <description>User Account Control - Run all admins in Admin Approval Mode</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3412" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3010" version="1" class="compliance">
      <metadata>
        <title>UAC - Secure Desktop Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14241" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10109-7" />
        <description>User Account Control - Switch to secure desktop</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3416" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3011" version="1" class="compliance">
      <metadata>
        <title>UAC - Non UAC Compliant Application Virtualization</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14242" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10865-4" />
        <description>User Account Control - Non UAC Compliant Application Virtualization</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3420" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3012" version="1" class="compliance">
      <metadata>
        <title>Enumerate Administrator Accounts on Elevation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14243" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11450-4" />
        <description>Require username and password to elevate a running application.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3424" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3013" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Prevent Password Saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14247" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11905-7" />
        <description>Terminal Services / Remote Desktop Service - Prevent password saving in the Remote Desktop Client</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3428" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3014" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Drive Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14249" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11709-3" />
        <description>Terminal Services / Remote Desktop Services - Local drives prevented from sharing with Terminal Servers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3432" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3016" version="2" class="compliance">
      <metadata>
        <title>RPC - Unauthenticated RPC Clients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14253" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10881-1" />
        <description>Restrict unauthenticated RPC clients.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3436" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3019" version="1" class="compliance">
      <metadata>
        <title>Internet Download / Online Ordering</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14256" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11136-9" />
        <description>Web Publishing and online ordering wizards prevented from downloading list of providers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3448" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3022" version="1" class="compliance">
      <metadata>
        <title>Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14259" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11360-5" />
        <description>Prevent printing over HTTP.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3460" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3023" version="1" class="compliance">
      <metadata>
        <title>HTTP Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14260" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11563-4" />
        <description>Computer prevented from downloading print driver packages over HTTP.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3464" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3024" version="1" class="compliance">
      <metadata>
        <title>Windows Update Device Drive Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14261" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10357-2" />
        <description>Windows is prevented from using Windows Update to search for drivers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3468" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3026" version="1" class="compliance">
      <metadata>
        <title>Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11604-6" />
        <description>Windows Peer to Peer Networking</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3472" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3027" version="1" class="compliance">
      <metadata>
        <title>Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15667" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12074-1" />
        <description>Prohibit Network Bridge in Windows</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3476" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3029" version="3" class="compliance">
      <metadata>
        <title>Event Viewer Events.asp Links</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15672" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10693-0" />
        <description>Event Viewer Events.asp links must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:302900" comment="Verifies 'Turn off Event Viewer “Events.asp' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3031" version="1" class="compliance">
      <metadata>
        <title>Internet File Association Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15674" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10697-1" />
        <description>Disable Internet File Association Service</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3488" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3033" version="1" class="compliance">
      <metadata>
        <title>Order Prints Online</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15676" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11243-3" />
        <description>Order Prints Online</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3496" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3034" version="2" class="compliance">
      <metadata>
        <title>Classic Logon</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15680" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11256-5" />
        <description>Classic Logon</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:434200" negate="true" comment="System is a member of a domain" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3035" version="1" class="compliance">
      <metadata>
        <title>RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15682" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RSS Attachment Downloads</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3504" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3036" version="2" class="compliance">
      <metadata>
        <title>Windows Explorer - Shell Protocol Protected Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15683" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11530-3" />
        <description>Windows Explorer - Shell Protocol Protected Mode</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3508" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3037" version="2" class="compliance">
      <metadata>
        <title>Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15684" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10343-2" />
        <description>Windows Installer - IE Security Prompt</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3512" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3038" version="2" class="compliance">
      <metadata>
        <title>Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15685" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10906-6" />
        <description>Windows Installer - User Control</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3516" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3039" version="2" class="compliance">
      <metadata>
        <title>Windows Installer - Vendor Signed Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15686" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11468-6" />
        <description>Windows Installer - Vendor Signed Updates</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3520" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3040" version="3" class="compliance">
      <metadata>
        <title>Media Player - First Use Dialog Boxes</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15687" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11596-4" />
        <description>Users must not be presented with Privacy and Installation options on first use of Windows Media Player.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304000" comment="Verifies 'Do Not Show First Use Dialog Boxes' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3041" version="2" class="compliance">
      <metadata>
        <title>Network - Mapper I/O Driver</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15696" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10484-4" />
        <description>Network - Mapper I/O Driver</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3528" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3042" version="2" class="compliance">
      <metadata>
        <title>Network - Responder Driver</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15697" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11304-3" />
        <description>Network - Responder Driver</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3541" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3043" version="2" class="compliance">
      <metadata>
        <title>Network - WCN Wireless Configuration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15698" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11242-5" />
        <description>Network - Windows Connect Now Wireless Configuration</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3554" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3044" version="2" class="compliance">
      <metadata>
        <title>Network - Windows Connect Now Wizards</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15699" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11155-9" />
        <description>Network - Windows Connect Now Wizards</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3570" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3045" version="4" class="compliance">
      <metadata>
        <title>Device Install - PnP Interface Remote Access</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15700" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11248-2" />
        <description>Remote access to the Plug and Play interface must be disabled for device installation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304500" comment="Verifies 'Allow remote access to the Plug and Play interface' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3046" version="4" class="compliance">
      <metadata>
        <title>Device Install - Drivers System Restore Point</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15701" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10546-0" />
        <description>A system restore point must be created when a new device driver is installed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304600" comment="Verifies 'Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3047" version="4" class="compliance">
      <metadata>
        <title>Device Install - Generic Driver Error Report</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15702" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12274-7" />
        <description>An Error Report must not be sent when a generic device driver is installed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304700" comment="Verifies 'Do not send a Windows error report when a generic driver is installed on a device' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3048" version="2" class="compliance">
      <metadata>
        <title>Driver Install - Device Driver Search Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15703" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11319-1" />
        <description>Driver Install - Device Driver Search Prompt</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3574" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3049" version="4" class="compliance">
      <metadata>
        <title>Handwriting Recognition Error Reporting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15704" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11030-4" />
        <description>Errors in handwriting recognition on Tablet PCs must not be reported to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304900" comment="Verifies 'Turn off handwriting recognition error reporting' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3050" version="4" class="compliance">
      <metadata>
        <title>Power Mgmt - Password Wake on Battery</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15705" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12088-1" />
        <description>Users must be prompted for a password on resume from sleep on battery. Applicable to Server 2008 R2 if the system is configured to sleep.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:305000" comment="Verifies 'Require a Password When a Computer Wakes (On Battery)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3051" version="4" class="compliance">
      <metadata>
        <title>Power Mgmt - Password Wake When Plugged In</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15706" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11651-7" />
        <description>Users must be prompted for a password on resume from sleep when plugged in. Applicable to Server 2008 R2 if the system is configured to sleep.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:305100" comment="Verifies 'Require a Password When a Computer Wakes (Plugged In)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3052" version="2" class="compliance">
      <metadata>
        <title>Remote Assistance - Session Logging</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15707" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11263-1" />
        <description>Remote Assistance - Session Logging</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3578" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3053" version="4" class="compliance">
      <metadata>
        <title>Game Explorer Information Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15709" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11739-0" />
        <description>Game explorer information must not be downloaded from Windows Metadata Services.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:305300" comment="Verifies ''Turn off downloading of game information' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3054" version="2" class="compliance">
      <metadata>
        <title>Defender - SpyNet Reporting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15713" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11638-4" />
        <description>Defender - SpyNet Reporting</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3582" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3058" version="2" class="compliance">
      <metadata>
        <title>Windows Explorer - Heap Termination</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15718" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10981-9" />
        <description>Windows Explorer - Heap Termination</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3594" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3060" version="3" class="compliance">
      <metadata>
        <title>Media DRM - Internet Access</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15722" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11052-8" />
        <description>Windows Media Digital Rights Management (DRM) must be prevented from accessing the Internet.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306000" comment="Verifies 'Prevent Windows Media DRM Internet Access' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3061" version="4" class="compliance">
      <metadata>
        <title>Software Certificate Installation Files</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15823" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Software certificate installation files must be removed from a system.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306100" comment="Software certificate installation files (*.p12 *.pfx) are not present on the system" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3062" version="3" class="compliance">
      <metadata>
        <title>UAC - UIAccess Secure Desktop</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15991" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10534-6" />
        <description>UIAccess applications must not be allowed to prompt for elevation without using the secure desktop.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306200" comment="Verifies 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3064" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - COM Port Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15997" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10600-5" />
        <description>Users must be prevented from mapping local COM ports and redirecting data from the Remote Desktop Session Host to local COM ports.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306400" comment="Verifies 'Do not allow COM port redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3065" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - LPT Port Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15998" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11623-6" />
        <description>Users must be prevented from mapping local LPT ports and redirecting data from the Remote Desktop Session Host to local LPT ports.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306500" comment="Verifies 'Do not allow LPT port redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3066" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - PNP Device Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15999" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11128-6" />
        <description>Users must be prevented from redirecting Plug and Play devices to the Remote Desktop Session Host.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306600" comment="Verifies 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3067" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - Smart Card Device Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="16000" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11517-0" />
        <description>The system must be configured to ensure smart card devices can be redirected to the Remote Desktop session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306700" comment="Verifies 'Do not allow smart card device redirection' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3068" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - Printer Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="16001" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10977-7" />
        <description>The system must be configured to allow only the default client printer to be redirected in the Remote Desktop session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306800" comment="Verifies 'Redirect only the default client printer' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3070" version="1" class="compliance">
      <metadata>
        <title>UAC - Application Elevations</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="16008" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10922-3" />
        <description>UAC - Application Elevations</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3609" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3071" version="1" class="compliance">
      <metadata>
        <title>Windows Customer Experience Improvement Program</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="16020" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11354-8" />
        <description>Windows Customer Experience Improvement Program is disabled.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3613" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3072" version="3" class="compliance">
      <metadata>
        <title>UR: Debug Programs</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="18010" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10915-7" />
        <description>Unauthorized accounts must not have the Debug programs user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307200" comment="Debug Programs - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3073" version="3" class="compliance">
      <metadata>
        <title>SPN Target Name Validation Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21950" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10617-9" />
        <description>The service principal name (SPN) target name validation level must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307300" comment="Verifies 'Microsoft network server: Server SPN target name validation level' is set to 'Off'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3074" version="3" class="compliance">
      <metadata>
        <title>Computer Identity Authentication for NTLM</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21951" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10817-5" />
        <description>Services using Local System that use negotiate when reverting to NTLM authentication must use the computer identity vs. authenticating anonymously.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307400" comment="Verifies 'Network Security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3075" version="3" class="compliance">
      <metadata>
        <title>NTLM NULL Session Fallback</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21952" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10812-6" />
        <description>NTLM must be prevented from falling back to a Null session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307500" comment="Verifies 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3076" version="3" class="compliance">
      <metadata>
        <title>PKU2U Online Identities Authentication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21953" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10839-9" />
        <description>PKU2U authentication using online identities must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307600" comment="Verifies 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3077" version="3" class="compliance">
      <metadata>
        <title>Kerberos Encryption Types</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21954" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10843-1" />
        <description>Kerberos encryption types must be configured to prevent the use of DES encryption suites.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307700" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'RC4_HMAC_MD5', 'AES128_HMAC_SHA1', 'AES256_HMAC_SHA1', 'Future encryption types'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3078" version="3" class="compliance">
      <metadata>
        <title>IPv6 Source Routing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21955" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10888-6" />
        <description>IPv6 source routing must be configured to the highest protection level.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307800" comment="Verifies 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3079" version="3" class="compliance">
      <metadata>
        <title>IPv6 TCP Data Retransmissions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21956" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10804-3" />
        <description>IPv6 TCP data retransmissions must be configured to prevent resources from becoming exhausted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307900" comment="Verifies 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3080" version="4" class="compliance">
      <metadata>
        <title>Elevate when setting a network’s location</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21960" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11610-3" />
        <description>Domain users must be required to elevate when setting a network’s location.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308000" comment="Verifies 'Require domain users to elevate when setting a network's location' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3081" version="4" class="compliance">
      <metadata>
        <title>Direct Access - Route Through Internal Network</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21961" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11300-1" />
        <description>All Direct Access traffic must be routed through the internal network.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308100" comment="Verifies 'Route all traffic through the internal network' is set to 'Enabled: Enabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3082" version="4" class="compliance">
      <metadata>
        <title>Windows Update Point and Print Driver Search</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21963" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11976-8" />
        <description>Windows Update must be prevented from searching for point and print drivers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308200" comment="Verifies 'Extend Point and Print connection to search Windows Update' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3083" version="4" class="compliance">
      <metadata>
        <title>Prevent device metadata retrieval from Internet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21964" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11589-9" />
        <description>Device metadata retrieval from the Internet must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308300" comment="Verifies 'Prevent device metadata retrieval from internet' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3084" version="4" class="compliance">
      <metadata>
        <title>Prevent Windows Update for device driver search</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21965" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11787-9" />
        <description>Device driver searches using Windows Update must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308400" comment="Verifies 'Specify search order for device driver source locations' is set to 'Enabled: Do not search Windows Update'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3085" version="4" class="compliance">
      <metadata>
        <title>MSDT Interactive Communication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21967" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10855-5" />
        <description>Microsoft Support Diagnostic Tool (MSDT) interactive communication with Microsoft must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308500" comment="Verifies 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3086" version="4" class="compliance">
      <metadata>
        <title>Windows Online Troubleshooting Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21969" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11161-7" />
        <description>Access to Windows Online Troubleshooting Service (WOTS) must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308600" comment="Verifies 'Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3087" version="4" class="compliance">
      <metadata>
        <title>Disable PerfTrack</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21970" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11889-3" />
        <description>Responsiveness events must be prevented from being aggregated and sent to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308700" comment="Verifies 'Enable/Disable PerfTrack' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3088" version="4" class="compliance">
      <metadata>
        <title>Application Compatibility Program Inventory</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21971" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11043-7" />
        <description>The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308800" comment="Verifies 'Turn off Program Inventory' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3089" version="4" class="compliance">
      <metadata>
        <title>Autoplay for non-volume devices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21973" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11375-3" />
        <description>Autoplay must be turned off for non-volume devices.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308900" comment="Verifies 'Turn off Autoplay for non-volume devices' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3090" version="4" class="compliance">
      <metadata>
        <title>Turn Off Game Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21974" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11807-5" />
        <description>Downloading of game update information must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309000" comment="Verifies 'Turn off game updates' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3091" version="4" class="compliance">
      <metadata>
        <title>Prevent Joining Homegroup</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21975" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10691-4" />
        <description>The system must be prevented from joining a homegroup.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309100" comment="Verifies 'Prevent the computer from joining a homegroup' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3092" version="4" class="compliance">
      <metadata>
        <title>Windows Anytime Upgrade</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21978" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10544-5" />
        <description>Windows Anytime Upgrade must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309200" comment="Verifies 'Prevent Windows Anytime Upgrade from running' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3093" version="4" class="compliance">
      <metadata>
        <title>Explorer Data Execution Prevention</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21980" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12161-6" />
        <description>Explorer Data Execution Prevention must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309300" comment="Verifies 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3094" version="4" class="compliance">
      <metadata>
        <title>Default Autorun Behavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="22692" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11431-4" />
        <description>The default autorun behavior must be configured to prevent autorun commands.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309400" comment="Verifies 'Default behavior for AutoRun' is set to 'Enabled:Do not execute any autorun commands'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3095" version="3" class="compliance">
      <metadata>
        <title>Restrict Anonymous SAM Enumeration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26283" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10027-1" />
        <description>Anonymous enumeration of SAM accounts must not be allowed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309500" comment="Verifies 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3096" version="2" class="compliance">
      <metadata>
        <title>Legal Banner Dialog Box Title</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26359" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10010-7" />
        <description>The Windows dialog box title for the legal banner must be configured.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309600" comment="Legal Notice Caption - DoD Notice and Consent Banner" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309601" comment="Legal Notice Caption - US Department of Defense Warning Statement" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3098" version="2" class="compliance">
      <metadata>
        <title>UR: Access this computer from the network - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26470" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10086-7" />
        <description>Unauthorized accounts must not have the Access this computer from the network user right on member servers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309800" comment="Access this computer from the network - Administrators, Authenticated Users" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3100" version="2" class="compliance">
      <metadata>
        <title>UR: Allow log on locally</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26472" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10853-0" />
        <description>Unauthorized accounts must not have the Allow log on locally user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310000" comment="Allow log on locally - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3102" version="2" class="compliance">
      <metadata>
        <title>UR: Back up files and directories</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26474" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10880-3" />
        <description>Unauthorized accounts must not have the Back up files and directories user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310200" comment="Back up files and directories - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3103" version="2" class="compliance">
      <metadata>
        <title>UR: Bypass traverse checking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26475" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10369-7" />
        <description>Unauthorized accounts must not have the Bypass traverse checking user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310300" comment="Bypass traverse checking - Administrators, Authenticated Users, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3104" version="2" class="compliance">
      <metadata>
        <title>UR: Change the system time</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26476" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10122-0" />
        <description>Unauthorized accounts must not have the Change the system time user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310400" comment="Change the system time - Administrators, Local Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3105" version="2" class="compliance">
      <metadata>
        <title>UR: Change the time zone</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26477" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10897-7" />
        <description>Unauthorized accounts must not have the Change the time zone user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310500" comment="Change the time zone - Administrators, Local Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3106" version="2" class="compliance">
      <metadata>
        <title>UR: Create a pagefile</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26478" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9937-4" />
        <description>Unauthorized accounts must not have the Create a pagefile user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310600" comment="Create a pagefile - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3107" version="2" class="compliance">
      <metadata>
        <title>UR: Create a token object</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26479" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10770-6" />
        <description>Unauthorized accounts must not have the Create a token object user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310700" comment="Create a token object - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3108" version="2" class="compliance">
      <metadata>
        <title>UR: Create global objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26480" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10792-0" />
        <description>Unauthorized accounts must not have the Create global objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310800" comment="Create global objects - Administrators, Service, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3109" version="2" class="compliance">
      <metadata>
        <title>UR: Create permanent shared objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26481" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10796-1" />
        <description>Unauthorized accounts must not have the Create permanent shared objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310900" comment="Create permanent shared objects - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3110" version="3" class="compliance">
      <metadata>
        <title>UR: Create symbolic links</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26482" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10911-6" />
        <description>Unauthorized accounts must not have the Create symbolic links user right.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311000" comment="Create symbolic links - Administrators" />
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:311002" comment="Create symbolic links - VMs and Administrators" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:311001" comment="Hyper-V installed" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3115" version="2" class="compliance">
      <metadata>
        <title>UR: Enable computer and user accounts to be trusted for delegation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26487" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10618-7" />
        <description>Unauthorized accounts must not have the Enable computer and user accounts to be trusted for delegation user right on domain controllers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311500" comment="Enable computer and user accounts to be trusted for delegation - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3116" version="2" class="compliance">
      <metadata>
        <title>UR: Force shutdown from a remote system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26488" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10785-4" />
        <description>Unauthorized accounts must not have the Force shutdown from a remote system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311600" comment="Force shutdown from a remote system - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3117" version="2" class="compliance">
      <metadata>
        <title>UR: Generate security audits</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26489" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10274-9" />
        <description>Unauthorized accounts must not have the Generate security audits user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311700" comment="Generate security audits - Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3118" version="2" class="compliance">
      <metadata>
        <title>UR: Impersonate a client after authentication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26490" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9946-5" />
        <description>Unauthorized accounts must not have the Impersonate a client after authentication user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311800" comment="Impersonate a client after authentication - Administrators, Service, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3120" version="2" class="compliance">
      <metadata>
        <title>UR: Increase scheduling priority</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26492" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9961-4" />
        <description>Unauthorized accounts must not have the Increase scheduling priority user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312000" comment="Increase scheduling priority - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3121" version="2" class="compliance">
      <metadata>
        <title>UR: Load and unload device drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26493" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10202-0" />
        <description>Unauthorized accounts must not have the Load and unload device drivers user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312100" comment="Load and unload device drivers - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3122" version="2" class="compliance">
      <metadata>
        <title>UR: Lock pages in memory</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26494" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10955-3" />
        <description>Unauthorized accounts must not have the Lock pages in memory user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312200" comment="Lock pages in memory - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3125" version="2" class="compliance">
      <metadata>
        <title>UR: Modify an object label</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26497" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10567-6" />
        <description>Unauthorized accounts must not have the Modify an object label user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312500" comment="Modify an object label - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3126" version="2" class="compliance">
      <metadata>
        <title>UR: Modify firmware environment values</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26498" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10659-1" />
        <description>Unauthorized accounts must not have the Modify firmware environment values user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312600" comment="Modify firmware environment values - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3127" version="2" class="compliance">
      <metadata>
        <title>UR: Perform volume maintenance tasks</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26499" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9984-6" />
        <description>Unauthorized accounts must not have the Perform volume maintenance tasks user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312700" comment="Perform volume maintenance tasks - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3128" version="2" class="compliance">
      <metadata>
        <title>UR: Profile single process</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26500" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10458-8" />
        <description>Unauthorized accounts must not have the Profile single process user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312800" comment="Profile single process - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3129" version="2" class="compliance">
      <metadata>
        <title>UR: Profile system performance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26501" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10193-1" />
        <description>Unauthorized accounts must not have the Profile system performance user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312900" comment="Profile system performance - Administrators, NT Service\WdiServiceHost" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3130" version="2" class="compliance">
      <metadata>
        <title>UR: Remove computer from docking station</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26502" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10969-4" />
        <description>Unauthorized accounts must not have the Remove computer from docking station user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313000" comment="Remove computer from docking station - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3131" version="2" class="compliance">
      <metadata>
        <title>UR: Replace a process level token</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26503" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10599-9" />
        <description>Unauthorized accounts must not have the Replace a process level token user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313100" comment="Replace a process level token - Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3132" version="2" class="compliance">
      <metadata>
        <title>UR: Restore files and directories</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10805-0" />
        <description>Unauthorized accounts must not have the Restore files and directories user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313200" comment="Restore files and directories - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3133" version="2" class="compliance">
      <metadata>
        <title>UR: Shut down the system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26505" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10439-8" />
        <description>Unauthorized accounts must not have the Shut down the system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313300" comment="Shut down the system - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3134" version="2" class="compliance">
      <metadata>
        <title>UR: Take ownership of files or other objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26506" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10954-6" />
        <description>Unauthorized accounts must not have the Take ownership of files or other objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313400" comment="Take ownership of files or other objects - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3135" version="2" class="compliance">
      <metadata>
        <title>Audit - Credential Validation - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26529" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Credential Validation successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Credential Validation - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313500" comment="Audit - Credential Validation - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313501" comment="Audit - Credential Validation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3136" version="2" class="compliance">
      <metadata>
        <title>Audit - Credential Validation - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26530" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Credential Validation failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Credential Validation - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313600" comment="Audit - Credential Validation - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313501" comment="Audit - Credential Validation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3137" version="2" class="compliance">
      <metadata>
        <title>Audit - Computer Account Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26531" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Computer Account Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Computer Account Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313700" comment="Audit - Computer Account Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313701" comment="Audit - Computer Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3138" version="2" class="compliance">
      <metadata>
        <title>Audit - Computer Account Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26532" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Computer Account Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Computer Account Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313800" comment="Audit - Computer Account Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313701" comment="Audit - Computer Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3139" version="3" class="compliance">
      <metadata>
        <title>Audit - Other Account Management Events - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26533" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Other Account Management Events successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Other Account Management Events - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313900" comment="Audit - Other Account Management Events - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313901" comment="Audit - Other Account Management Events - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3140" version="3" class="compliance">
      <metadata>
        <title>Audit - Other Account Management Events - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26534" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Other Account Management Events failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Other Account Management Events - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314000" comment="Audit - Other Account Management Events - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313901" comment="Audit - Other Account Management Events - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3141" version="2" class="compliance">
      <metadata>
        <title>Audit - Security Group Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26535" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Security Group Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security Group Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314100" comment="Audit - Security Group Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314101" comment="Audit - Security Group Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3142" version="2" class="compliance">
      <metadata>
        <title>Audit - Security Group Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26536" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Security Group Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security Group Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314200" comment="Audit - Security Group Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314101" comment="Audit - Security Group Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3143" version="2" class="compliance">
      <metadata>
        <title>Audit - User Account Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26537" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - User Account Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - User Account Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314300" comment="Audit - User Account Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314301" comment="Audit - User Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3144" version="2" class="compliance">
      <metadata>
        <title>Audit - User Account Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26538" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - User Account Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - User Account Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314400" comment="Audit - User Account Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314301" comment="Audit - User Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3145" version="2" class="compliance">
      <metadata>
        <title>Audit - Process Creation - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26539" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Detailed Tracking - Process Creation successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Process Creation - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314500" comment="Audit - Process Creation - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314501" comment="Audit - Process Creation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3146" version="2" class="compliance">
      <metadata>
        <title>Audit - Logoff - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26540" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logoff successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logoff - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314600" comment="Audit - Logoff - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314601" comment="Audit - Logoff - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3147" version="2" class="compliance">
      <metadata>
        <title>Audit - Logon - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26541" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logon successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logon - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314700" comment="Audit - Logon - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314701" comment="Audit - Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3148" version="2" class="compliance">
      <metadata>
        <title>Audit - Logon - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26542" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logon failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logon - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314800" comment="Audit - Logon - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314701" comment="Audit - Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3149" version="2" class="compliance">
      <metadata>
        <title>Audit - Special Logon - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26543" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Special Logon successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Special Logon - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314900" comment="Audit - Special Logon - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314901" comment="Audit - Special Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3152" version="2" class="compliance">
      <metadata>
        <title>Audit - Audit Policy Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26546" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Audit Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315200" comment="Audit - Audit Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315201" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3153" version="2" class="compliance">
      <metadata>
        <title>Audit - Audit Policy Change - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26547" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Audit Policy Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315300" comment="Audit - Audit Policy Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315201" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3154" version="2" class="compliance">
      <metadata>
        <title>Audit - Authentication Policy Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26548" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Authentication Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Authentication Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315400" comment="Audit - Authentication Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315401" comment="Audit - Authentication Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3155" version="2" class="compliance">
      <metadata>
        <title>Audit - Sensitive Privilege Use - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26549" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Privilege Use - Sensitive Privilege Use successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Sensitive Privilege Use - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315500" comment="Audit - Sensitive Privilege Use - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315501" comment="Audit - Sensitive Privilege Use - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3156" version="3" class="compliance">
      <metadata>
        <title>Audit - Sensitive Privilege Use - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26550" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Privilege Use - Sensitive Privilege Use failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Sensitive Privilege Use - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315600" comment="Audit - Sensitive Privilege Use - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315501" comment="Audit - Sensitive Privilege Use - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3157" version="2" class="compliance">
      <metadata>
        <title>Audit - IPSec Driver - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26551" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - IPsec Driver successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - IPSec Driver - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315700" comment="Audit - IPSec Driver - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315701" comment="Audit - IPSec Driver - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3158" version="2" class="compliance">
      <metadata>
        <title>Audit - IPSec Driver - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26552" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - IPsec Driver failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - IPSec Driver - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315800" comment="Audit - IPSec Driver - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315701" comment="Audit - IPSec Driver - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3159" version="2" class="compliance">
      <metadata>
        <title>Audit - Security State Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26553" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security State Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security State Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315900" comment="Audit - Security State Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315901" comment="Audit - Security State Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3160" version="2" class="compliance">
      <metadata>
        <title>Audit - Security State Change - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26554" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security State Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security State Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316000" comment="Audit - Security State Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315901" comment="Audit - Security State Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3161" version="2" class="compliance">
      <metadata>
        <title>Audit - Security System Extension - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26555" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security System Extension successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security System Extension - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316100" comment="Audit - Security System Extension - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316101" comment="Audit - Security System Extension - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3162" version="2" class="compliance">
      <metadata>
        <title>Audit - Security System Extension - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26556" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security System Extension failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security System Extension - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316200" comment="Audit - Security System Extension - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316101" comment="Audit - Security System Extension - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3163" version="2" class="compliance">
      <metadata>
        <title>Audit - System Integrity - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26557" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - System Integrity successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - System Integrity - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316300" comment="Audit - System Integrity - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316301" comment="Audit - System Integrity - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3164" version="2" class="compliance">
      <metadata>
        <title>Audit - System Integrity - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26558" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - System Integrity failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - System Integrity - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316400" comment="Audit - System Integrity - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316301" comment="Audit - System Integrity - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3165" version="4" class="compliance">
      <metadata>
        <title>6to4 State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26575" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11356-3" />
        <description>The 6to4 IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316500" comment="Verifies 'Set 6to4 State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3166" version="4" class="compliance">
      <metadata>
        <title>IP-HTTPS State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26576" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10832-4" />
        <description>The IP-HTTPS IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316600" comment="Verifies 'IP-HTTPS State' is set to 'Enabled: Disabled State'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316601" comment="Verifies 'IP-HTTPS URL:' is set to 'about:blank'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3167" version="4" class="compliance">
      <metadata>
        <title>ISATAP State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26577" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11141-9" />
        <description>The ISATAP IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316700" comment="Verifies 'ISATAP State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3168" version="4" class="compliance">
      <metadata>
        <title>Teredo State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26578" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11865-3" />
        <description>The Teredo IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316800" comment="Verifies 'Teredo State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3169" version="4" class="compliance">
      <metadata>
        <title>Maximum Log Size - Application</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26579" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11143-5" />
        <description>The Application event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316900" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3170" version="4" class="compliance">
      <metadata>
        <title>Maximum Log Size - Security</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26580" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11033-8" />
        <description>The Security event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:317000" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:196608'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3171" version="4" class="compliance">
      <metadata>
        <title>Maximum Log Size - Setup</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26581" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11717-6" />
        <description>The Setup event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:317100" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3172" version="4" class="compliance">
      <metadata>
        <title>Maximum Log Size - System</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26582" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11174-0" />
        <description>The System event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:317200" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3173" version="3" class="compliance">
      <metadata>
        <title>Device Install Software Request Error Report</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="28504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11336-5" />
        <description>Windows must be prevented from sending an error report when a device driver requests additional software during installation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:317300" comment="Verifies 'Prevent Windows from sending an error report when a device driver requests additional software during installation' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3188" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5286" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Minimum Password Age</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3189" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3189" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Age !&lt; 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6028" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Minimum Password Age !&lt; 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:318900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3194" version="1" class="compliance">
      <metadata>
        <title>EnableForcedLogoff</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5064" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>EnableForcedLogoff</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3195" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3196" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3197" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3195" version="1" class="compliance">
      <metadata>
        <title>VC - EnableForcedLogoff == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5605" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - EnableForcedLogoff == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3196" version="1" class="compliance">
      <metadata>
        <title>VE - EnableForcedLogoff Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5606" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - EnableForcedLogoff Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3197" version="1" class="compliance">
      <metadata>
        <title>TM - EnableForcedLogoff is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5607" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - EnableForcedLogoff is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3198" version="1" class="compliance">
      <metadata>
        <title>EnablePlainTextPassword</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5095" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>EnablePlainTextPassword</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3199" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3200" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3199" version="1" class="compliance">
      <metadata>
        <title>VC - EnablePlainTextPassword == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5709" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - EnablePlainTextPassword == 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3200" version="1" class="compliance">
      <metadata>
        <title>VE - EnablePlainTextPassword Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5710" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - EnablePlainTextPassword Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3201" version="1" class="compliance">
      <metadata>
        <title>TM - EnablePlainTextPassword is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5711" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - EnablePlainTextPassword is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3206" version="1" class="compliance">
      <metadata>
        <title>LMCompatibilityLevel</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5068" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>LMCompatibilityLevel</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3207" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3208" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3209" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3207" version="1" class="compliance">
      <metadata>
        <title>VC - LMCompatibilityLevel = 5</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5617" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - LMCompatibilityLevel = 5</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3208" version="1" class="compliance">
      <metadata>
        <title>VE - LMCompatibilityLevel Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5618" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - LMCompatibilityLevel Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3209" version="1" class="compliance">
      <metadata>
        <title>TM - LMCompatibilityLevel is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5619" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - LMCompatibilityLevel is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3210" version="1" class="compliance">
      <metadata>
        <title>SAS: Ctrl+Alt+Del</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5300" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>SAS: Ctrl+Alt+Del</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3211" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3211" version="1" class="compliance">
      <metadata>
        <title>SAS: Ctrl+Alt+Del</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>SAS: Ctrl+Alt+Del</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:321100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3220" version="1" class="compliance">
      <metadata>
        <title>EnableSecuritySignature</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5067" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>EnableSecuritySignature</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3221" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3222" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3223" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3221" version="1" class="compliance">
      <metadata>
        <title>VC - EnableSecuritySignature == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5614" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - EnableSecuritySignature == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3222" version="1" class="compliance">
      <metadata>
        <title>VE - EnableSecuritySignature Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5615" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - EnableSecuritySignature Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3223" version="1" class="compliance">
      <metadata>
        <title>TM - EnableSecuritySignature is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5616" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - EnableSecuritySignature is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3224" version="1" class="compliance">
      <metadata>
        <title>RequireSignOrSeal</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5223" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RequireSignOrSeal</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3225" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3226" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3227" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3225" version="1" class="compliance">
      <metadata>
        <title>VC - RequireSignOrSeal == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5921" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - RequireSignOrSeal == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3226" version="1" class="compliance">
      <metadata>
        <title>VE - RequireSignOrSeal Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5922" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - RequireSignOrSeal Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3227" version="1" class="compliance">
      <metadata>
        <title>TM - RequireSignOrSeal is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5923" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - RequireSignOrSeal is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3228" version="1" class="compliance">
      <metadata>
        <title>SealSecureChannel</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5235" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>SealSecureChannel</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3229" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3230" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3231" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3229" version="1" class="compliance">
      <metadata>
        <title>VC - SealSecureChannel == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5925" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - SealSecureChannel == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3230" version="1" class="compliance">
      <metadata>
        <title>VE - SealSecureChannel Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5926" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - SealSecureChannel Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3231" version="1" class="compliance">
      <metadata>
        <title>TM - SealSecureChannel is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5927" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - SealSecureChannel is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3232" version="1" class="compliance">
      <metadata>
        <title>SignSecureChannel</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5236" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>SignSecureChannel</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3233" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3234" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3235" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3233" version="1" class="compliance">
      <metadata>
        <title>VC - SignSecureChannel == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5928" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - SignSecureChannel == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3234" version="1" class="compliance">
      <metadata>
        <title>VE - SignSecureChannel Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5929" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - SignSecureChannel Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3235" version="1" class="compliance">
      <metadata>
        <title>TM - SignSecureChannel is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5930" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - SignSecureChannel is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3236" version="1" class="compliance">
      <metadata>
        <title>DisablePasswordChange == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5034" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DisablePasswordChange == 0</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3237" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3238" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3239" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3237" version="1" class="compliance">
      <metadata>
        <title>VC - DisablePasswordChange == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5524" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - DisablePasswordChange == 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3238" version="1" class="compliance">
      <metadata>
        <title>VE - DisablePasswordChange</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5525" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - DisablePasswordChange</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3239" version="1" class="compliance">
      <metadata>
        <title>TM - DisablePasswordChange</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5526" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - DisablePasswordChange</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3240" version="1" class="compliance">
      <metadata>
        <title>EnableSecuritySignature</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5066" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>EnableSecuritySignature</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3241" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3242" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3243" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3241" version="1" class="compliance">
      <metadata>
        <title>VC - EnableSecuritySignature == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5611" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - EnableSecuritySignature == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3242" version="1" class="compliance">
      <metadata>
        <title>VE - EnableSecuritySignature Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5612" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - EnableSecuritySignature Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3243" version="1" class="compliance">
      <metadata>
        <title>TM - EnableSecuritySignature is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5613" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - EnableSecuritySignature is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3244" version="1" class="compliance">
      <metadata>
        <title>AllocateDASD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5061" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>AllocateDASD</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3245" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3246" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3247" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3245" version="1" class="compliance">
      <metadata>
        <title>VC - AllocateDASD == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5596" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - AllocateDASD == 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3246" version="1" class="compliance">
      <metadata>
        <title>VE - AllocateDASD Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5598" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - AllocateDASD Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3247" version="1" class="compliance">
      <metadata>
        <title>TM - AllocateDASD is REG_SZ</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5600" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - AllocateDASD is REG_SZ</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3248" version="1" class="compliance">
      <metadata>
        <title>PasswordExpiryWarning</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5040" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>PasswordExpiryWarning</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3249" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3250" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3251" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3249" version="1" class="compliance">
      <metadata>
        <title>VC - PasswordExpiryWarning == 14</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5534" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - PasswordExpiryWarning == 14</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3250" version="1" class="compliance">
      <metadata>
        <title>TM - PasswordExpiryWarning == 14</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5535" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - PasswordExpiryWarning == 14</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3251" version="1" class="compliance">
      <metadata>
        <title>VE - PasswordExpiryWarning == 14</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5536" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - PasswordExpiryWarning == 14</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3252" version="1" class="compliance">
      <metadata>
        <title>ProtectionMode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5098" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>ProtectionMode</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3253" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3254" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3255" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3253" version="1" class="compliance">
      <metadata>
        <title>VC - ProtectionMode == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5718" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - ProtectionMode == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3254" version="1" class="compliance">
      <metadata>
        <title>VE - ProtectionMode Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5719" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - ProtectionMode Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3255" version="1" class="compliance">
      <metadata>
        <title>TM - ProtectionMode is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5720" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - ProtectionMode is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3256" version="1" class="compliance">
      <metadata>
        <title>AutoDisconnect</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5063" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>AutoDisconnect</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3257" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3258" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3259" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3257" version="1" class="compliance">
      <metadata>
        <title>VC - AutoDisconnect &lt;= 15</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5602" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - AutoDisconnect &lt;= 15</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3258" version="1" class="compliance">
      <metadata>
        <title>VE - AutoDisconnect Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5603" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - AutoDisconnect Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3259" version="1" class="compliance">
      <metadata>
        <title>TM - AutoDisconnect is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5604" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - AutoDisconnect is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3260" version="1" class="compliance">
      <metadata>
        <title>NoDriveTypeAutoRun</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5079" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NoDriveTypeAutoRun</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3261" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3262" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3263" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3261" version="1" class="compliance">
      <metadata>
        <title>VC - NoDriveTypeAutoRun == 255</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5644" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - NoDriveTypeAutoRun == 255</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3262" version="1" class="compliance">
      <metadata>
        <title>VE - NoDriveTypeAutoRun Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5645" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - NoDriveTypeAutoRun Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3263" version="1" class="compliance">
      <metadata>
        <title>TM - NoDriveTypeAutoRun is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5646" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - NoDriveTypeAutoRun is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3264" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Solicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5231" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Remote Assistance - Solicited Remote Assistance</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3265" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3266" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3267" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3265" version="1" class="compliance">
      <metadata>
        <title>Solicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5804" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Solicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3266" version="1" class="compliance">
      <metadata>
        <title>Solicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5805" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Solicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3267" version="1" class="compliance">
      <metadata>
        <title>Solicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5806" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Solicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3268" version="1" class="compliance">
      <metadata>
        <title>Limit Blank Passwords</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5086" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Limit Blank Passwords</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3269" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3270" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3271" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3269" version="1" class="compliance">
      <metadata>
        <title>V0003344 VE LimitBlankPasswordUse</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5671" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003344 VE LimitBlankPasswordUse</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3270" version="1" class="compliance">
      <metadata>
        <title>V0003344 TM LimitBlankPasswordUse</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5672" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003344 TM LimitBlankPasswordUse</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3271" version="1" class="compliance">
      <metadata>
        <title>V0003344 VC LimitBlankPasswordUse</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5673" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003344 VC LimitBlankPasswordUse</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3272" version="2" class="compliance">
      <metadata>
        <title>Undock Without Logging On</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5087" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Undock Without Logging On</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3273" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3274" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3275" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3273" version="1" class="compliance">
      <metadata>
        <title>TM Undockwithoutlogon (DWORD)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5676" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM Undockwithoutlogon (DWORD)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3274" version="1" class="compliance">
      <metadata>
        <title>VE Undockwithoutlogon (DWORD)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5681" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE Undockwithoutlogon (DWORD)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3275" version="1" class="compliance">
      <metadata>
        <title>VC Undockwithoutlogon = 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5682" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC Undockwithoutlogon = 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3280" version="1" class="compliance">
      <metadata>
        <title>RequireStrongKey</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5094" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RequireStrongKey</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3281" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3282" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3283" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3281" version="1" class="compliance">
      <metadata>
        <title>VC - RequireStrongKey == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5706" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - RequireStrongKey == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3282" version="1" class="compliance">
      <metadata>
        <title>VE - RequireStrongKey Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5707" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - RequireStrongKey Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3283" version="1" class="compliance">
      <metadata>
        <title>TM - RequireStrongKey is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5708" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - RequireStrongKey is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3284" version="1" class="compliance">
      <metadata>
        <title>DisableDomainCreds</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5046" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DisableDomainCreds</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3285" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3286" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3287" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3285" version="1" class="compliance">
      <metadata>
        <title>V0003376 VC - DisableDomainCreds == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5551" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003376 VC - DisableDomainCreds == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3286" version="1" class="compliance">
      <metadata>
        <title>V0003376 VE - DisableDomainCreds</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5552" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003376 VE - DisableDomainCreds</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3287" version="1" class="compliance">
      <metadata>
        <title>V0003376 TM - DisableDomainCreds</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5553" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003376 TM - DisableDomainCreds</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3288" version="1" class="compliance">
      <metadata>
        <title>ForceGuest</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5048" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>ForceGuest</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3289" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3290" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3291" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3289" version="1" class="compliance">
      <metadata>
        <title>V0003378 VC - ForceGuest == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5557" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003378 VC - ForceGuest == 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3290" version="1" class="compliance">
      <metadata>
        <title>V0003378 VE - ForceGuest</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5558" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003378 VE - ForceGuest</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3291" version="1" class="compliance">
      <metadata>
        <title>V0003378 TM - ForceGuest</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5559" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003378 TM - ForceGuest</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3292" version="1" class="compliance">
      <metadata>
        <title>NoLMHash</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5049" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NoLMHash</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3293" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3294" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3295" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3293" version="1" class="compliance">
      <metadata>
        <title>V0003379 VC - NoLMHash == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5560" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003379 VC - NoLMHash == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3294" version="1" class="compliance">
      <metadata>
        <title>V0003379 VE - NoLMHash</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5561" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003379 VE - NoLMHash</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3295" version="1" class="compliance">
      <metadata>
        <title>V0003379 TM - NoLMHash</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5562" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003379 TM - NoLMHash</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3296" version="1" class="compliance">
      <metadata>
        <title>LdapClientIntegrity</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5050" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>LdapClientIntegrity</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3297" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3298" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3299" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3297" version="1" class="compliance">
      <metadata>
        <title>V0003381 VE - LdapClientIntegrity</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5563" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003381 VE - LdapClientIntegrity</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3298" version="1" class="compliance">
      <metadata>
        <title>V0003381 VC - LdapClientIntegrity &gt;= 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5564" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003381 VC - LdapClientIntegrity &gt;= 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3299" version="1" class="compliance">
      <metadata>
        <title>V0003381 TM - LdapClientIntegrity</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5565" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003381 TM - LdapClientIntegrity</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3300" version="1" class="compliance">
      <metadata>
        <title>NTLMMinClientSec</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5051" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NTLMMinClientSec</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3302" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3303" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3301" version="1" class="compliance">
      <metadata>
        <title>V0003382 VC - NTLMMinClientSec = 537395200</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23290" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003382 VC - NTLMMinClientSec = 537395200</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3302" version="1" class="compliance">
      <metadata>
        <title>V0003382 VE - NTLMMinClientSec Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5567" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003382 VE - NTLMMinClientSec Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3303" version="1" class="compliance">
      <metadata>
        <title>V0003382 TM - NTLMMinClientSec is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5568" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003382 TM - NTLMMinClientSec is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3304" version="1" class="compliance">
      <metadata>
        <title>FIPSAlgorithmPolicy</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5055" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>FIPSAlgorithmPolicy</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3305" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3306" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3307" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3305" version="1" class="compliance">
      <metadata>
        <title>V0003383 W6 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24275" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003383 W6 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3306" version="1" class="compliance">
      <metadata>
        <title>V0003383 W6 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24276" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003383 W6 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3307" version="1" class="compliance">
      <metadata>
        <title>V0003383 W6 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24277" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003383 W6 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3308" version="1" class="compliance">
      <metadata>
        <title>ObCaseInsensitive</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5057" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>ObCaseInsensitive</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3309" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3310" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3311" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3309" version="1" class="compliance">
      <metadata>
        <title>V0003385 VC - ObCaseInsensitive == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5582" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003385 VC - ObCaseInsensitive == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3310" version="1" class="compliance">
      <metadata>
        <title>V0003385 VE - ObCaseInsensitive Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5583" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003385 VE - ObCaseInsensitive Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3311" version="1" class="compliance">
      <metadata>
        <title>V0003385 TM - ObCaseInsensitive is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5584" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003385 TM - ObCaseInsensitive is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3312" version="1" class="compliance">
      <metadata>
        <title>MinEncryptionLevel</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5238" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>MinEncryptionLevel</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3313" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3314" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3315" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3313" version="1" class="compliance">
      <metadata>
        <title>V0003454 VC - MinEncryptionLevel == 3</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5934" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003454 VC - MinEncryptionLevel == 3</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3314" version="1" class="compliance">
      <metadata>
        <title>V0003454 VE - MinEncryptionLevel Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5935" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003454 VE - MinEncryptionLevel Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3315" version="1" class="compliance">
      <metadata>
        <title>V0003454 TM - MinEncryptionLevel is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5936" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003454 TM - MinEncryptionLevel is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3316" version="1" class="compliance">
      <metadata>
        <title>PerSessionTempDir</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5115" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>PerSessionTempDir</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3317" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3318" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3319" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3317" version="1" class="compliance">
      <metadata>
        <title>V0003455 VC - PerSessionTempDir == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5783" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003455 VC - PerSessionTempDir == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3318" version="1" class="compliance">
      <metadata>
        <title>V0003455 VE - PerSessionTempDir Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5784" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003455 VE - PerSessionTempDir Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3319" version="1" class="compliance">
      <metadata>
        <title>V0003455 TM - PerSessionTempDir is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5785" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003455 TM - PerSessionTempDir is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3320" version="1" class="compliance">
      <metadata>
        <title>DeleteTempDirsOnExit</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5116" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DeleteTempDirsOnExit</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3321" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3322" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3323" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3321" version="1" class="compliance">
      <metadata>
        <title>V0003456 VC - DeleteTempDirsOnExit == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5789" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003456 VC - DeleteTempDirsOnExit == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3322" version="1" class="compliance">
      <metadata>
        <title>V0003456 VE - DeleteTempDirsOnExit Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5790" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003456 VE - DeleteTempDirsOnExit Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3323" version="1" class="compliance">
      <metadata>
        <title>V0003456 TM - DeleteTempDirsOnExit is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5791" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003456 TM - DeleteTempDirsOnExit is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3335" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Unsolicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5232" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Remote Assistance - Unsolicited Remote Assistance</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3336" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3337" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3338" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3336" version="1" class="compliance">
      <metadata>
        <title>V0003470 Unsolicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5807" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003470 Unsolicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3337" version="1" class="compliance">
      <metadata>
        <title>V0003470 Unsolicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5808" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003470 Unsolicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3338" version="1" class="compliance">
      <metadata>
        <title>V0003470 Unsolicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5809" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003470 Unsolicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3346" version="1" class="compliance">
      <metadata>
        <title>Media Player - Disabling Media Player for XP autom</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5224" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Media Player - Disabling Media Player for XP autom</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3347" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3348" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3349" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3347" version="1" class="compliance">
      <metadata>
        <title>V000348 Disable Media Player</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5733" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000348 Disable Media Player</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3348" version="1" class="compliance">
      <metadata>
        <title>V000348 Disable Media Player</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5735" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000348 Disable Media Player</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3349" version="1" class="compliance">
      <metadata>
        <title>V000348 Disable Media Player</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5738" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000348 Disable Media Player</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3350" version="1" class="compliance">
      <metadata>
        <title>NTLMMinServerSec</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5052" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NTLMMinServerSec</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3352" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3353" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3351" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3351" version="1" class="compliance">
      <metadata>
        <title>V0003666 VC - NTLMMinServerSec = 537395200</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23291" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003666 VC - NTLMMinServerSec = 537395200</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3352" version="1" class="compliance">
      <metadata>
        <title>V0003666 VE - NTLMMinServerSec Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5571" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003666 VE - NTLMMinServerSec Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3353" version="1" class="compliance">
      <metadata>
        <title>V0003666 TM - NTLMMinServerSec is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5572" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003666 TM - NTLMMinServerSec is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3354" version="1" class="compliance">
      <metadata>
        <title>ForceKeyProtection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5054" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>ForceKeyProtection</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3355" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3356" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3357" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3355" version="1" class="compliance">
      <metadata>
        <title>V000444 VC - ForceKeyProtection == 2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5573" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000444 VC - ForceKeyProtection == 2</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3356" version="1" class="compliance">
      <metadata>
        <title>V000444 VE - ForceKeyProtection Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5574" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000444 VE - ForceKeyProtection Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3357" version="1" class="compliance">
      <metadata>
        <title>V000444 TM - ForceKeyProtection Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5575" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000444 TM - ForceKeyProtection Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3366" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5559" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Group Policy - Registry Policy Processing</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3367" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3368" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3369" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3367" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6966" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Group Policy - Registry Policy Processing</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3368" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6967" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Group Policy - Registry Policy Processing</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3369" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6968" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Group Policy - Registry Policy Processing</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3370" version="1" class="compliance">
      <metadata>
        <title>RequireSecuritySignature (Client)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5075" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RequireSecuritySignature (Client)</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3371" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3372" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3373" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3371" version="1" class="compliance">
      <metadata>
        <title>VC - RequireSecuritySignature == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5637" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - RequireSecuritySignature == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3372" version="1" class="compliance">
      <metadata>
        <title>VE - RequireSecuritySignature Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5638" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - RequireSecuritySignature Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3373" version="1" class="compliance">
      <metadata>
        <title>TM - RequireSecuritySignature is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5639" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - RequireSecuritySignature is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3374" version="1" class="compliance">
      <metadata>
        <title>RequireSecuritySignature (Server)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5078" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RequireSecuritySignature (Server)</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3375" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3376" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3377" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3375" version="1" class="compliance">
      <metadata>
        <title>VC - RequireSecuritySignature == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5641" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - RequireSecuritySignature == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3376" version="1" class="compliance">
      <metadata>
        <title>VE - RequireSecuritySignature Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5642" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - RequireSecuritySignature Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3377" version="1" class="compliance">
      <metadata>
        <title>TM - RequireSecuritySignature is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5643" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - RequireSecuritySignature is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3378" version="1" class="compliance">
      <metadata>
        <title>restrictnullsessaccess</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="9445" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>restrictnullsessaccess</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3379" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3380" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3381" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3379" version="1" class="compliance">
      <metadata>
        <title>V0006834 VE restrictnullsessaccess</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="12250" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0006834 VE restrictnullsessaccess</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3380" version="1" class="compliance">
      <metadata>
        <title>V0006834 TM restrictnullsessaccess</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="12251" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0006834 TM restrictnullsessaccess</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3381" version="1" class="compliance">
      <metadata>
        <title>V0006834 VC restrictnullsessaccess</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="12252" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0006834 VC restrictnullsessaccess</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3382" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Length</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6812" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Minimum Password Length</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3383" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3383" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Length</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="8214" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Minimum Password Length</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3384" version="1" class="compliance">
      <metadata>
        <title>DontDisplayLastUserName ==1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6815" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DontDisplayLastUserName ==1</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3385" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3386" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3387" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3385" version="1" class="compliance">
      <metadata>
        <title>VC - DontDisplayLastUserName == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="8256" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - DontDisplayLastUserName == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3386" version="1" class="compliance">
      <metadata>
        <title>VE - DontDisplayLastUserName == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="8257" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - DontDisplayLastUserName == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3387" version="1" class="compliance">
      <metadata>
        <title>TM - DontDisplayLastUserName is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="8258" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - DontDisplayLastUserName is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3388" version="1" class="compliance">
      <metadata>
        <title>V0014228</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11474" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014228</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3389" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3390" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3391" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3389" version="1" class="compliance">
      <metadata>
        <title>V0014228 Audit the access of global system objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15362" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014228 Audit the access of global system objects</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3390" version="1" class="compliance">
      <metadata>
        <title>V0014228 Audit the access of global system objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15363" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014228 Audit the access of global system objects</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3391" version="1" class="compliance">
      <metadata>
        <title>V0014228 Audit the access of global system objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15364" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014228 Audit the access of global system objects</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3392" version="1" class="compliance">
      <metadata>
        <title>V0014229 -  Audit Backup and Restore Privileges</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11567" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014229 -  Audit Backup and Restore Privileges</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3393" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3394" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3395" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3393" version="1" class="compliance">
      <metadata>
        <title>V0014229 (Value Compare)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15715" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014229 (Value Compare)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3394" version="1" class="compliance">
      <metadata>
        <title>V0014229 (Value Exist)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15716" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014229 (Value Exist)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3395" version="1" class="compliance">
      <metadata>
        <title>V0014229 (Type Match)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15717" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014229 (Type Match)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3396" version="1" class="compliance">
      <metadata>
        <title>V0014230</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15680" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014230</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3397" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3398" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3399" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3397" version="1" class="compliance">
      <metadata>
        <title>V0014230 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24108" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014230 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3398" version="1" class="compliance">
      <metadata>
        <title>V0014230 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24109" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014230 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3399" version="1" class="compliance">
      <metadata>
        <title>V0014230 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24110" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014230 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3400" version="1" class="compliance">
      <metadata>
        <title>V0014234</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15511" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014234</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3401" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3402" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3403" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3401" version="1" class="compliance">
      <metadata>
        <title>V0014234 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23921" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014234 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3402" version="1" class="compliance">
      <metadata>
        <title>V0014234 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23922" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014234 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3403" version="1" class="compliance">
      <metadata>
        <title>V0014234 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23923" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014234 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3404" version="1" class="compliance">
      <metadata>
        <title>V0014237</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15514" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014237</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3405" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3406" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3407" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3405" version="1" class="compliance">
      <metadata>
        <title>V0014237 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23930" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014237 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3406" version="1" class="compliance">
      <metadata>
        <title>V0014237 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23931" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014237 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3407" version="1" class="compliance">
      <metadata>
        <title>V0014237 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23932" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014237 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3408" version="1" class="compliance">
      <metadata>
        <title>V0014239</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15515" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014239</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3409" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3410" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3411" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3409" version="1" class="compliance">
      <metadata>
        <title>V0014239 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23933" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014239 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3410" version="1" class="compliance">
      <metadata>
        <title>V0014239 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23934" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014239 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3411" version="1" class="compliance">
      <metadata>
        <title>V0014239 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23935" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014239 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3412" version="1" class="compliance">
      <metadata>
        <title>V0014240</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15516" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014240</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3413" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3414" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3415" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3413" version="1" class="compliance">
      <metadata>
        <title>V0014240 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23936" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014240 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3414" version="1" class="compliance">
      <metadata>
        <title>V0014240 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23937" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014240 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3415" version="1" class="compliance">
      <metadata>
        <title>V0014240 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23938" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014240 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3416" version="1" class="compliance">
      <metadata>
        <title>V0014241</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15517" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014241</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3417" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3418" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3419" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3417" version="1" class="compliance">
      <metadata>
        <title>V0014241 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23939" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014241 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3418" version="1" class="compliance">
      <metadata>
        <title>V0014241 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23940" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014241 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3419" version="1" class="compliance">
      <metadata>
        <title>V0014241 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23941" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014241 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3420" version="1" class="compliance">
      <metadata>
        <title>V0014242</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15518" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014242</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3421" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3422" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3423" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3421" version="1" class="compliance">
      <metadata>
        <title>V0014242 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23942" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014242 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3422" version="1" class="compliance">
      <metadata>
        <title>V0014242 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23943" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014242 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3423" version="1" class="compliance">
      <metadata>
        <title>V0014242 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23944" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014242 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3424" version="1" class="compliance">
      <metadata>
        <title>V0014243</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15681" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014243</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3425" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3426" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3427" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3425" version="1" class="compliance">
      <metadata>
        <title>V0014243 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24111" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014243 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3426" version="1" class="compliance">
      <metadata>
        <title>V0014243 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24112" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014243 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3427" version="1" class="compliance">
      <metadata>
        <title>V0014243 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014243 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3428" version="1" class="compliance">
      <metadata>
        <title>DisablePasswordSaving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11530" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DisablePasswordSaving</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3429" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3430" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3431" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3429" version="1" class="compliance">
      <metadata>
        <title>V0014247 - Prevent password saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15541" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014247 - Prevent password saving</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3430" version="1" class="compliance">
      <metadata>
        <title>V0014247 - Prevent password saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15542" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014247 - Prevent password saving</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3431" version="1" class="compliance">
      <metadata>
        <title>V0014247 - Prevent password saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15543" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014247 - Prevent password saving</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3432" version="1" class="compliance">
      <metadata>
        <title>V0014249</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15836" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014249</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3433" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3434" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3435" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3433" version="1" class="compliance">
      <metadata>
        <title>V0014249 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24719" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014249 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3434" version="1" class="compliance">
      <metadata>
        <title>V0014249 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24720" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014249 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3435" version="1" class="compliance">
      <metadata>
        <title>V0014249 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24721" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014249 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3436" version="1" class="compliance">
      <metadata>
        <title>RestrictRemoteClients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11532" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RestrictRemoteClients</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3437" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3438" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3439" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3437" version="2" class="compliance">
      <metadata>
        <title>RPC - Unauthenticated RPC Clients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15549" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RPC - Unauthenticated RPC Clients</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3438" version="2" class="compliance">
      <metadata>
        <title>RPC - Unauthenticated RPC Clients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15550" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RPC - Unauthenticated RPC Clients</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3439" version="2" class="compliance">
      <metadata>
        <title>RPC - Unauthenticated RPC Clients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15551" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RPC - Unauthenticated RPC Clients</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3448" version="1" class="compliance">
      <metadata>
        <title>NoWebServices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11533" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NoWebServices</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3449" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3450" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3451" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3449" version="1" class="compliance">
      <metadata>
        <title>V0014256 - NoWebServices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15552" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014256 - NoWebServices</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:344900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:344901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3450" version="1" class="compliance">
      <metadata>
        <title>V0014256  - NoWebServices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15553" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014256  - NoWebServices</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:345000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3451" version="1" class="compliance">
      <metadata>
        <title>V0014256 - NoWebServices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15554" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014256 - NoWebServices</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:345100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:345101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3460" version="1" class="compliance">
      <metadata>
        <title>V0014259</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11549" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014259</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3461" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3462" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3463" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3461" version="1" class="compliance">
      <metadata>
        <title>V0014259 Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15606" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014259 Printing Over HTTP</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3462" version="1" class="compliance">
      <metadata>
        <title>V0014259 Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15607" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014259 Printing Over HTTP</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3463" version="1" class="compliance">
      <metadata>
        <title>V0014259 Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15608" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014259 Printing Over HTTP</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3464" version="1" class="compliance">
      <metadata>
        <title>V0014260</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11571" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014260</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3465" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3466" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3467" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3465" version="1" class="compliance">
      <metadata>
        <title>V0014260   HTTP - Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15724" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014260   HTTP - Printer Drivers</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3466" version="1" class="compliance">
      <metadata>
        <title>V0014260   HTTP - Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15725" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014260   HTTP - Printer Drivers</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3467" version="1" class="compliance">
      <metadata>
        <title>V0014260   HTTP - Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15726" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014260   HTTP - Printer Drivers</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3468" version="1" class="compliance">
      <metadata>
        <title>V0014261</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11573" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014261</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3469" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3470" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3471" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3469" version="1" class="compliance">
      <metadata>
        <title>V0014261   Windows Update Device Driver Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15732" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014261   Windows Update Device Driver Searching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3470" version="1" class="compliance">
      <metadata>
        <title>V0014261   Windows Update Device Driver Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15733" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014261   Windows Update Device Driver Searching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3471" version="1" class="compliance">
      <metadata>
        <title>V0014261   Windows Update Device Driver Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15734" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014261   Windows Update Device Driver Searching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3472" version="1" class="compliance">
      <metadata>
        <title>V0015666</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11551" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015666</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3473" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3474" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3475" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3473" version="1" class="compliance">
      <metadata>
        <title>V0015666  Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15612" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015666  Windows Peer to Peer Networking</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3474" version="1" class="compliance">
      <metadata>
        <title>V0015666  Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15613" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015666  Windows Peer to Peer Networking</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347400" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347401" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3475" version="1" class="compliance">
      <metadata>
        <title>V0015666  Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15614" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015666  Windows Peer to Peer Networking</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3476" version="1" class="compliance">
      <metadata>
        <title>V0015667</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11574" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015667</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3477" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3478" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3479" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3477" version="1" class="compliance">
      <metadata>
        <title>V0015667   Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15735" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015667   Prohibit Network Bridge</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3478" version="1" class="compliance">
      <metadata>
        <title>V0015667   Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15736" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015667   Prohibit Network Bridge</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3479" version="1" class="compliance">
      <metadata>
        <title>V0015667   Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15737" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015667   Prohibit Network Bridge</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3488" version="1" class="compliance">
      <metadata>
        <title>NoInternetOpenWith</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11540" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NoInternetOpenWith</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3489" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3490" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3491" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3489" version="1" class="compliance">
      <metadata>
        <title>V0015674 - NoInternetOpenWith</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15569" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015674 - NoInternetOpenWith</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:348900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:348901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3490" version="1" class="compliance">
      <metadata>
        <title>V0015674 - NoInternetOpenWith</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15570" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015674 - NoInternetOpenWith</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3491" version="1" class="compliance">
      <metadata>
        <title>V0015674 - NoInternetOpenWith</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15571" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015674 - NoInternetOpenWith</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3496" version="1" class="compliance">
      <metadata>
        <title>V0015676</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11577" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015676</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3497" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3498" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3499" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3497" version="1" class="compliance">
      <metadata>
        <title>V0015676  Order Prints Online</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15744" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015676  Order Prints Online</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3498" version="1" class="compliance">
      <metadata>
        <title>V0015676  Order Prints Online</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15745" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015676  Order Prints Online</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3499" version="1" class="compliance">
      <metadata>
        <title>V0015676  Order Prints Online</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15746" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015676  Order Prints Online</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3500" version="1" class="compliance">
      <metadata>
        <title>LogonType</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11543" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>LogonType</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3501" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3502" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3503" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3501" version="1" class="compliance">
      <metadata>
        <title>V0015680 - LogonType</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15581" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015680 - LogonType</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3502" version="1" class="compliance">
      <metadata>
        <title>V0015680 - LogonType</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15582" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015680 - LogonType</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3503" version="1" class="compliance">
      <metadata>
        <title>V0015680 - LogonType</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15583" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015680 - LogonType</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3504" version="1" class="compliance">
      <metadata>
        <title>V0015682</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11579" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015682</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3505" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3506" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3507" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3505" version="1" class="compliance">
      <metadata>
        <title>V0015682  RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15750" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015682  RSS Attachment Downloads</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3506" version="1" class="compliance">
      <metadata>
        <title>V0015682  RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15751" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015682  RSS Attachment Downloads</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3507" version="1" class="compliance">
      <metadata>
        <title>V0015682  RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15752" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015682  RSS Attachment Downloads</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3508" version="1" class="compliance">
      <metadata>
        <title>PreXPSP2ShellProtocolBehavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11544" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>PreXPSP2ShellProtocolBehavior</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3509" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3510" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3511" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3509" version="1" class="compliance">
      <metadata>
        <title>V0015683 - PreXPSP2ShellProtocolBehavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15584" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015683 - PreXPSP2ShellProtocolBehavior</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3510" version="1" class="compliance">
      <metadata>
        <title>V0015683 - PreXPSP2ShellProtocolBehavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15585" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015683 - PreXPSP2ShellProtocolBehavior</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3511" version="1" class="compliance">
      <metadata>
        <title>V0015683 - PreXPSP2ShellProtocolBehavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15586" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015683 - PreXPSP2ShellProtocolBehavior</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3512" version="1" class="compliance">
      <metadata>
        <title>V0015684</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11557" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015684</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3513" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3514" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3515" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3513" version="2" class="compliance">
      <metadata>
        <title>V0015684   Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15633" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015684   Windows Installer - IE Security Prompt</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3514" version="2" class="compliance">
      <metadata>
        <title>V0015684   Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15634" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015684   Windows Installer - IE Security Prompt</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3515" version="2" class="compliance">
      <metadata>
        <title>V0015684   Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15635" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015684   Windows Installer - IE Security Prompt</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3516" version="1" class="compliance">
      <metadata>
        <title>V0015685</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11580" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015685</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3517" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3518" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3519" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3517" version="2" class="compliance">
      <metadata>
        <title>V0015685  Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15753" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015685  Windows Installer - User Control</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3518" version="2" class="compliance">
      <metadata>
        <title>V0015685  Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15754" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015685  Windows Installer - User Control</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3519" version="2" class="compliance">
      <metadata>
        <title>V0015685  Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15755" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015685  Windows Installer - User Control</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3520" version="1" class="compliance">
      <metadata>
        <title>DisableLUAPatching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11545" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DisableLUAPatching</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3521" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3522" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3523" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3521" version="1" class="compliance">
      <metadata>
        <title>V0015686 - DisableLUAPatching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15587" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015686 - DisableLUAPatching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3522" version="1" class="compliance">
      <metadata>
        <title>V0015686 - DisableLUAPatching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15588" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015686 - DisableLUAPatching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3523" version="1" class="compliance">
      <metadata>
        <title>V0015686 - DisableLUAPatching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15589" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015686 - DisableLUAPatching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3528" version="1" class="compliance">
      <metadata>
        <title>V0015696</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15827" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3529" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3530" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3531" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3532" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3533" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3534" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3535" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3536" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3537" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3538" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3539" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3540" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3529" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Compare AllowLLTDIOOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24492" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Compare AllowLLTDIOOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3530" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Compare AllowLLTDIOOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24493" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Compare AllowLLTDIOOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3531" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Compare EnableLLTDIO</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24494" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Compare EnableLLTDIO</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3532" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Compare ProhibitLLTDIOOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24495" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Compare ProhibitLLTDIOOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3533" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Exist AllowLLTDIOOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24496" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Exist AllowLLTDIOOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3534" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Exist AllowLLTDIOOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24497" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Exist AllowLLTDIOOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3535" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Exist EnableLLTDIO</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24498" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Exist EnableLLTDIO</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3536" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Exist ProhibitLLTDIOOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24499" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Exist ProhibitLLTDIOOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3537" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Type AllowLLTDIOOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24500" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Type AllowLLTDIOOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3538" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Type AllowLLTDIOOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24501" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Type AllowLLTDIOOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3539" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Type EnableLLTDIO</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24502" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Type EnableLLTDIO</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3540" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Type ProhibitLLTDIOOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24503" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Type ProhibitLLTDIOOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3541" version="1" class="compliance">
      <metadata>
        <title>V0015697</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15828" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3542" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3543" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3544" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3545" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3546" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3547" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3548" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3549" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3550" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3551" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3552" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3553" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3542" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Compare AllowRspndrOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Compare AllowRspndrOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3543" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Compare AllowRspndrOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24505" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Compare AllowRspndrOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3544" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Compare EnableRspndr</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24506" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Compare EnableRspndr</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354400" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354401" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3545" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Compare ProhibitRspndrOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24507" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Compare ProhibitRspndrOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3546" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Exist AllowRspndrOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24508" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Exist AllowRspndrOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3547" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Exist AllowRspndrOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24509" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Exist AllowRspndrOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3548" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Exist EnableRspndr</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24510" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Exist EnableRspndr</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3549" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Exist ProhibitRspndrOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24511" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Exist ProhibitRspndrOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3550" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Type AllowRspndrOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24512" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Type AllowRspndrOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3551" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Type AllowRspndrOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24513" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Type AllowRspndrOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3552" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Type EnableRspndr</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24514" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Type EnableRspndr</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3553" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Type ProhibitRspndrOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24515" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Type ProhibitRspndrOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3554" version="1" class="compliance">
      <metadata>
        <title>V0015698</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15829" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3555" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3556" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3557" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3558" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3559" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3560" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3561" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3562" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3563" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3564" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3565" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3566" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3567" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3568" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3569" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3555" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare DisableFlashConfigRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24516" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare DisableFlashConfigRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3556" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare DisableInBand802DOT11Regist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24517" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare DisableInBand802DOT11Regist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3557" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare DisableUPnPRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24518" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare DisableUPnPRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3558" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare DisableWPDRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24519" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare DisableWPDRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3559" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare EnableRegistrars</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24520" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare EnableRegistrars</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3560" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist DisableFlashConfigRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24521" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist DisableFlashConfigRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3561" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist DisableInBand802DOT11Registra</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24522" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist DisableInBand802DOT11Registra</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3562" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist DisableUPnPRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24523" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist DisableUPnPRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3563" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist DisableWPDRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24524" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist DisableWPDRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3564" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist EnableRegistrars</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24525" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist EnableRegistrars</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3565" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type DisableFlashConfigRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24526" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type DisableFlashConfigRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3566" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type DisableInBand802DOT11Registrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24527" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type DisableInBand802DOT11Registrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3567" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type DisableUPnPRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24528" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type DisableUPnPRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3568" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type DisableWPDRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24529" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type DisableWPDRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3569" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type EnableRegistrars</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24530" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type EnableRegistrars</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3570" version="1" class="compliance">
      <metadata>
        <title>V0015699</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15830" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015699</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3571" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3572" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3573" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3571" version="1" class="compliance">
      <metadata>
        <title>V0015699 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24531" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015699 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3572" version="1" class="compliance">
      <metadata>
        <title>V0015699 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24532" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015699 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3573" version="1" class="compliance">
      <metadata>
        <title>V0015699 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24533" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015699 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3574" version="1" class="compliance">
      <metadata>
        <title>V0015703</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15686" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015703</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3575" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3576" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3577" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3575" version="1" class="compliance">
      <metadata>
        <title>V0015703 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24126" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015703 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3576" version="1" class="compliance">
      <metadata>
        <title>V0015703 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24127" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015703 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3577" version="1" class="compliance">
      <metadata>
        <title>V0015703 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24128" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015703 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3578" version="1" class="compliance">
      <metadata>
        <title>V0015707</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15837" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015707</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3579" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3580" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3581" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3579" version="1" class="compliance">
      <metadata>
        <title>V0015707 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24722" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015707 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3580" version="1" class="compliance">
      <metadata>
        <title>V0015707 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24723" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015707 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3581" version="1" class="compliance">
      <metadata>
        <title>V0015707 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24724" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015707 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3582" version="1" class="compliance">
      <metadata>
        <title>V0015713</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15775" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015713</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3583" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3584" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3585" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3583" version="1" class="compliance">
      <metadata>
        <title>V0015713 Value Compare 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24238" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015713 Value Compare 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3584" version="1" class="compliance">
      <metadata>
        <title>V0015713 Value Compare 2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24239" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015713 Value Compare 2</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358400" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358401" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3585" version="1" class="compliance">
      <metadata>
        <title>V0015713 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24240" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015713 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3594" version="1" class="compliance">
      <metadata>
        <title>V0015718</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15780" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015718</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3595" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3596" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3597" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3595" version="1" class="compliance">
      <metadata>
        <title>V0015718 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24253" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015718 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3596" version="1" class="compliance">
      <metadata>
        <title>V0015718 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24254" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015718 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3597" version="1" class="compliance">
      <metadata>
        <title>V0015718 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24255" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015718 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3609" version="1" class="compliance">
      <metadata>
        <title>V0017374/V0016008</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15519" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0017374/V0016008</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3610" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3611" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3612" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3610" version="1" class="compliance">
      <metadata>
        <title>V0017374/V0016008 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23945" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0017374/V0016008 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3611" version="1" class="compliance">
      <metadata>
        <title>V0017374/V0016008 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23946" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0017374/V0016008 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3612" version="1" class="compliance">
      <metadata>
        <title>V0017374/V0016008 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23947" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0017374/V0016008 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3613" version="1" class="compliance">
      <metadata>
        <title>V0016020</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15819" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0016020</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3614" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3615" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3616" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3614" version="1" class="compliance">
      <metadata>
        <title>V0016020 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24350" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0016020 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361400" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361401" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3615" version="1" class="compliance">
      <metadata>
        <title>V0016020 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24351" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0016020 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3616" version="1" class="compliance">
      <metadata>
        <title>V0016020 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24352" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0016020 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4341" version="4" class="compliance">
      <!--This check for the Deny log on as a batch will return an Unknown with Policy Auditor 5.3 due a case sensitivity issue with user right name as defined in the schema - sedenybatchLogonright.-->
      <metadata>
        <title>UR: Deny log on as a batch job - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26483" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10596-5" />
        <description>The Deny log on as a batch job user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4342" comment="Deny log on as a batch job - Non-Domain Systems." />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4343" comment="Deny log on as a batch job - Domain Joined Systems." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4342" version="3" class="compliance">
      <metadata>
        <title>UR: Deny log on as a batch job - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26483" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on as a batch job user right on member servers must be configured to prevent unauthenticated access on non-domain systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4982" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311100" comment="Deny log on as a batch job - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4343" version="4" class="compliance">
      <metadata>
        <title>UR: Deny log on as a batch job - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26483" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on as a batch job user right on member servers must be configured to prevent access from highly privileged domain accounts and unauthenticated access on domain systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="System is a member of a domain" definition_ref="oval:mil.disa.fso.windows:def:4982" negate="true" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311100" comment="Deny log on as a batch job - Guests" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:434300" comment="Deny log on as a batch job - Domain Admins" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:434301" comment="Deny log on as a batch job - Enterprise Admins" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4344" version="2" class="compliance">
      <metadata>
        <title>UR: Deny log on as a service - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26484" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10226-9" />
        <description>The Deny log on as a service user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems. No other groups or accounts must be assigned this right.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4345" comment="Deny log on as a service - Non-Domain Systems." />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4346" comment="Deny log on as a service - Domain Joined Systems." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4345" version="3" class="compliance">
      <metadata>
        <title>UR: Deny log on as a service - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26484" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on as a service user right on non-domain systems must be configured to include no accounts or groups.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4982" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311200" comment="Deny log on as a service - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4346" version="4" class="compliance">
      <metadata>
        <title>UR: Deny log on as a service - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26484" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on as a service user right on on domain systems must be configured to prevent access from highly privileged domain accounts on domain systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="System is a member of a domain" definition_ref="oval:mil.disa.fso.windows:def:4982" negate="true" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:434600" comment="Deny log on as a service - Domain Admins" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:434601" comment="Deny log on as a service - Enterprise Admins" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4347" version="2" class="compliance">
      <metadata>
        <title>UR: Deny log on locally - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26485" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10750-8" />
        <description>The Deny log on locally user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4348" comment="Deny log on locally - Non-Domain Systems." />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4349" comment="Deny log on locally - Domain Joined Systems." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4348" version="3" class="compliance">
      <metadata>
        <title>UR: Deny log on locally - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26485" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on locally user right on member servers must be configured to prevent unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4982" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311300" comment="Deny log on locally - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4349" version="4" class="compliance">
      <metadata>
        <title>UR: Deny log on locally - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26485" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on locally user right on member servers must be configured to prevent access from highly privileged domain accounts and unauthenticated access on domain systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="System is a member of a domain" definition_ref="oval:mil.disa.fso.windows:def:4982" negate="true" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311300" comment="Deny log on locally - Guests" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:434900" comment="Deny log on locally - Domain Admins" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:434901" comment="Deny log on locally - Enterprise Admins" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4350" version="4" class="compliance">
      <metadata>
        <title>Local admin accounts filtered token policy enabled on domain systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="36439" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4982" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:435000" comment="Verifies local admin accounts filtered token policy is enabled on domain systems" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4731" version="3" class="compliance">
      <metadata>
        <title>Fax Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26600" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25383-1" />
        <description>The Fax service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473100" comment="Verifies the Fax service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473101" comment="Verifies the Fax service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4732" version="2" class="compliance">
      <metadata>
        <title>Microsoft FTP Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26602" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23863-4" />
        <description>The Microsoft FTP service must not be installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473200" comment="Verifies the Microsoft FTP service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473201" comment="Verifies the Microsoft FTP service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4737" version="3" class="compliance">
      <metadata>
        <title>UR: Manage auditing and security log</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>Unauthorized accounts must not have the Manage auditing and security log user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473700" comment="Manage auditing and security log - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4768" version="3" class="compliance">
      <metadata>
        <title>UR: Deny access to this computer from the network - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1155" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10733-4" />
        <description>The Deny access to this computer from the network user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4769" comment="Deny access to this computer from the network - Non-Domain Systems" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4770" comment="Deny access to this computer from the network - Domain Joined Systems" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4769" version="2" class="compliance">
      <metadata>
        <title>UR: Deny access to this computer from the network - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1155" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny access to this computer from the network user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4982" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:293200" comment="Deny access to this computer from the network - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4770" version="8" class="compliance">
      <metadata>
        <title>UR: Deny access to this computer from the network - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1155" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny access to this computer from the network user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="System is a member of a domain" definition_ref="oval:mil.disa.fso.windows:def:4982" negate="true" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:293200" comment="Deny access to this computer from the network - Guests" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:293201" comment="Deny access to this computer from the network - Domain Admins" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:293202" comment="Deny access to this computer from the network - Enterprise Admins" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4771" version="1" class="compliance">
      <metadata>
        <title>UR: Deny log on through Remote Desktop Services - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26486" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10878-7" />
        <description>The Deny log on through Remote Desktop Services user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4772" comment="Deny log on through Remote Desktop Services - Non-Domain Systems" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4773" comment="Deny log on through Remote Desktop Services - Domain Joined Systems" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4772" version="2" class="compliance">
      <metadata>
        <title>UR: Deny log on through Remote Desktop Services - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26486" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on through Remote Desktop Services user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4982" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311400" comment="Deny log on through Remote Desktop Services - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4773" version="5" class="compliance">
      <metadata>
        <title>UR: Deny log on through Remote Desktop Services - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26486" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on through Remote Desktop Services user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="System is not a member of a domain" definition_ref="oval:mil.disa.fso.windows:def:4982" negate="true" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311400" comment="Deny log on through Remote Desktop Services - Guests" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311401" comment="Deny log on through Remote Desktop Services - Domain Admins" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311402" comment="Deny log on through Remote Desktop Services - Enterprise Admins" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311408" comment="Deny log on through Remote Desktop Services - Local Account" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4792" version="1" class="compliance">
      <metadata>
        <title>Always Install with Elevated Privileges Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="34974" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="CCE" ref_url="http://cce.mitre.org" ref_id="CCE-12401-6" />
        <description>The Windows Installer Always install with elevated privileges must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:479200" comment="Verifies 'Always install with elevated privileges' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4834" version="3" class="compliance">
      <metadata>
        <title>WINPK-000001 DoD Root Certificate. Win2008R2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="32272" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The DoD Root Certificate must be installed into the Trusted Root Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4874" comment="The External CA Root Certificate must be installed into the Trusted Root Store." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4835" version="3" class="compliance">
      <metadata>
        <title>WINPK-000003 DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate. Windows 2008R2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="32274" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4876" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4836" version="3" class="compliance">
      <metadata>
        <title>The US DoD CCEB Interoperability Root CA cross-certificates must be installed in the Untrusted Certificates Store. Win2008R2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="40237" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4877" comment="US DoD CCEB Interoperability cross-certs must be installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4874" version="4" class="compliance">
      <metadata>
        <title>WINPK-000001 DoD Root Certificate</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The DoD Root Certificate must be installed into the Trusted Root Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487400" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487401" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487402" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487403" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487404" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487405" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487406" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487407" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487408" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487409" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487410" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487411" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4876" version="5" class="compliance">
      <metadata>
        <title>WINPK-000003 DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487600" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487601" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487602" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487603" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487604" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487605" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487606" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487607" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487608" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487609" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487610" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487611" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4877" version="336" class="compliance">
      <metadata>
        <title>WINPK-000004</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487704" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487705" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487706" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487707" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4982" version="1" class="compliance">
      <metadata>
        <title>Standalone Workstation/Server System</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <description>The system is not a member of a domain.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:498200" comment="System is not a member of a domain" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:5144" version="1" class="compliance">
      <metadata>
        <title>UR: Allow log on through Remote Desktop Services</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26473" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10858-9" />
        <description>Unauthorized accounts must not have the Allow log on through Remote Desktop Services user right.</description>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:514401" comment="Is the Remote Desktop Services role installed" negate="true" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:514400" comment="Allow log on through Remote Desktop Services - Administrators" />
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:514401" comment="Is the Remote Desktop Services role installed" negate="false" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:514402" comment="Allow log on through Remote Desktop Services - Administrators and Remote Desktop Users group" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:5146" version="2" class="compliance">
      <metadata>
        <title>The Peer Networking Identity Manager service must be disabled if installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26604" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514600" comment="The Peer Networking Identity Manager, if installed, must be disabled." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514601" comment="If the Peer Networking Identity Manager is uninstalled, it does not apply." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:5147" version="1" class="compliance">
      <metadata>
        <title>The Simple TCP/IP Services service must be disabled if installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <description>Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514700" comment="Simple TCP/IP Services, if installed, must be disabled." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514701" comment="If the Simple TCP/IP Services is uninstalled, it does not apply." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:5148" version="2" class="compliance">
      <metadata>
        <title>The Telnet service must be disabled if installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <reference source="DISA" ref_id="26606" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514800" comment="The Telnet service, if installed, must be disabled." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514801" comment="If the Telnet service is uninstalled, it does not apply." />
      </criteria>
    </definition>
  </definitions>
  <tests>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:290800" version="5" comment="The OS Build is equal to or greater than 7601" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:290800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:290800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:290900" version="3" comment="'Shutdown: Allow system to be shutdown without having to log on' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:290900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291100" version="2" check="all" comment="Local volumes are formatted using NTFS">
      <object object_ref="oval:mil.disa.fso.windows:obj:291100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291100" />
    </wmi_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291200" version="1" comment="Legal Notice is configured with the required text." check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291201" version="1" comment="Legal Notice is configured with the required text." check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291201" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291300" version="1" comment="'Interactive Logon: Number of previous logons to cache (in case domain controller is not available)' is set to '2' logons or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291400" version="1" comment="'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291500" version="4" comment="'Account lockout threshold' is set to '3' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291500" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291501" version="7" comment="'Account lockout threshold' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291501" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291600" version="6" comment="'Reset account lockout counter after' is set to at least '60' minutes" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291600" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291700" version="7" comment="'Account lockout duration' is set to '0'" check_existence="at_least_one_exists" state_operator="OR" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291701" />
    </lockoutpolicy_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291800" version="2" check="all" comment="Act as part of the operating system - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291800" />
    </accesstoken_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291900" version="3" comment="'Maximum Password Age' is set to '60' days or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291900" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291901" version="3" comment="'Maximum Password Age' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291901" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292100" version="3" comment="'Enforce password history' is set to '24' passwords or more" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292100" />
    </passwordpolicy_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292200" version="3" comment="'Accounts: Guest account status' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292201" />
    </user_test>
    <sid_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292201" version="2" comment="The built-in guest account does not exist" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292201" />
    </sid_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292300" version="3" comment="'Accounts: Rename guest account' is set to a value other than 'Guest'" check_existence="at_least_one_exists" check="none satisfy">
      <object object_ref="oval:mil.disa.fso.windows:obj:292200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292300" />
    </user_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292400" version="3" comment="'Accounts: Rename administrator account' is set to a value other than 'Administrator'" check_existence="at_least_one_exists" check="none satisfy">
      <object object_ref="oval:mil.disa.fso.windows:obj:292400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292401" />
    </user_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292700" version="3" comment="MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292701" version="3" comment="The automatic logon password registry value (DefaultPassword) does not exist" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292701" />
    </registry_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292800" version="3" comment="'Password must meet complexity requirements' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292800" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292900" version="1" comment="'Devices: Prevent users from installing printer drivers' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:293200" version="2" check="all" comment="Deny access to this computer from the network - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:293200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:293200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:293201" version="1" comment="Deny access to this computer from the network - Domain Admins" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:434300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:293200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:293202" version="2" comment="Deny access to this computer from the network - Enterprise Admins" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:434303" />
      <state state_ref="oval:mil.disa.fso.windows:ste:293200" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:293300" version="4" comment="'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:293300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:293300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:293301" version="3" comment="'Interactive logon: Smart card removal behavior' is set to 'Force Logoff'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:293300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:293301" />
    </registry_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294500" version="3" comment="'Store password using reversible encryption' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294500" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294700" version="3" comment="'Network access: Named Pipes that can be accessed anonymously' is configured to contain no values" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294800" version="4" comment="'Network access: Remotely accessible registry paths' is configured to contain no entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294801" version="4" comment="'Network access: Remotely accessible registry paths' is configured to contain authorized registry paths" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294801" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294802" version="3" comment="'Network access: Remotely accessible registry paths' is is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294900" version="4" comment="'Network access: Shares that can be accessed anonymously' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294901" version="4" comment="'Network access: Shares that can be accessed anonymously' is blank" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:295300" version="3" check="all" comment="'Domain member: Maximum machine account password age' is set to '30' days or less">
      <object object_ref="oval:mil.disa.fso.windows:obj:295300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:295300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:295301" version="3" check="all" comment="'Domain member: Maximum machine account password age' is not set to '0'">
      <object object_ref="oval:mil.disa.fso.windows:obj:295300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:295301" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:295600" version="3" comment="'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:295600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:295900" version="3" comment="'Network security: Force logoff when logon hours expire' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:295900" />
    </lockoutpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:296400" version="3" comment="'Restrict Remote Desktop Services users to a Single Remote Desktop Services Session' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:296400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:296500" version="3" comment="'Always prompt for password upon connection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:296500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297100" version="2" comment="'Turn Off Background Refresh of Group Policy' is set to 'Disabled'" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297101" version="1" comment="'DisableBkGndGroupPolicy' registry value is set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297500" version="3" comment="'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297800" version="3" comment="'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 90 percent or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:297800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297900" version="3" comment="'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298000" version="3" comment="'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298100" version="3" comment="'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298200" version="3" comment="'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to '300000 or 5 minutes (recommended)' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298300" version="3" comment="'MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298400" version="3" comment="'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298500" version="3" comment="'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 5 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298600" version="4" comment="'Network access: Remotely accessible registry paths and sub paths' is configured and contains authorized entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298601" version="3" comment="'Network access: Remotely accessible registry paths and sub paths' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298602" version="3" comment="'Network access: Remotely accessible registry paths and sub paths' is configured but contains no entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298800" version="4" check="all" comment="'System Settings: Optional Subsystems' is blank" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:298800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:299000" version="3" comment="'Require secure RPC communication' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:299000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:299200" version="3" comment="'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:299200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300300" version="3" comment="'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic' is set to 'Only ISAKMP is exempt (recommended for Windows Server 2003)'" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300500" version="3" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for credentials on the secure desktop'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300501" version="3" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300502" version="3" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for credentials'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300503" version="3" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:300503" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300600" version="3" comment="'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:302900" version="3" comment="'Turn off Event Viewer “Events.asp' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:302900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304000" version="1" comment="'Do Not Show First Use Dialog Boxes' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304500" version="3" comment="'Allow remote access to the Plug and Play interface' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304600" version="3" comment="'Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304700" version="3" comment="'Do not send a Windows error report when a generic driver is installed on a device' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304900" version="3" comment="'Turn off handwriting recognition error reporting' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:305000" version="3" comment="'Require a Password When a Computer Wakes (On Battery)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:305000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:305100" version="3" comment="'Require a Password When a Computer Wakes (Plugged In)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:305100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:305300" version="3" comment="'Turn off downloading of game information' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:305300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306000" version="1" comment="'Prevent Windows Media DRM Internet Access' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306100" version="3" comment="Software certificate installation files (*.p12 *.pfx) are not present on the system" check="none exist" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:306100" />
    </file_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306200" version="3" comment="'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306400" version="3" comment="'Do not allow COM port redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306500" version="3" comment="'Do not allow LPT port redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306600" version="3" comment="'Do not allow supported Plug and Play device redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306700" version="3" comment="'Do not allow smart card device redirection' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306800" version="3" comment="'Redirect only the default client printer' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307200" version="3" check="all" comment="Debug Programs - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:307200" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307300" version="3" comment="'Microsoft network server: Server SPN target name validation level' is set to 'Off'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307400" version="3" comment="'Network Security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307500" version="3" comment="'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307600" version="3" comment="'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307700" version="3" comment="'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'RC4_HMAC_MD5', 'AES128_HMAC_SHA1', 'AES256_HMAC_SHA1', 'Future encryption types'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:307700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307800" version="3" comment="'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307900" version="3" comment="'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308000" version="3" comment="'Require domain users to elevate when setting a network's location' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308100" version="3" comment="'Route all traffic through the internal network' is set to 'Enabled: Enabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:308100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308200" version="3" comment="'Extend Point and Print connection to search Windows Update' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308300" version="3" comment="'Prevent device metadata retrieval from internet' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308400" version="3" comment="'Specify search order for device driver source locations' is set to 'Enabled: Do not search Windows Update'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308500" version="3" comment="'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308600" version="3" comment="'Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308700" version="3" comment="'Enable/Disable PerfTrack' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308800" version="3" comment="'Turn off Program Inventory' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308900" version="3" comment="'Turn off Autoplay for non-volume devices' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309000" version="3" comment="'Turn off game updates' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309100" version="3" comment="'Prevent the computer from joining a homegroup' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309200" version="3" comment="'Prevent Windows Anytime Upgrade from running' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309300" version="3" comment="'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309400" version="3" comment="'Default behavior for AutoRun' is set to 'Enabled:Do not execute any autorun commands'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309500" version="3" comment="'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309600" version="1" comment="Legal Notice Caption - DoD Notice and Consent Banner" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:309600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309601" version="1" comment="Legal Notice Caption - US Department of Defense Warning Statement" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:309601" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309800" version="2" check="all" comment="Access this computer from the network - Administrators, Authenticated Users">
      <object object_ref="oval:mil.disa.fso.windows:obj:309801" />
      <state state_ref="oval:mil.disa.fso.windows:ste:309800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310000" version="2" check="all" comment="Allow log on locally - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310200" version="2" check="all" comment="Back up files and directories - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310300" version="2" check="all" comment="Bypass traverse checking - Administrators, Authenticated Users, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310400" version="2" check="all" comment="Change the system time - Administrators, Local Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310500" version="2" check="all" comment="Change the time zone - Administrators, Local Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310600" version="2" check="all" comment="Create a pagefile - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310700" version="2" check="all" comment="Create a token object - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310800" version="2" check="all" comment="Create global objects - Administrators, Service, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310900" version="2" check="all" comment="Create permanent shared objects - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310900" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311000" version="3" check="all" comment="Create symbolic links - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311000" />
    </accesstoken_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311001" version="2" check="all" comment="verify hyper-v role installed" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:311001" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311001" />
    </wmi_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311002" version="3" check="all" comment="Create symbolic links - VMs/admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:311002" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311100" version="1" check="all" comment="Deny log on as a batch job - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:293200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311200" version="2" check="all" comment="Deny log on as a service - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311300" version="2" check="all" comment="Deny log on locally - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:293200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311400" version="1" comment="Deny log on through Remote Desktop Services - Guests" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:293200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311401" version="1" comment="Deny log on through Remote Desktop Services - Domain Admins" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:434300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311402" version="2" comment="Deny log on through Remote Desktop Services - Enterprise Admins" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:434303" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311408" version="2" comment="Deny log on through Remote Desktop Services - Local account" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:293214" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311500" version="2" check="all" comment="Enable computer and user accounts to be trusted for delegation - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311600" version="2" check="all" comment="Force shutdown from a remote system - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311700" version="2" check="all" comment="Generate security audits - Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:311700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311800" version="2" check="all" comment="Impersonate a client after authentication - Administrators, Service, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312000" version="2" check="all" comment="Increase scheduling priority - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312100" version="2" check="all" comment="Load and unload device drivers - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312200" version="2" check="all" comment="Lock pages in memory - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312500" version="2" check="all" comment="Modify an object label - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312600" version="2" check="all" comment="Modify firmware environment values - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312700" version="2" check="all" comment="Perform volume maintenance tasks - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312800" version="2" check="all" comment="Profile single process - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312900" version="2" check="all" comment="Profile system performance - Administrators, NT Service\WdiServiceHost">
      <object object_ref="oval:mil.disa.fso.windows:obj:312900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312900" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313000" version="2" check="all" comment="Remove computer from docking station - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313100" version="2" check="all" comment="Replace a process level token - Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:311700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313200" version="2" check="all" comment="Restore files and directories - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313300" version="3" check="all" comment="Shut down the system - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313400" version="2" check="all" comment="Take ownership of files or other objects - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313400" />
    </accesstoken_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313500" version="1" check="all" comment="Audit - Credential Validation - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313501" version="1" check="all" comment="Audit - Credential Validation - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313600" version="1" check="all" comment="Audit - Credential Validation - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313700" version="1" check="all" comment="Audit - Computer Account Management - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313701" version="1" check="all" comment="Audit - Computer Account Management - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313701" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313800" version="1" check="all" comment="Audit - Computer Account Management - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313900" version="2" check="all" comment="Audit - Other Account Management Events - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313901" version="2" check="all" comment="Audit - Other Account Management Events - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313901" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314000" version="2" check="all" comment="Audit - Other Account Management Events - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314000" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314100" version="1" check="all" comment="Audit - Security Group Management - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314101" version="1" check="all" comment="Audit - Security Group Management - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314101" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314200" version="1" check="all" comment="Audit - Security Group Management - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314300" version="1" check="all" comment="Audit - User Account Management - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314301" version="1" check="all" comment="Audit - User Account Management - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314301" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314400" version="1" check="all" comment="Audit - User Account Management - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314500" version="1" check="all" comment="Audit - Process Creation - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314501" version="1" check="all" comment="Audit - Process Creation - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314600" version="1" check="all" comment="Audit - Logoff - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314601" version="1" check="all" comment="Audit - Logoff - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314601" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314700" version="1" check="all" comment="Audit - Logon - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314701" version="1" check="all" comment="Audit - Logon - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314701" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314800" version="1" check="all" comment="Audit - Logon - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314900" version="1" check="all" comment="Audit - Special Logon - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314901" version="1" check="all" comment="Audit - Special Logon - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314901" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315200" version="1" check="all" comment="Audit - Audit Policy Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315201" version="1" check="all" comment="Audit - Audit Policy Change - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315201" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315300" version="1" check="all" comment="Audit - Audit Policy Change - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315400" version="1" check="all" comment="Audit - Authentication Policy Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315401" version="1" check="all" comment="Audit - Authentication Policy Change - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315401" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315500" version="1" check="all" comment="Audit - Sensitive Privilege Use - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315501" version="1" check="all" comment="Audit - Sensitive Privilege Use - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315600" version="1" check="all" comment="Audit - Sensitive Privilege Use - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315700" version="1" check="all" comment="Audit - IPSec Driver - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315701" version="1" check="all" comment="Audit - IPSec Driver - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315701" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315800" version="1" check="all" comment="Audit - IPSec Driver - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315900" version="1" check="all" comment="Audit - Security State Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315901" version="1" check="all" comment="Audit - Security State Change - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315901" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316000" version="1" check="all" comment="Audit - Security State Change - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316000" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316100" version="1" check="all" comment="Audit - Security System Extension - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316101" version="1" check="all" comment="Audit - Security System Extension - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316101" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316200" version="1" check="all" comment="Audit - Security System Extension - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316300" version="1" check="all" comment="Audit - System Integrity - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316301" version="1" check="all" comment="Audit - System Integrity - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316301" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316400" version="1" check="all" comment="Audit - System Integrity - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316400" />
    </auditeventpolicysubcategories_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316500" version="3" comment="'Set 6to4 State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316600" version="3" comment="'IP-HTTPS State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316601" version="3" comment="'IPHTTPS URL:' is set to 'about:blank'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316601" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316601" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316700" version="4" comment="'ISATAP State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316800" version="3" comment="'Teredo State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316900" version="3" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:317000" version="3" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:196608'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:317000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:317000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:317100" version="3" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:317100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:317200" version="3" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:317200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:317300" version="3" comment="'Prevent Windows from sending an error report when a device driver requests additional software during installation' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:317300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:318900" version="2" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318900" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:320700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:321100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:321100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:317800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:324900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:325700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:326100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326500" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:329800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:331300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:335500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
    </registry_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338300" version="2" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:338300" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:339300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:339500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:343700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:343700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:343700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:343700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:343700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:344900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:344901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:345000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:345100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:345101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347300" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347400" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347401" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:348900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:348901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:350100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353300" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353500" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354400" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354401" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356300" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:358300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358400" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:358400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358401" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361400" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361401" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361500" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:434200" version="2" check="all" comment="System is not a member of a domain">
      <object object_ref="oval:mil.disa.fso.windows:obj:434200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:434200" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:434300" version="1" check="all" comment="Deny log on as a batch job - Domain Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:434300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:434301" version="2" check="all" comment="Deny log on as a batch job - Enterprise Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:434303" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:434600" version="1" check="all" comment="Deny log on as a service - Domain Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:434300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311201" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:434601" version="2" check="all" comment="Deny log on as a service - Enterprise Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:434303" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311201" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:434900" version="1" check="all" comment="Deny log on locally - Domain Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:434300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:434901" version="2" check="all" comment="Deny log on as a locally - Enterprise Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:434303" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311300" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:435000" version="2" comment="Local admin accounts filtered token policy is enabled on domain systems" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:435000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473100" version="1" comment="The Fax service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473101" version="1" comment="The Fax service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473200" version="1" comment="The Microsoft FTP service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473201" version="1" comment="The Microsoft FTP service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473200" />
    </wmi_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473700" version="2" check_existence="any_exist" check="all" comment="Manage auditing and security log - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473700" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:479200" version="1" comment="'Always install with elevated privileges' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:479200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487400" version="3" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487401" version="3" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487401" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487402" version="3" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487402" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487403" version="3" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487403" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487404" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487404" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487405" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487405" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487406" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487406" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487407" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487407" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487408" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487408" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487409" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487409" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487410" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487410" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487411" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487411" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487600" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487601" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487601" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487602" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487602" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487603" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487603" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487604" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487604" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487605" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487605" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487606" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487606" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487607" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487607" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487608" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487608" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487609" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487609" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487610" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487610" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487611" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487611" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487704" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487704" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487705" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487705" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487706" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487706" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487707" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487707" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498200" state_operator="OR" version="1" comment="System is not a member of a domain" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498203" />
    </wmi_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514400" version="1" check="all" comment="Allow log on through Remote Desktop Services - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310100" />
    </accesstoken_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514401" version="1" check="all" comment="Is the Remote Desktop Service role installed" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:514401" />
      <state state_ref="oval:mil.disa.fso.windows:ste:514401" />
    </wmi57_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514402" version="1" check="all" comment="Allow log on through Remote Desktop Services - Administrators and Remote Desktop Users">
      <object object_ref="oval:mil.disa.fso.windows:obj:514400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310100" />
    </accesstoken_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514600" version="1" comment="The Peer Networking Identity Manager, if installed, must be disabled." check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:514600" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514601" version="1" comment="If the Peer Networking Identity Manager is uninstalled, it does not apply." check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514600" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514700" version="1" comment="Simple TCP/IP Services, if installed, must be disabled." check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:514700" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514701" version="1" comment="If Simple TCP/IP Services is uninstalled, it does not apply." check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514700" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514800" version="1" comment="The Telnet service, if installed, must be disabled." check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:514800" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514801" version="1" comment="If the Telnet service is uninstalled, it does not apply." check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514800" />
    </wmi57_test>
  </tests>
  <objects>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:290800" version="3">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion</key>
      <name datatype="string">CurrentBuildNumber</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:290900" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string" operation="equals">shutdownwithoutlogon</name>
    </registry_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291100" version="1" comment="All 'Local Disk' File systems">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT filesystem FROM win32_logicaldisk WHERE drivetype=3</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LegalNoticeText</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">CachedLogonsCount</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">RestrictAnonymous</name>
    </registry_object>
    <lockoutpolicy_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291500" version="7" comment="lockout policy" />
    <passwordpolicy_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291900" version="2" />
    <user_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292200" version="2" comment="Built-in Guest account">
      <user var_ref="oval:mil.disa.fso.windows:var:292200" datatype="string" var_check="all" />
    </user_object>
    <sid_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292201" version="3" comment="Built-in Guest SID">
      <trustee_name operation="pattern match" datatype="string">.*</trustee_name>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.fso.windows:ste:292200</filter>
    </sid_object>
    <user_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292400" version="1" comment="Built-in Administrator account">
      <user var_ref="oval:mil.disa.fso.windows:var:292400" datatype="string" var_check="all" />
    </user_object>
    <sid_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292401" version="2" comment="Built-in Administrator SID">
      <trustee_name operation="pattern match" datatype="string">.*</trustee_name>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.fso.windows:ste:292400</filter>
    </sid_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">AutoAdminLogon</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292701" version="3">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">DefaultPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers</key>
      <name datatype="string">AddPrinterDrivers</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:293200" version="3" comment="Guests">
      <security_principle datatype="string" operation="equals">Guests</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:293209" version="1" comment="Local account">
      <security_principle datatype="string" operation="equals">Local account</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:293213" version="1" comment="Local account">
      <security_principle datatype="string" operation="equals">NT AUTHORITY\Local account</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:293214" version="2" comment="Collect NT AUTHORITY\ Local accounts">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:293209</object_reference>
        <object_reference>oval:mil.disa.fso.windows:obj:293213</object_reference>
      </set>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:293300" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string" operation="equals">SCRemoveOption</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:294700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">NullSessionPipes</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:294800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths</key>
      <name datatype="string">Machine</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:294900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">NullSessionShares</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:295300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">MaximumPasswordAge</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:295600" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string" operation="equals">everyoneincludesanonymous</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:296400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fSingleSessionPerUser</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:296500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fPromptForPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:297100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\system</key>
      <name datatype="string">DisableBkGndGroupPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:297500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Session Manager</key>
      <name datatype="string">SafeDllSearchMode</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:297800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Eventlog\Security</key>
      <name datatype="string">WarningLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:297900" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string" operation="equals">DisableIPSourceRouting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">EnableICMPRedirect</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">PerformRouterDiscovery</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">keepalivetime</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netbt\Parameters</key>
      <name datatype="string">NoNameReleaseOnDemand</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298400" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SYSTEM\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string" operation="equals">TcpMaxDataRetransmissions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">ScreenSaverGracePeriod</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths</key>
      <name datatype="string">Machine</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298800" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems</key>
      <name datatype="string" operation="equals">Optional</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:299000" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string" operation="equals">fEncryptRPCTraffic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:299200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireSignOrSeal</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:300300" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SYSTEM\CurrentControlSet\Services\ipsec</key>
      <name datatype="string">nodefaultexempt</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:300500" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ConsentPromptBehaviorAdmin</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:300600" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ConsentPromptBehaviorUser</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:302900" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\EventViewer</key>
      <name datatype="string">MicrosoftEventVwrDisableLinks</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WindowsMediaPlayer</key>
      <name datatype="string">GroupPrivacyAcceptance</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">AllowRemoteRPC</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSystemRestore</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSendGenericDriverNotFoundToWER</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\HandwritingErrorReports</key>
      <name datatype="string">PreventHandwritingErrorReports</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:305000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51</key>
      <name datatype="string">DCSettingIndex</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:305100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51</key>
      <name datatype="string">ACSettingIndex</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:305300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\GameUX</key>
      <name datatype="string">DownloadGameInfo</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WMDRM</key>
      <name datatype="string">DisableOnline</name>
    </registry_object>
    <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306100" version="4" comment="Local Volumes *.p12 *.pfx">
      <behaviors recurse_direction="down" max_depth="-1" />
      <path datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:306100" var_check="at least one" />
      <filename datatype="string" operation="pattern match">^.*\.([Pp]12|[Pp][Ff][Xx])$</filename>
    </file_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306102" version="1" comment="All 'Local Disk' Volumes">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT name FROM win32_logicaldisk WHERE drivetype=3</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableUIADesktopToggle</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306400" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableCcm</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306500" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableLPT</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306600" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisablePNPRedir</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306700" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fEnableSmartCard</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306800" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">RedirectOnlyDefaultClientPrinter</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">SmbServerNameHardeningLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\LSA</key>
      <name datatype="string">UseMachineId</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\LSA\MSV1_0</key>
      <name datatype="string">allownullsessionfallback</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\LSA\pku2u</key>
      <name datatype="string">AllowOnlineID</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters</key>
      <name datatype="string">SupportedEncryptionTypes</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters</key>
      <name datatype="string">DisableIpSourceRouting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters</key>
      <name datatype="string">TcpMaxDataRetransmissions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Network Connections</key>
      <name datatype="string">NC_StdDomainUserSetLocation</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">Force_Tunneling</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DoNotInstallCompatibleDriverFromWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Device Metadata</key>
      <name datatype="string">PreventDeviceMetadataFromNetwork</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">SearchOrderConfig</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy</key>
      <name datatype="string">DisableQueryRemoteServer</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy</key>
      <name datatype="string">EnableQueryRemoteServer</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}</key>
      <name datatype="string">ScenarioExecutionEnabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\AppCompat</key>
      <name datatype="string">DisableInventory</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoAutoplayfornonVolume</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\GameUX</key>
      <name datatype="string">GameUpdateOptions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Homegroup</key>
      <name datatype="string">DisableHomeGroup</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\WAU</key>
      <name datatype="string">Disabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoDataExecutionPrevention</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoAutorun</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">RestrictAnonymousSAM</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LegalNoticeCaption</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309800" version="2" comment="All security principles">
      <security_principle datatype="string" operation="pattern match">.*</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309801" version="2" comment="Filter for Administrators and Authenticated Users">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:309802</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:310000" version="3" comment="Filter for Administrators only">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:310300" version="2" comment="Filter for Administrators, Authenticated Users, Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:309802</filter>
        <filter>oval:mil.disa.fso.windows:ste:309901</filter>
        <filter>oval:mil.disa.fso.windows:ste:309902</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:310400" version="2" comment="Filter for Administrators and Local Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:309901</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:310800" version="2" comment="Filter for Administrators, Service, Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:310801</filter>
        <filter>oval:mil.disa.fso.windows:ste:309901</filter>
        <filter>oval:mil.disa.fso.windows:ste:309902</filter>
      </set>
    </accesstoken_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:311001" version="2" comment="verify hyper-v role installed">
      <namespace datatype="string" operation="equals">root\cimv2</namespace>
      <wql datatype="string" operation="equals">SELECT name FROM Win32_ServerFeature WHERE ID = 20</wql>
    </wmi_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:311002" version="3" comment="Filter for VMs and administrator">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:311002</filter>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:311700" version="2" comment="Filter for Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309901</filter>
        <filter>oval:mil.disa.fso.windows:ste:309902</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:312900" version="2" comment="Filter for Administrators and NT Service\WdiServiceHost">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:312901</filter>
      </set>
    </accesstoken_object>
    <auditeventpolicysubcategories_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:313500" version="2" />
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">6to4_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface</key>
      <name datatype="string">IPHTTPS_ClientState</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316601" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface</key>
      <name datatype="string">IPHTTPS_ClientUrl</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">ISATAP_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">Teredo_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Application</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:317000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Security</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:317100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:317200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\System</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:317300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSendRequestAdditionalSoftwareToWER</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:319500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">EnableForcedLogoff</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:319900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManWorkstation\Parameters</key>
      <name datatype="string">EnablePlainTextPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:320700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">LMCompatibilityLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:321100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">DisableCAD</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:322100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">EnableSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:322500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireSignOrSeal</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:322900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">SealSecureChannel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:323300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">SignSecureChannel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:323700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\NetLogon\Parameters</key>
      <name datatype="string">DisablePasswordChange</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:324100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanWorkstation\Parameters</key>
      <name datatype="string">EnableSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:324500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\WinLogon</key>
      <name datatype="string">AllocateDASD</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:324900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\WinLogon</key>
      <name datatype="string">PasswordExpiryWarning</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:325300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Session Manager</key>
      <name datatype="string">ProtectionMode</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:325700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">AutoDisconnect</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:326100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoDriveTypeAutoRun</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:326500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fAllowToGetHelp</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:326900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">LimitBlankPasswordUse</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:327300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">Undockwithoutlogon</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:328100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireStrongKey</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:328500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">DisableDomainCreds</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:328900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">ForceGuest</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:329300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">NoLMHash</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:329700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LDAP</key>
      <name datatype="string">LdapClientIntegrity</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:330100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">NTLMMinClientSec</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:330500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy</key>
      <name datatype="string">Enabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:330900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Session Manager\Kernel</key>
      <name datatype="string">ObCaseInsensitive</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:331300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">MinEncryptionLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:331700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">PerSessionTempDir</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:332100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">DeleteTempDirsOnExit</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:333600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fAllowUnsolicited</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:334700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WindowsMediaPlayer</key>
      <name datatype="string">DisableAutoupdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:335100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">NTLMMinServerSec</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:335500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Cryptography</key>
      <name datatype="string">ForceKeyProtection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:336700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</key>
      <name datatype="string">NoGPOListChanges</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:337100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManWorkstation\Parameters</key>
      <name datatype="string">RequireSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:337500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">RequireSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:337900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\lanmanserver\parameters</key>
      <name datatype="string">restrictnullsessaccess</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:338500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">software\microsoft\windows\currentversion\policies\system</key>
      <name datatype="string">dontdisplaylastusername</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:338900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">AuditBaseObjects</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:339300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">fullprivilegeauditing</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:339700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">SCENoApplyLegacyAuditPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:340100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">FilterAdministratorToken</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:340500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableInstallerDetection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:340900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableSecureUIAPaths</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:341300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableLUA</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:341700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">PromptOnSecureDesktop</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:342100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableVirtualization</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:342500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\CredUI</key>
      <name datatype="string">EnumerateAdministrators</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:342900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">DisablePasswordSaving</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:343300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableCdm</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:343700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Rpc</key>
      <name datatype="string">RestrictRemoteClients</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:344900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoWebServices</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:346100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DisableHTTPPrinting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:346500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DisableWebPnPDownload</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:346900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">DontSearchWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:347300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Peernet</key>
      <name datatype="string">Disabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:347700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Network Connections</key>
      <name datatype="string">NC_AllowNetBridge_NLA</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:348900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoInternetOpenWith</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:349700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoOnlinePrintsWizard</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:350100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\system</key>
      <name datatype="string">LogonType</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:350500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Feeds</key>
      <name datatype="string">DisableEnclosureDownload</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:350900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">PreXPSP2ShellProtocolBehavior</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:351300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string">SafeForScripting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:351700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string">EnableUserControl</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:352100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string">DisableLUAPatching</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:352900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowLLTDIOOndomain</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:353000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowLLTDIOOnPublicNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:353100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">EnableLLTDIO</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:353200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">ProhibitLLTDIOOnPrivateNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:354200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowRspndrOndomain</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:354300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowRspndrOnPublicNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:354400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">EnableRspndr</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:354500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">ProhibitRspndrOnPrivateNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableFlashConfigRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableInBand802DOT11Registrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableUPnPRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableWPDRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">EnableRegistrars</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:357100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\UI</key>
      <name datatype="string">DisableWcnUi</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:357500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">DontPromptForWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:357900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">LoggingEnabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:358300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows Defender\Spynet</key>
      <name datatype="string">SpyNetReporting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:359500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoHeapTerminationOnCorruption</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:361000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ValidateAdminCodeSignatures</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:361400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\SQMClient\Windows</key>
      <name datatype="string">CEIPEnable</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:434200" version="1" comment="Registry path to determine domain membership.">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\TCPIP\Parameters</key>
      <name datatype="string">Domain</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:434300" version="3" comment="Domain Admins">
      <security_principle datatype="string" operation="pattern match">^.*\\Domain Admins$|^Domain Admins$</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:434301" version="4" comment="Enterprise Admins">
      <security_principle datatype="string" operation="pattern match">^.*\\Enterprise Admins$</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:434302" version="1" comment="Enterprise Admins">
      <security_principle datatype="string" operation="equals">Enterprise Admins</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:434303" version="1" comment="Collect Enterprise Admins">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:434301</object_reference>
        <object_reference>oval:mil.disa.fso.windows:obj:434302</object_reference>
      </set>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:435000" version="1" comment="Registry path for enabling the filtering of privileged tokens for local administrator accounts.">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LocalAccountTokenFilterPolicy</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461700" version="2" comment="All security principles">
      <security_principle datatype="string" operation="pattern match">.*</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463300" version="2" comment="Filter for Administrators">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
      </set>
    </accesstoken_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473100" version="1" comment="Fax Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='Fax'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473200" version="1" comment="Microsoft FTP Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='ftpsvc'</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:479200" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string" operation="equals">AlwaysInstallElevated</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487400" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487401" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487402" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487403" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487404" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487405" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487406" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487407" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487408" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487409" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487410" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487411" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487600" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487601" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487602" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487603" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487604" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487605" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487606" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487607" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487608" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487609" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487610" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487611" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487704" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487705" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487706" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487707" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498200" version="1" comment="DomainRole property">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string" operation="equals">SELECT DomainRole FROM win32_computersystem</wql>
    </wmi_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514400" version="1" comment="Filter for Remote Desktop Users only">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:514400</filter>
      </set>
    </accesstoken_object>
    <wmi57_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514401" version="1" comment="Is the Remote Desktop Services role installed">
      <namespace datatype="string" operation="equals">root\cimv2</namespace>
      <wql datatype="string" operation="equals">SELECT id FROM Win32_ServerFeature WHERE name='Remote Desktop Services'</wql>
    </wmi57_object>
    <wmi57_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514600" version="2" comment="Peer Networking Identity Manager">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='p2pimsvc'</wql>
    </wmi57_object>
    <wmi57_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514700" version="2" comment="Simple TCP/IP Services">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='simptcp'</wql>
    </wmi57_object>
    <wmi57_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514800" version="2" comment="Telnet service">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='TlntSvr'</wql>
    </wmi57_object>
  </objects>
  <states>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:290800" version="3" comment="Reg_Sz type and value equals 7601 or greater">
      <type>reg_sz</type>
      <value datatype="int" operation="greater than or equal">7601</value>
    </registry_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291100" version="1" comment="NTFS">
      <result>NTFS</result>
    </wmi_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291200" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^[[:space:]]*You[[:space:]]+are[[:space:]]+accessing[[:space:]]+a[[:space:]]+U\.S\.[[:space:]]+Government[[:space:]]+\(USG\)[[:space:]]+Information[[:space:]]+System[[:space:]]+\(IS\)[[:space:]]+that[[:space:]]+is[[:space:]]+provided[[:space:]]+for[[:space:]]+USG[-—]authorized[[:space:]]+use[[:space:]]+only\.[[:space:]]+By[[:space:]]+using[[:space:]]+this[[:space:]]+IS[[:space:]]+\(which[[:space:]]+includes[[:space:]]+any[[:space:]]+device[[:space:]]+attached[[:space:]]+to[[:space:]]+this[[:space:]]+IS\),[[:space:]]+you[[:space:]]+consent[[:space:]]+to[[:space:]]+the[[:space:]]+following[[:space:]]+conditions:[[:space:]]+-The[[:space:]]+USG[[:space:]]+routinely[[:space:]]+intercepts[[:space:]]+and[[:space:]]+monitors[[:space:]]+communications[[:space:]]+on[[:space:]]+this[[:space:]]+IS[[:space:]]+for[[:space:]]+purposes[[:space:]]+including,[[:space:]]+but[[:space:]]+not[[:space:]]+limited[[:space:]]+to,[[:space:]]+penetration[[:space:]]+testing,[[:space:]]+COMSEC[[:space:]]+monitoring,[[:space:]]+network[[:space:]]+operations[[:space:]]+and[[:space:]]+defense,[[:space:]]+personnel[[:space:]]+misconduct[[:space:]]+\(PM\),[[:space:]]+law[[:space:]]+enforcement[[:space:]]+\(LE\),[[:space:]]+and[[:space:]]+counterintelligence[[:space:]]+\(CI\)[[:space:]]+investigations\.[[:space:]]+-At[[:space:]]+any[[:space:]]+time,[[:space:]]+the[[:space:]]+USG[[:space:]]+may[[:space:]]+inspect[[:space:]]+and[[:space:]]+seize[[:space:]]+data[[:space:]]+stored[[:space:]]+on[[:space:]]+this[[:space:]]+IS\.[[:space:]]+-Communications[[:space:]]+using,[[:space:]]+or[[:space:]]+data[[:space:]]+stored[[:space:]]+on,[[:space:]]+this[[:space:]]+IS[[:space:]]+are[[:space:]]+not[[:space:]]+private,[[:space:]]+are[[:space:]]+subject[[:space:]]+to[[:space:]]+routine[[:space:]]+monitoring,[[:space:]]+interception,[[:space:]]+and[[:space:]]+search,[[:space:]]+and[[:space:]]+may[[:space:]]+be[[:space:]]+disclosed[[:space:]]+or[[:space:]]+used[[:space:]]+for[[:space:]]+any[[:space:]]+USG-authorized[[:space:]]+purpose\.[[:space:]]+[-—]This[[:space:]]+IS[[:space:]]+includes[[:space:]]+security[[:space:]]+measures[[:space:]]+\(e\.g\.,[[:space:]]+authentication[[:space:]]+and[[:space:]]+access[[:space:]]+controls\)[[:space:]]+to[[:space:]]+protect[[:space:]]+USG[[:space:]]+interests[—-]+not[[:space:]]+for[[:space:]]+your[[:space:]]+personal[[:space:]]+benefit[[:space:]]+or[[:space:]]+privacy\.[[:space:]]+[—-]Notwithstanding[[:space:]]+the[[:space:]]+above,[[:space:]]+using[[:space:]]+this[[:space:]]+IS[[:space:]]+does[[:space:]]+not[[:space:]]+constitute[[:space:]]+consent[[:space:]]+to[[:space:]]+PM,[[:space:]]+LE[[:space:]]+or[[:space:]]+CI[[:space:]]+investigative[[:space:]]+searching[[:space:]]+or[[:space:]]+monitoring[[:space:]]+of[[:space:]]+the[[:space:]]+content[[:space:]]+of[[:space:]]+privileged[[:space:]]+communications,[[:space:]]+or work product,[[:space:]]+related[[:space:]]+to[[:space:]]+personal[[:space:]]+representation[[:space:]]+or[[:space:]]+services[[:space:]]+by[[:space:]]+attorneys,[[:space:]]+psychotherapists,[[:space:]]+or[[:space:]]+clergy,[[:space:]]+and[[:space:]]+their[[:space:]]+assistants\.[[:space:]]+Such[[:space:]]+communications[[:space:]]+and[[:space:]]+work[[:space:]]+product[[:space:]]+are[[:space:]]+private[[:space:]]+and[[:space:]]+confidential\.[[:space:]]+See[[:space:]]+User[[:space:]]+Agreement[[:space:]]+for[[:space:]]+details\.[[:space:]]*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291201" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^\s*You\s+are\s+accessing\s+a\s+U\.S\.\s+Government\s+\(USG\)\s+Information\s+System\s+\(IS\)\s+that\s+is\s+provided\s+for\s+USG[-—]authorized\s+use\s+only\.\s+By\s+using\s+this\s+IS\s+\(which\s+includes\s+any\s+device\s+attached\s+to\s+this\s+IS\),\s+you\s+consent\s+to\s+the\s+following\s+conditions:\s+-The\s+USG\s+routinely\s+intercepts\s+and\s+monitors\s+communications\s+on\s+this\s+IS\s+for\s+purposes\s+including,\s+but\s+not\s+limited\s+to,\s+penetration\s+testing,\s+COMSEC\s+monitoring,\s+network\s+operations\s+and\s+defense,\s+personnel\s+misconduct\s+\(PM\),\s+law\s+enforcement\s+\(LE\),\s+and\s+counterintelligence\s+\(CI\)\s+investigations\.\s+-At\s+any\s+time,\s+the\s+USG\s+may\s+inspect\s+and\s+seize\s+data\s+stored\s+on\s+this\s+IS\.\s+-Communications\s+using,\s+or\s+data\s+stored\s+on,\s+this\s+IS\s+are\s+not\s+private,\s+are\s+subject\s+to\s+routine\s+monitoring,\s+interception,\s+and\s+search,\s+and\s+may\s+be\s+disclosed\s+or\s+used\s+for\s+any\s+USG-authorized\s+purpose\.\s+[-—]This\s+IS\s+includes\s+security\s+measures\s+\(e\.g\.,\s+authentication\s+and\s+access\s+controls\)\s+to\s+protect\s+USG\s+interests[—-]+not\s+for\s+your\s+personal\s+benefit\s+or\s+privacy\.\s+[—-]Notwithstanding\s+the\s+above,\s+using\s+this\s+IS\s+does\s+not\s+constitute\s+consent\s+to\s+PM,\s+LE\s+or\s+CI\s+investigative\s+searching\s+or\s+monitoring\s+of\s+the\s+content\s+of\s+privileged\s+communications,\s+or work product,\s+related\s+to\s+personal\s+representation\s+or\s+services\s+by\s+attorneys,\s+psychotherapists,\s+or\s+clergy,\s+and\s+their\s+assistants\.\s+Such\s+communications\s+and\s+work\s+product\s+are\s+private\s+and\s+confidential\.\s+See\s+User\s+Agreement\s+for\s+details\.\s*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291300" version="1" comment="Reg_SZ type and value equals 2 or less">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal">2</value>
    </registry_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291500" version="2">
      <lockout_threshold datatype="int" operation="less than or equal">3</lockout_threshold>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291501" version="7" comment="lockout threshold is not 0">
      <lockout_threshold datatype="int" operation="not equal">0</lockout_threshold>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291600" version="6" comment="Ensure lockout counter is greater than or equal to 60 minutes">
      <lockout_observation_window datatype="int" operation="greater than or equal">3600</lockout_observation_window>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291700" version="7" comment="lockout duration is forever">
      <lockout_duration datatype="int" operation="less than or equal" entity_check="all">0</lockout_duration>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291701" version="2" comment="lockout duration is forever,option2">
      <lockout_duration datatype="int" operation="equals" entity_check="all">4294967295</lockout_duration>
    </lockoutpolicy_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291800" version="1" comment="Act as part of the operating system">
      <setcbprivilege datatype="boolean" operation="equals">0</setcbprivilege>
    </accesstoken_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291900" version="1" comment="Checks for maximum password age setting of greater than 60">
      <max_passwd_age datatype="int" operation="less than or equal">5184000</max_passwd_age>
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291901" version="1" comment="Checks for Never Expires criteria">
      <max_passwd_age datatype="int" operation="not equal">-1</max_passwd_age>
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292100" version="1">
      <password_hist_len datatype="int" operation="greater than or equal">24</password_hist_len>
    </passwordpolicy_state>
    <sid_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292200" version="4" comment="Built-in Guest SID">
      <trustee_sid operation="pattern match">^S-1-5-[0-9-]+-501$</trustee_sid>
    </sid_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292201" version="2" comment="Account is disabled">
      <enabled datatype="boolean">false</enabled>
    </user_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292300" version="2" comment="Account name is Guest">
      <user datatype="string" operation="pattern match">^.*\\[Gg]uest$|^[Gg]uest$</user>
    </user_state>
    <sid_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292400" version="4" comment="Built-in Administrator SID">
      <trustee_sid operation="pattern match">^S-1-5-[0-9-]+-500$</trustee_sid>
    </sid_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292401" version="2" comment="Account name is Administrator">
      <user datatype="string" operation="pattern match">^.*\\[Aa]dministrator$|^[Aa]dministrator$</user>
    </user_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292700" version="2" comment="Reg_Sz type and value equals 0">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292800" version="1">
      <password_complexity datatype="boolean" operation="equals">1</password_complexity>
    </passwordpolicy_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:293200" version="3" comment="Deny access from the network">
      <sedenynetworklogonright datatype="boolean" operation="equals">1</sedenynetworklogonright>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:293300" version="3" comment="Reg_Sz type and value equals 1">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:293301" version="2" comment="Reg_Sz type and value equals 2">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:294500" version="1">
      <reversible_encryption datatype="boolean" operation="equals">0</reversible_encryption>
    </passwordpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:294700" version="4" comment="Reg_Multi_Sz type and blank value">
      <type>reg_multi_sz</type>
      <value datatype="string" operation="pattern match" entity_check="none satisfy">.+</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:294801" version="2">
      <value operation="pattern match" entity_check="all">^((System\\CurrentControlSet\\Control\\ProductOptions)|(System\\CurrentControlSet\\Control\\Server Applications)|(Software\\Microsoft\\Windows NT\\CurrentVersion))$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:295300" version="2" comment="Reg_Dword type and value equals 30 or less">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">30</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:295301" version="2" comment="Reg_Dword type and value does not equal 0">
      <type>reg_dword</type>
      <value datatype="int" operation="not equal">0</value>
    </registry_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:295900" version="1" comment="Checks for a value of 0">
      <force_logoff datatype="int" operation="equals">0</force_logoff>
    </lockoutpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:296400" version="2" comment="Reg_Dword type and value equals 1">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:297800" version="2" comment="Reg_Dword type and value equals 90 or less">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">90</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:298200" version="2" comment="Reg_Dword type and value equals 300000 or less">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">300000</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:298400" version="2" comment="Reg_Dword type and value equals 3 or less">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:298500" version="2" comment="Reg_Sz type and value equals 5 or less">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal">5</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:298600" version="1">
      <type>reg_multi_sz</type>
      <value operation="pattern match" entity_check="all">^((Software\\Microsoft\\OLAP Server)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Print)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows)|(System\\CurrentControlSet\\Control\\ContentIndex)|(System\\CurrentControlSet\\Control\\Print\\Printers)|(System\\CurrentControlSet\\Control\\Terminal Server)|(System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig)|(System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration)|(System\\CurrentControlSet\\Services\\Eventlog)|(System\\CurrentControlSet\\Services\\Sysmon[Ll]og))$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:300503" version="2" comment="Reg_Dword type and value equals 4">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">4</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:306200" version="2" comment="Reg_Dword type and value equals 0">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:307200" version="1" comment="Debug programs">
      <sedebugprivilege datatype="boolean" operation="equals">0</sedebugprivilege>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:307700" version="2" comment="Reg_Dword type and value equals 2147483644">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">2147483644</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:308100" version="2" comment="Reg_Sz type and value equals Enabled">
      <type>reg_sz</type>
      <value datatype="string" operation="equals">Enabled</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309600" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^D(oD|OD) N(otice|OTICE) (and|AND) C(onsent|ONSENT) B(anner|ANNER)$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309601" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^U\.?S\.? D(EPARTMENT|epartment) (OF|Of|of) D(EFENSE|efense) W(ARNING|arning) S(TATEMENT|tatement)$</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309800" version="1" comment="Access this computer from the network">
      <senetworklogonright datatype="boolean" operation="equals">0</senetworklogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309801" version="2" comment="Administrators">
      <security_principle datatype="string" operation="equals">Administrators</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309802" version="1" comment="Authenticated Users">
      <security_principle datatype="string" operation="equals">Authenticated Users</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309901" version="1" comment="Local Service">
      <security_principle datatype="string" operation="equals">LOCAL SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309902" version="1" comment="Network Service">
      <security_principle datatype="string" operation="equals">NETWORK SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310000" version="1" comment="Allow log on locally">
      <seinteractivelogonright datatype="boolean" operation="equals">0</seinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310100" version="1" comment="Allow log on through Remote Desktop Services">
      <seremoteinteractivelogonright datatype="boolean" operation="equals">0</seremoteinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310200" version="1" comment="Back up files and directories">
      <sebackupprivilege datatype="boolean" operation="equals">0</sebackupprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310300" version="1" comment="Bypass traverse checking">
      <sechangenotifyprivilege datatype="boolean" operation="equals">0</sechangenotifyprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310400" version="1" comment="Change the system time">
      <sesystemtimeprivilege datatype="boolean" operation="equals">0</sesystemtimeprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310500" version="1" comment="Change the time zone">
      <setimezoneprivilege datatype="boolean" operation="equals">0</setimezoneprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310600" version="1" comment="Create a pagefile">
      <secreatepagefileprivilege datatype="boolean" operation="equals">0</secreatepagefileprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310700" version="1" comment="Create a token object">
      <secreatetokenprivilege datatype="boolean" operation="equals">0</secreatetokenprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310800" version="1" comment="Create global objects">
      <secreateglobalprivilege datatype="boolean" operation="equals">0</secreateglobalprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310801" version="1" comment="Service">
      <security_principle datatype="string" operation="equals">SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310900" version="1" comment="Create permanent shared objects">
      <secreatepermanentprivilege datatype="boolean" operation="equals">0</secreatepermanentprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311000" version="2" comment="Create symbolic links">
      <secreatesymboliclinkprivilege datatype="boolean" operation="equals">0</secreatesymboliclinkprivilege>
    </accesstoken_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311001" version="2" comment="verify hyper-v role installed">
      <result datatype="string" operation="equals" entity_check="all">Hyper-V</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311002" version="2" comment="VMs">
      <security_principle datatype="string" operation="equals">NT VIRTUAL MACHINE\Virtual Machines</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311100" version="1" comment="Deny log on as a batch job">
      <sedenybatchLogonright datatype="boolean" operation="equals">1</sedenybatchLogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311200" version="1" comment="Deny log on as a service">
      <sedenyservicelogonright datatype="boolean" operation="equals">0</sedenyservicelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311201" version="1" comment="Deny log on as a service">
      <sedenyservicelogonright datatype="boolean" operation="equals">1</sedenyservicelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311300" version="2" comment="Deny log on locally">
      <sedenyinteractivelogonright datatype="boolean" operation="equals">1</sedenyinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311400" version="2" comment="Deny log on through Remote Desktop Services">
      <sedenyremoteInteractivelogonright datatype="boolean" operation="equals">1</sedenyremoteInteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311500" version="1" comment="Enable computer and user accounts to be trusted for delegation">
      <seenabledelegationprivilege datatype="boolean" operation="equals">0</seenabledelegationprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311600" version="1" comment="Force shutdown from a remote system">
      <seremoteshutdownprivilege datatype="boolean" operation="equals">0</seremoteshutdownprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311700" version="1" comment="Generate security audits">
      <seauditprivilege datatype="boolean" operation="equals">0</seauditprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311800" version="1" comment="Impersonate a client after authentication">
      <seimpersonateprivilege datatype="boolean" operation="equals">0</seimpersonateprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312000" version="1" comment="Increase scheduling priority">
      <seincreasebasepriorityprivilege datatype="boolean" operation="equals">0</seincreasebasepriorityprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312100" version="1" comment="Load and unload device drivers">
      <seloaddriverprivilege datatype="boolean" operation="equals">0</seloaddriverprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312200" version="1" comment="Lock pages in memory">
      <selockmemoryprivilege datatype="boolean" operation="equals">0</selockmemoryprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312500" version="1" comment="Modify an object label">
      <serelabelprivilege datatype="boolean" operation="equals">0</serelabelprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312600" version="1" comment="Modify firmware environment values">
      <sesystemenvironmentprivilege datatype="boolean" operation="equals">0</sesystemenvironmentprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312700" version="1" comment="Perform volume maintenance tasks">
      <semanagevolumeprivilege datatype="boolean" operation="equals">0</semanagevolumeprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312800" version="1" comment="Profile single process">
      <seprofilesingleprocessprivilege datatype="boolean" operation="equals">0</seprofilesingleprocessprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312900" version="1" comment="Profile system performance">
      <sesystemprofileprivilege datatype="boolean" operation="equals">0</sesystemprofileprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312901" version="1" comment="NT Service\WdiServiceHost">
      <security_principle datatype="string" operation="equals">NT SERVICE\WdiServiceHost</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313000" version="1" comment="Remove computer from docking station">
      <seundockprivilege datatype="boolean" operation="equals">0</seundockprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313100" version="1" comment="Replace a process level token">
      <seassignprimarytokenprivilege datatype="boolean" operation="equals">0</seassignprimarytokenprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313200" version="1" comment="Restore files and directories">
      <serestoreprivilege datatype="boolean" operation="equals">0</serestoreprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313300" version="1" comment="Shut down the system">
      <seshutdownprivilege datatype="boolean" operation="equals">0</seshutdownprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313400" version="1" comment="Take ownership of files or other objects">
      <setakeownershipprivilege datatype="boolean" operation="equals">0</setakeownershipprivilege>
    </accesstoken_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313500" version="4" comment="Audit - Credential Validation - Success only">
      <credential_validation datatype="string" operation="equals">AUDIT_SUCCESS</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313501" version="3" comment="Audit - Credential Validation - Success and Failure">
      <credential_validation datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313600" version="3" comment="Audit - Credential Validation - Failure only">
      <credential_validation datatype="string" operation="equals">AUDIT_FAILURE</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313700" version="3" comment="Audit - Computer Account Management - Success only">
      <computer_account_management datatype="string" operation="equals">AUDIT_SUCCESS</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313701" version="3" comment="Audit - Computer Account Management - Success and Failure">
      <computer_account_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313800" version="3" comment="Audit - Computer Account Management - Failure only">
      <computer_account_management datatype="string" operation="equals">AUDIT_FAILURE</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313900" version="3" comment="Audit - Other Account Management Events - Success only">
      <other_account_management_events datatype="string" operation="equals">AUDIT_SUCCESS</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313901" version="3" comment="Audit - Other Account Management Events - Success and Failure">
      <other_account_management_events datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314000" version="3" comment="Audit - Other Account Management Events - Failure only">
      <other_account_management_events datatype="string" operation="equals">AUDIT_FAILURE</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314100" version="3" comment="Audit - Security Group Management - Success only">
      <security_group_management datatype="string" operation="equals">AUDIT_SUCCESS</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314101" version="3" comment="Audit - Security Group Management - Success and Failure">
      <security_group_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314200" version="3" comment="Audit - Security Group Management - Failure only">
      <security_group_management datatype="string" operation="equals">AUDIT_FAILURE</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314300" version="3" comment="Audit - User Account Management - Success only">
      <user_account_management datatype="string" operation="equals">AUDIT_SUCCESS</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314301" version="3" comment="Audit - User Account Management - Success and Failure">
      <user_account_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314400" version="3" comment="Audit - User Account Management - Failure only">
      <user_account_management datatype="string" operation="equals">AUDIT_FAILURE</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314500" version="3" comment="Audit - Process Creation - Success only">
      <process_creation datatype="string" operation="equals">AUDIT_SUCCESS</process_creation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314501" version="3" comment="Audit - Process Creation - Success and Failure">
      <process_creation datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</process_creation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314600" version="3" comment="Audit - Logoff - Success only">
      <logoff datatype="string" operation="equals">AUDIT_SUCCESS</logoff>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314601" version="3" comment="Audit - Logoff - Success and Failure">
      <logoff datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</logoff>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314700" version="3" comment="Audit - Logon - Success only">
      <logon datatype="string" operation="equals">AUDIT_SUCCESS</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314701" version="3" comment="Audit - Logon - Success and Failure">
      <logon datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314800" version="3" comment="Audit - Logon - Failure only">
      <logon datatype="string" operation="equals">AUDIT_FAILURE</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314900" version="3" comment="Audit - Special Logon - Success only">
      <special_logon datatype="string" operation="equals">AUDIT_SUCCESS</special_logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314901" version="3" comment="Audit - Special Logon - Success and Failure">
      <special_logon datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</special_logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315200" version="3" comment="Audit - Audit Policy Change - Success only">
      <audit_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315201" version="3" comment="Audit - Audit Policy Change - Success and Failure">
      <audit_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315300" version="3" comment="Audit - Audit Policy Change - Failure only">
      <audit_policy_change datatype="string" operation="equals">AUDIT_FAILURE</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315400" version="3" comment="Audit - Authentication Policy Change - Success only">
      <authentication_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</authentication_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315401" version="3" comment="Audit - Authentication Policy Change - Success and Failure">
      <authentication_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</authentication_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315500" version="3" comment="Audit - Sensitive Privilege Use - Success only">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_SUCCESS</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315501" version="3" comment="Audit - Sensitive Privilege Use - Success and Failure">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315600" version="3" comment="Audit - Sensitive Privilege Use - Failure only">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_FAILURE</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315700" version="3" comment="Audit - IPSec Driver - Success only">
      <ipsec_driver datatype="string" operation="equals">AUDIT_SUCCESS</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315701" version="3" comment="Audit - IPSec Driver - Success and Failure">
      <ipsec_driver datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315800" version="3" comment="Audit - IPSec Driver - Failure only">
      <ipsec_driver datatype="string" operation="equals">AUDIT_FAILURE</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315900" version="3" comment="Audit - Security State Change - Success only">
      <security_state_change datatype="string" operation="equals">AUDIT_SUCCESS</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315901" version="3" comment="Audit - Security State Change - Success and Failure">
      <security_state_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316000" version="3" comment="Audit - Security State Change - Failure only">
      <security_state_change datatype="string" operation="equals">AUDIT_FAILURE</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316100" version="3" comment="Audit - Security System Extension - Success only">
      <security_system_extension datatype="string" operation="equals">AUDIT_SUCCESS</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316101" version="3" comment="Audit - Security System Extension - Success and Failure">
      <security_system_extension datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316200" version="3" comment="Audit - Security System Extension - Failure only">
      <security_system_extension datatype="string" operation="equals">AUDIT_FAILURE</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316300" version="3" comment="Audit - System Integrity - Success only">
      <system_integrity datatype="string" operation="equals">AUDIT_SUCCESS</system_integrity>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316301" version="3" comment="Audit - System Integrity - Success and Failure">
      <system_integrity datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</system_integrity>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316400" version="3" comment="Audit - System Integrity - Failure only">
      <system_integrity datatype="string" operation="equals">AUDIT_FAILURE</system_integrity>
    </auditeventpolicysubcategories_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316500" version="2" comment="Reg_Sz type and value equals Disabled">
      <type>reg_sz</type>
      <value datatype="string" operation="equals">Disabled</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316601" version="1" comment="registry type and value for IP-HTTPS url">
      <type>reg_sz</type>
      <value datatype="string" operation="equals">about:blank</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316900" version="2" comment="Reg_Dword type and value equals 32768 or greater">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal">32768</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:317000" version="2" comment="Reg_Dword type and value equals 196608 or greater">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal">196608</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:317800" version="2" comment="Reg_Sz type">
      <type datatype="string" operation="equals">reg_sz</type>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:318000" version="2" comment="Value equals 1">
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:318100" version="2" comment="Reg_Dword type">
      <type datatype="string" operation="equals">reg_dword</type>
    </registry_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:318900" version="2" comment="Minimum password age equals 1 or greater">
      <min_passwd_age datatype="int" operation="greater than or equal">1</min_passwd_age>
    </passwordpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:319900" version="2" comment="Value equals 0">
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:320700" version="2" comment="Value equals 5">
      <value datatype="int" operation="equals">5</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:324900" version="2" comment="Value equals 14 or greater">
      <value datatype="int" operation="greater than or equal">14</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:325700" version="2" comment="Value equals 15 or less">
      <value datatype="int" operation="less than or equal">15</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:326100" version="2" comment="Value equals 255">
      <value datatype="int" operation="equals">255</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:329800" version="2" comment="Value equals 1 or greater">
      <value datatype="int" operation="greater than or equal">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:330100" version="2" comment="Value equals 537395200">
      <value datatype="int" operation="equals">537395200</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:331300" version="2" comment="Value equals 3">
      <value datatype="int" operation="equals">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:335500" version="2" comment="Value equals 2">
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:338300" version="2" comment="Minimum password length equals 14 or greater">
      <min_passwd_len datatype="int" operation="greater than or equal">14</min_passwd_len>
    </passwordpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:339300" version="2" comment="Value equals 0">
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:339500" version="2" comment="Reg_Binary type">
      <type datatype="string" operation="equals">reg_binary</type>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:358300" version="2" comment="Value does not equal 1">
      <value datatype="int" operation="not equal">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:358400" version="2" comment="Value does not equal 2">
      <value datatype="int" operation="not equal">2</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:430400" version="1" comment="Reg_Dword type and value equals 3">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:430800" version="1" comment="Reg_Dword type and value equals 2">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:434200" version="1" comment="Reg_Sz type and blank value">
      <type datatype="string" operation="equals">reg_sz</type>
      <value />
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463300" version="2" comment="Administrators">
      <security_principle datatype="string" operation="equals">Administrators</security_principle>
    </accesstoken_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473100" version="1" comment="Service Startup Type is Disabled">
      <result>Disabled</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473700" version="1" comment="Manage auditing and security log">
      <sesecurityprivilege datatype="boolean" operation="equals">0</sesecurityprivilege>
    </accesstoken_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498200" version="1" comment="Standalone Workstation is 0">
      <result datatype="int" operation="equals">0</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498203" version="1" comment="Standalone Server is 2">
      <result datatype="int" operation="equals">2</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514400" version="1" comment="Remote Desktop Users">
      <security_principle datatype="string" operation="equals">Remote Desktop Users</security_principle>
    </accesstoken_state>
    <wmi57_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514401" version="1" comment="Is the Remote Desktop Services role installed">
      <result datatype="record" operation="equals">
        <field xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" name="id" entity_check="at least one" datatype="string">18</field>
      </result>
    </wmi57_state>
    <wmi57_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514600" version="3" comment="Disabled state">
      <result datatype="record">
        <field xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" name="startmode" datatype="string" operation="case insensitive equals">disabled</field>
      </result>
    </wmi57_state>
    <wmi57_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514700" version="1" comment="Disabled state">
      <result datatype="record">
        <field xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" name="startmode" datatype="string" operation="case insensitive equals">disabled</field>
      </result>
    </wmi57_state>
    <wmi57_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514800" version="2" comment="Disabled state">
      <result datatype="record">
        <field xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" name="startmode" datatype="string" operation="case insensitive equals">disabled</field>
      </result>
    </wmi57_state>
  </states>
  <variables>
    <local_variable id="oval:mil.disa.fso.windows:var:292200" version="1" datatype="string" comment="Guest">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:292201" item_field="trustee_name" />
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:292400" version="1" datatype="string" comment="Administrator">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:292401" item_field="trustee_name" />
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:306100" version="1" datatype="string" comment="All 'local disk' volumes, in X:\ format">
      <end character="\">
        <object_component object_ref="oval:mil.disa.fso.windows:obj:306102" item_field="result" />
      </end>
    </local_variable>
  </variables>
</oval_definitions>

