<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/windows-definitions-schema.xsd">
  <generator>
    <oval:product_name>repotool</oval:product_name>
    <oval:schema_version>5.8</oval:schema_version>
    <oval:timestamp>2016-12-30T16:41:33</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:mil.disa.fso.windows:def:4422" version="2" class="compliance">
      <metadata>
        <title>Lockout Duration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1099" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24768-4" />
        <description>Lockout duration must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442200" comment="Verifies 'Account lockout duration' is set to '0'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442301" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4423" version="1" class="compliance">
      <metadata>
        <title>Bad Logon Attempts</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1097" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23909-5" />
        <description>The number of allowed bad logon attempts must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442300" comment="Verifies 'Account lockout threshold' is set to '3' or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442301" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4424" version="2" class="compliance">
      <metadata>
        <title>Bad Logon Counter Reset</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1098" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24840-1" />
        <description>The time before the bad-logon counter is reset must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442400" comment="Verifies 'Reset account lockout counter after' is set to at least '60' minutes" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442301" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4425" version="1" class="compliance">
      <metadata>
        <title>Password Uniqueness</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1107" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24644-7" />
        <description>Password uniqueness must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442500" comment="Verifies 'Enforce password history' is set to '5' passwords or more" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4426" version="1" class="compliance">
      <metadata>
        <title>Maximum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1104" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24535-7" />
        <description>Maximum password age must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442600" comment="Verifies 'Maximum Password Age' is set to '60' days or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442601" comment="Verifies 'Maximum Password Age' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4427" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1105" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24018-4" />
        <description>The minimum password age must meet requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442700" comment="Verifies 'Minimum Password Age' is set to at least '1' day" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4428" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Length</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6836" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25317-9" />
        <description>Passwords must, at a minimum, be 14 characters.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442800" comment="Verifies 'Minimum password length' is set to at least '14' characters" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4429" version="1" class="compliance">
      <metadata>
        <title>Microsoft Strong Password Filtering</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1150" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25602-4" />
        <description>The built-in Microsoft password complexity filter must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442900" comment="Verifies 'Password must meet complexity requirements' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4430" version="1" class="compliance">
      <metadata>
        <title>Reversible Password Encryption</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="2372" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23951-7" />
        <description>Reversible password encryption must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443000" comment="Verifies 'Store password using reversible encryption' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4431" version="1" class="compliance">
      <metadata>
        <title>Network – Mapper I/O Driver</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15696" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25156-1" />
        <description>The Mapper I/O network protocol (LLTDIO) driver must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443101" comment="Verifies AllowLLTDIOOnDomain value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443102" comment="Verifies AllowLLTDIOOnPublicNet value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443103" comment="Verifies EnableLLTDIO value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443100" comment="Verifies ProhibitLLTDIOOnPrivateNet value equals 0" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4432" version="1" class="compliance">
      <metadata>
        <title>Network – Responder Driver</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15697" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23931-9" />
        <description>The Responder network protocol driver must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443202" comment="Verifies AllowRspndrOnDomain value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443203" comment="Verifies AllowRspndrOnPublicNet value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443201" comment="Verifies EnableRspndr value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443200" comment="Verifies ProhibitRspndrOnPrivateNet value equals 0" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4433" version="1" class="compliance">
      <metadata>
        <title>Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24398-0" />
        <description>Windows Peer-to-Peer networking services must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443300" comment="Verifies 'Turn Off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4434" version="1" class="compliance">
      <metadata>
        <title>Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15667" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25587-7" />
        <description>Network Bridges must be prohibited in Windows.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443400" comment="Verifies 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4435" version="1" class="compliance">
      <metadata>
        <title>Elevate when setting a network’s location</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21960" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23388-2" />
        <description>Domain users must be required to elevate when setting a network’s location.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443500" comment="Verifies 'Require domain users to elevate when setting a network's location' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4436" version="1" class="compliance">
      <metadata>
        <title>Direct Access - Route Through Internal Network</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21961" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25221-3" />
        <description>All Direct Access traffic must be routed through the internal network.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443600" comment="Verifies 'Route all traffic through the internal network' is set to 'Enabled: Enabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4437" version="1" class="compliance">
      <metadata>
        <title>6to4 State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26575" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24732-0" />
        <description>The 6to4 IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443700" comment="Verifies 'Set 6to4 State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4438" version="1" class="compliance">
      <metadata>
        <title>IP-HTTPS State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26576" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25651-1" />
        <description>The IP-HTTPS IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443800" comment="Verifies 'IP-HTTPS URL:' is not null" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443801" comment="Verifies 'IP-HTTPS State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4439" version="1" class="compliance">
      <metadata>
        <title>ISATAP State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26577" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25249-4" />
        <description>The ISATAP IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443900" comment="Verifies 'ISATAP State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4440" version="1" class="compliance">
      <metadata>
        <title>Teredo State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26578" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25571-1" />
        <description>The Teredo IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444000" comment="Verifies 'Teredo State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4441" version="1" class="compliance">
      <metadata>
        <title>Network - WCN Wireless Configuration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15698" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23804-8" />
        <description>The configuration of wireless devices using Windows Connect Now must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444103" comment="Verifies DisableInBand802DOT11Registrar value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444104" comment="Verifies DisableFlashConfigRegistrar value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444102" comment="Verifies DisableUPnPRegistrar value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444101" comment="Verifies DisableWPDRegistrar value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444100" comment="Verifies EnableRegistrars value equals 0" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4442" version="1" class="compliance">
      <metadata>
        <title>Network - Windows Connect Now Wizards</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15699" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24665-2" />
        <description>The Windows Connect Now wizards must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444200" comment="Verifies 'Prohibit Access of the Windows Connect Now wizards' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4443" version="1" class="compliance">
      <metadata>
        <title>Windows Update Point and Print Driver Search</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21963" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24139-8" />
        <description>Windows Update must be prevented from searching for point and print drivers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444300" comment="Verifies 'Extend Point and Print connection to search Windows Update' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4444" version="1" class="compliance">
      <metadata>
        <title>WINCC-000018</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36677" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23727-1" />
        <description>Optional component installation and component repair must be prevented from using Windows Update.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444400" comment="Verifies 'Specify settings for optional component installation and component repair' is set to 'Enabled' with 'Never attempt to download payload from Windows Update' selected" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4445" version="1" class="compliance">
      <metadata>
        <title>Device Install - PnP Interface Remote Access</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15700" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24004-4" />
        <description>Remote access to the Plug and Play interface must be disabled for device installation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444500" comment="Verifies 'Allow remote access to the Plug and Play interface' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4446" version="1" class="compliance">
      <metadata>
        <title>Device Install - Generic Driver Error Report</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15702" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23275-1" />
        <description>An Error Report must not be sent when a generic device driver is installed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444600" comment="Verifies 'Do not send a Windows error report when a generic driver is installed on a device' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4447" version="1" class="compliance">
      <metadata>
        <title>Device Install - Drivers System Restore Point</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15701" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23669-5" />
        <description>A system restore point must be created when a new device driver is installed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444700" comment="Verifies 'Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4448" version="1" class="compliance">
      <metadata>
        <title>Prevent device metadata retrieval from Internet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21964" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24165-3" />
        <description>Device metadata retrieval from the Internet must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444800" comment="Verifies 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4449" version="1" class="compliance">
      <metadata>
        <title>Device Install Software Request Error Report</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="28504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24685-0" />
        <description>Windows must be prevented from sending an error report when a device driver requests additional software during installation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444900" comment="Verifies 'Prevent Windows from sending an error report when a device driver requests additional software during installation' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4450" version="1" class="compliance">
      <metadata>
        <title>Prevent Windows Update for device driver search</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21965" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24777-5" />
        <description>Device driver searches using Windows Update must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445000" comment="Verifies 'Specify search order for device driver source locations' is set to 'Enabled: Do not search Windows Update'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4451" version="1" class="compliance">
      <metadata>
        <title>WINCC-000025</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36678" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25002-7" />
        <description>Device driver updates must only search managed servers, not Windows Update.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445100" comment="Verifies 'Specify the search server for device driver updates' is set to 'Enabled' with 'Search Managed Server' selected" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4452" version="1" class="compliance">
      <metadata>
        <title>Driver Install - Device Driver Search Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15703" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24804-7" />
        <description>Users must not be prompted to search Windows Update for device drivers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445200" comment="Verifies 'Turn off Windows Update device driver search prompt' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4453" version="1" class="compliance">
      <metadata>
        <title>WINCC-000027</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36679" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25320-3" />
        <description>Early Launch Antimalware, Boot-Start Driver Initialization Policy must be enabled and configured to only Good and Unknown.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445300" comment="Verifies 'Boot-Start Driver Initialization Policy' is set to 'Enabled' with 'Good and Unknown' selected" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4454" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4448" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24992-0" />
        <description>Group Policy objects must be reprocessed even if they have not changed.</description>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Registry Policy Processing - Not Configured">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445405" comment="Registry Policy Variable = -1" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445400" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2} does not exist" />
        </criteria>
        <criteria operator="AND" comment="Registry Policy Processing - Disabled">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445406" comment="Registry Policy Variable = 0" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445401" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy value equals 0" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445403" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges value equals 1" />
        </criteria>
        <criteria operator="AND" comment="Registry Policy Processing - Enabled with nobackgroundpolicy">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445407" comment="Registry Policy Variable = 1" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445404" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy value equals 1" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445403" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges value equals 1" />
        </criteria>
        <criteria operator="AND" comment="Registry Policy Processing - Enabled with nogpolistchanges">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445408" comment="Registry Policy Variable = 2" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445401" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy value equals 0" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445402" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges value equals 0" />
        </criteria>
        <criteria operator="AND" comment="Registry Policy Processing - Enabled with nobackgroundpolicy and nogpolistchanges">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445409" comment="Registry Policy Variable = 3" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445404" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy value equals 1" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445402" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges value equals 0" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4455" version="2" class="compliance">
      <metadata>
        <title>WINCC-000030</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36680" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24981-3" />
        <description>Access to the Windows Store must be turned off.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445502" comment="Windows\WinStore does not exist, Not Applicable" />
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445500" comment="Verifies 'Turn off access to the Store' is set to 'Enabled'" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445501" comment="Windows\WinStore exist" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4457" version="1" class="compliance">
      <metadata>
        <title>HTTP Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14260" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24854-2" />
        <description>Downloading print driver packages over HTTP must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445700" comment="Verifies 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4458" version="1" class="compliance">
      <metadata>
        <title>Handwriting Recognition Error Reporting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15704" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25580-2" />
        <description>Errors in handwriting recognition on Tablet PCs must not be reported to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445800" comment="Verifies 'Turn off handwriting recognition error reporting' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4461" version="1" class="compliance">
      <metadata>
        <title>Internet File Association Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15674" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24899-7" />
        <description>The Internet File Association service must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:446100" comment="Verifies 'Turn off Internet File Association service' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4462" version="1" class="compliance">
      <metadata>
        <title>Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14259" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24832-8" />
        <description>Printing over HTTP must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:446200" comment="Verifies 'Turn off printing over HTTP' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4468" version="1" class="compliance">
      <metadata>
        <title>Windows Customer Experience Improvement Program</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="16020" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24082-0" />
        <description>The Windows Customer Experience Improvement Program must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:446800" comment="Verifies 'Turn off Windows Customer Experience Improvement Program' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4470" version="1" class="compliance">
      <metadata>
        <title>Windows Update Device Drive Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14261" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24071-3" />
        <description>Windows must be prevented from using Windows Update to search for drivers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447000" comment="Verifies 'Turn off Windows Update device driver searching' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4471" version="1" class="compliance">
      <metadata>
        <title>WINCC-000048</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36681" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24401-2" />
        <description>Copying of user input methods to the system account for sign-in must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447100" comment="Verifies 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4472" version="2" class="compliance">
      <metadata>
        <title>Classic Logon</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15680" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23460-9" />
        <description>The classic logon screen must be required for user logons.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447200" comment="Verifies 'Always use classic logon' is set to 'Enabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469402" comment="System is a member of a domain" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4473" version="1" class="compliance">
      <metadata>
        <title>WINCC-000051</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36684" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23305-6" />
        <description>Local users on domain-joined computers must not be enumerated.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447300" comment="Verifies 'Enumerate local users on domain-joined computers' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4474" version="1" class="compliance">
      <metadata>
        <title>WINCC-000052</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36687" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24092-9" />
        <description>App notifications on the lock screen must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447400" comment="Verifies 'Turn off app notifications on the lock screen' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4475" version="1" class="compliance">
      <metadata>
        <title>Power Mgmt - Password Wake on Battery</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15705" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23998-8" />
        <description>Users must be prompted for a password on resume from sleep (on battery).</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447500" comment="Verifies 'Require a password when a computer wakes (on battery)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4476" version="1" class="compliance">
      <metadata>
        <title>Power Mgmt - Password Wake When Plugged In</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15706" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23698-4" />
        <description>The user must be prompted for a password on resume from sleep (plugged in).</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447600" comment="Verifies 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4479" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Offer Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3470" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23282-7" />
        <description>The system must be configured to prevent unsolicited remote assistance offers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447900" comment="Verifies 'Configure Offer Remote Assistance' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4480" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Solicit Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3343" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25590-1" />
        <description>Solicited Remote Assistance must not be allowed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448000" comment="Verifies 'Configure Solicited Remote Assistance' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4481" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Session Logging</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15707" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24603-3" />
        <description>Remote Assistance log files must be generated.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448100" comment="Verifies 'Turn on session logging' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4483" version="1" class="compliance">
      <metadata>
        <title>RPC - Unauthenticated RPC Clients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14253" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24152-1" />
        <description>Unauthenticated RPC clients must be restricted from connecting to the RPC server.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448300" comment="Verifies 'Restrict Unauthenticated RPC clients' is set to 'Enabled' and 'Authenticated'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4484" version="1" class="compliance">
      <metadata>
        <title>WINCC-000065</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36696" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24560-5" />
        <description>The detection of compatibility issues for applications and drivers must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448400" comment="Verifies 'Detect compatibility issues for applications and drivers' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4485" version="1" class="compliance">
      <metadata>
        <title>MSDT Interactive Communication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21967" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23633-1" />
        <description>Microsoft Support Diagnostic Tool (MSDT) interactive communication with Microsoft must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448500" comment="Verifies 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4486" version="1" class="compliance">
      <metadata>
        <title>Windows Online Troubleshooting Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21969" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24776-7" />
        <description>Access to Windows Online Troubleshooting Service (WOTS) must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448600" comment="Verifies 'Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4487" version="1" class="compliance">
      <metadata>
        <title>Disable PerfTrack</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21970" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25080-3" />
        <description>Responsiveness events must be prevented from being aggregated and sent to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448700" comment="Verifies 'Enable/Disable PerfTrack' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4488" version="1" class="compliance">
      <metadata>
        <title>WINCC-000070</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36697" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23960-8" />
        <description>Trusted app installation must be enabled to allow for signed enterprise line of business apps.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448800" comment="Verifies 'Allow all trusted apps to install' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4489" version="2" class="compliance">
      <metadata>
        <title>Application Compatibility Program Inventory</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21971" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25331-0" />
        <description>The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448900" comment="Verifies 'Turn off Inventory Collector' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4490" version="1" class="compliance">
      <metadata>
        <title>Autoplay for non-volume devices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21973" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24715-5" />
        <description>Autoplay must be turned off for non-volume devices.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449000" comment="Verifies 'Disallow Autoplay for non-volume devices' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4491" version="1" class="compliance">
      <metadata>
        <title>Default Autorun Behavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="22692" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25487-0" />
        <description>The default autorun behavior must be configured to prevent autorun commands.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449100" comment="Verifies 'Default behavior for AutoRun' is set to 'Enabled:Do not execute any autorun commands'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4492" version="1" class="compliance">
      <metadata>
        <title>Disable Media Autoplay</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="2374" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23878-2" />
        <description>Autoplay must be disabled for all drives.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449200" comment="Verifies 'Turn off AutoPlay' is set to 'Enabled:All Drives'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4493" version="1" class="compliance">
      <metadata>
        <title>WINCC-000075</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36698" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24801-3" />
        <description>The use of biometrics must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449300" comment="Verifies 'Detect compatibility issues for applications and drivers' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4494" version="1" class="compliance">
      <metadata>
        <title>WINCC-000076</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36700" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23228-0" />
        <description>The password reveal button must not be displayed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449400" comment="Verifies 'Do not display the password reveal button' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4495" version="1" class="compliance">
      <metadata>
        <title>Enumerate Administrator Accounts on Elevation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14243" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24805-4" />
        <description>The system must require username and password to elevate a running application.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449500" comment="Verifies 'Enumerate administrator accounts on elevation' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4502" version="1" class="compliance">
      <metadata>
        <title>Maximum Log Size - Application</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26579" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24277-6" />
        <description>The Application event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450200" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4503" version="1" class="compliance">
      <metadata>
        <title>Maximum Log Size - Security</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26580" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24572-0" />
        <description>The Security event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450300" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:81920'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4504" version="1" class="compliance">
      <metadata>
        <title>Maximum Log Size - Setup</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26581" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23743-8" />
        <description>The Setup event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450400" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4505" version="1" class="compliance">
      <metadata>
        <title>Maximum Log Size - System</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26582" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24411-1" />
        <description>The System event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450500" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4506" version="1" class="compliance">
      <metadata>
        <title>WINCC-000088</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36707" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23531-7" />
        <description>The Windows SmartScreen must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450600" comment="Verifies 'Configure Windows SmartScreen' is set to 'Enabled' with 'Turn off SmartScreen' selected" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4507" version="1" class="compliance">
      <metadata>
        <title>Explorer Data Execution Prevention</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21980" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25147-0" />
        <description>Explorer Data Execution Prevention must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450700" comment="Verifies 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4508" version="1" class="compliance">
      <metadata>
        <title>Windows Explorer - Heap Termination</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15718" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23913-7" />
        <description>Turning off File Explorer heap termination on corruption must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450800" comment="Verifies 'Turn off heap termination on corruption' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4509" version="1" class="compliance">
      <metadata>
        <title>Windows Explorer - Shell Protocol Protected Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15683" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23923-6" />
        <description>File Explorer shell protocol must run in protected mode.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450900" comment="Verifies 'Turn off shell protocol protected mode' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4510" version="1" class="compliance">
      <metadata>
        <title>WINCC-000095</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36708" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25343-5" />
        <description>The location feature must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451000" comment="Verifies 'Turn off location' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4511" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Prevent Password Saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14247" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23787-5" />
        <description>Passwords must not be saved in the Remote Desktop Client.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451100" comment="Verifies 'Do not allow passwords to be saved' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4512" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Drive Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14249" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24648-8" />
        <description>Local drives must be prevented from sharing with Remote Desktop Session Hosts.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451200" comment="Verifies 'Do not allow drive redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4513" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Password Prompting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3453" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25016-7" />
        <description>Remote Desktop Services must always prompt a client for passwords upon connection.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451300" comment="Verifies 'Always prompt for password upon connection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4514" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Set Encryption Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3454" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24932-6" />
        <description>Remote Desktop Services must be configured with the client connection encryption set to the required level.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451400" comment="Verifies 'Set client connection encryption level' is set to 'Enabled' and 'High Level'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4517" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Delete Temp Folders</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3456" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24304-8" />
        <description>Remote Desktop Services must delete temporary folders when a session is terminated.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451700" comment="Verifies 'Do not delete temp folder upon exit' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4518" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Do Not Use Temp Folders</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3455" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24042-4" />
        <description>Remote Desktop Services must be configured to use session-specific temporary folders.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451800" comment="Verifies 'Do not use temporary folders per session' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4519" version="1" class="compliance">
      <metadata>
        <title>RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15682" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25340-1" />
        <description>Attachments must be prevented from being downloaded from RSS feeds.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451900" comment="Verifies 'Prevent downloading of enclosures' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4522" version="1" class="compliance">
      <metadata>
        <title>Defender - SpyNet Reporting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15713" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25247-8" />
        <description>Windows Defender SpyNet membership must be disabled.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452200" comment="Verifies 'Configure Microsoft Active Protection Service Reporting' is not configured" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452201" comment="Verifies 'Configure Microsoft Active Protection Service Reporting' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4525" version="1" class="compliance">
      <metadata>
        <title>Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15685" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23712-3" />
        <description>Users must be prevented from changing installation options.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452500" comment="Verifies 'Enable user control over installs' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4526" version="1" class="compliance">
      <metadata>
        <title>Always Install with Elevated Privileges Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="34974" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23919-4" />
        <description>The Windows Installer Always install with elevated privileges must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452600" comment="Verifies 'Always install with elevated privileges' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4527" version="1" class="compliance">
      <metadata>
        <title>Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15684" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23886-5" />
        <description>Users must be notified if a web-based program attempts to install software.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452700" comment="Verifies 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4528" version="1" class="compliance">
      <metadata>
        <title>Windows Installer - Vendor Signed Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15686" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23601-8" />
        <description>Non-administrators must be prevented from applying vendor-signed updates.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452800" comment="Verifies 'Prohibit non-administrators from applying vendor signed updates' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4530" version="1" class="compliance">
      <metadata>
        <title>Media Player - Disable Automatic Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3480" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24250-3" />
        <description>Media Player must be configured to prevent automatic checking for updates.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453000" comment="Verifies 'Prevent Automatic Updates' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4531" version="1" class="compliance">
      <metadata>
        <title>WINCC-000123</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36712" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24431-9" />
        <description>The Windows Remote Management (WinRM) client must not use Basic authentication.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453100" comment="Verifies 'Allow Basic authentication' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4532" version="1" class="compliance">
      <metadata>
        <title>WINCC-000124</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36713" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23728-9" />
        <description>The Windows Remote Management (WinRM) client must not allow unencrypted traffic.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453200" comment="Verifies 'Allow unencrypted traffic' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4533" version="1" class="compliance">
      <metadata>
        <title>WINCC-000125</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36714" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25263-5" />
        <description>The Windows Remote Management (WinRM) client must not use Digest authentication.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453300" comment="Verifies 'Disallow Digest authentication' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4534" version="1" class="compliance">
      <metadata>
        <title>WINCC-000126</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36718" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23637-2" />
        <description>The Windows Remote Management (WinRM) service must not use Basic authentication.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453400" comment="Verifies 'Allow Basic authentication' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4535" version="1" class="compliance">
      <metadata>
        <title>WINCC-000127</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36719" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25102-5" />
        <description>The Windows Remote Management (WinRM) service must not allow unencrypted traffic.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453500" comment="Verifies 'Allow unencrypted traffic' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4536" version="1" class="compliance">
      <metadata>
        <title>WINCC-000128</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36720" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23262-9" />
        <description>The Windows Remote Management (WinRM) service must not store RunAs credentials.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453600" comment="Verifies 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4537" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Secure RPC Connection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4447" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24788-2" />
        <description>The Remote Desktop Session Host must require secure RPC communications.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453700" comment="Verifies 'Require secure RPC communication' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4538" version="1" class="compliance">
      <metadata>
        <title>Unsupported Service Packs</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1073" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Systems must be maintained at a supported service pack level.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453801" comment="Verifies the OS Version is equal to or greater than 6.2" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453800" comment="Verifies the OS Build is equal to or greater than 9200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4539" version="1" class="compliance">
      <metadata>
        <title>Disable Guest Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24387-3" />
        <description>The built-in guest account must be disabled.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453900" comment="Verifies 'Accounts: Guest account status' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453901" comment="Verifies built-in guest account does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4540" version="1" class="compliance">
      <metadata>
        <title>Limit Blank Passwords</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3344" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25589-3" />
        <description>Local accounts with blank passwords must be restricted to prevent access from the network.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454000" comment="Verifies 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4541" version="1" class="compliance">
      <metadata>
        <title>Rename Built-in Administrator Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1115" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23836-0" />
        <description>The built-in administrator account must be renamed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454100" comment="Verifies 'Accounts: Rename administrator account' is set to a value other than 'Administrator'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4542" version="1" class="compliance">
      <metadata>
        <title>Rename Built-in Guest Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1114" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23675-2" />
        <description>The built-in guest account must be renamed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454200" comment="Verifies 'Accounts: Rename guest account' is set to a value other than 'Guest'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453901" comment="Verifies built-in guest account does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4543" version="1" class="compliance">
      <metadata>
        <title>Audit Access of Global System Objects</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <reference source="DISA" ref_id="14228" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24075-4" />
        <description>Auditing Access of Global System Objects must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454300" comment="Verifies 'Audit: Audit the access of global system objects' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4544" version="1" class="compliance">
      <metadata>
        <title>Audit Backup and Restore Privileges</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14229" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24923-5" />
        <description>Auditing of Backup and Restore Privileges must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454400" comment="Verifies 'Audit: Audit the use of Backup and Restore privilege' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4545" version="1" class="compliance">
      <metadata>
        <title>Audit Policy Subcategory Setting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14230" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24252-9" />
        <description>Audit policy using subcategories must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454500" comment="Verifies 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4546" version="1" class="compliance">
      <metadata>
        <title>Format and Eject Removable Media</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1171" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25217-1" />
        <description>Ejection of removable NTFS media must be restricted to Administrators.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454600" comment="Verifies 'Devices: Allowed to Format and Eject Removable Media' is set to 'Administrators'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4547" version="1" class="compliance">
      <metadata>
        <title>Encrypting and Signing of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6831" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24465-7" />
        <description>Outgoing secure channel traffic must be encrypted or signed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454700" comment="Verifies 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4548" version="1" class="compliance">
      <metadata>
        <title>Encryption of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1163" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24414-5" />
        <description>Outgoing secure channel traffic must be encrypted when possible.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454800" comment="Verifies 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454801" comment="Verifies 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4549" version="1" class="compliance">
      <metadata>
        <title>Signing of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1164" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24812-0" />
        <description>Outgoing secure channel traffic must be signed when possible.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454900" comment="Verifies 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454801" comment="Verifies 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4550" version="1" class="compliance">
      <metadata>
        <title>Computer Account Password Reset</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1165" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24243-8" />
        <description>The computer account password must not be prevented from being reset.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455000" comment="Verifies 'Domain member: Disable machine account password changes' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4551" version="1" class="compliance">
      <metadata>
        <title>Maximum Machine Account Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3373" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23596-0" />
        <description>The maximum age for machine account passwords must be set to requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455100" comment="Verifies 'Domain member: Maximum machine account password age' is set to '30' days or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455101" comment="Verifies 'Domain member: Maximum machine account password age' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4552" version="1" class="compliance">
      <metadata>
        <title>Strong Session Key</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3374" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25198-3" />
        <description>The system must be configured to require a strong session key.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455200" comment="Verifies 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4553" version="1" class="compliance">
      <metadata>
        <title>Display of Last User Name</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="11806" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24748-6" />
        <description>The system must be configured to prevent the display of the last username on the logon screen.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455300" comment="Verifies 'Interactive logon: Do not display last user name' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4554" version="1" class="compliance">
      <metadata>
        <title>Ctrl+Alt+Del Security Attention Sequence</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1154" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25803-8" />
        <description>The Ctrl+Alt+Del security attention sequence for logons must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455400" comment="Verifies 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4555" version="1" class="compliance">
      <metadata>
        <title>Password Expiration Warning</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1172" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23704-0" />
        <description>Users must be warned in advance of their passwords expiring.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455500" comment="Verifies 'Interactive logon: Prompt user to change password before expiration' is set for '14' days or more" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4556" version="1" class="compliance">
      <metadata>
        <title>Smart Card Removal Option</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1157" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24154-7" />
        <description>The Smart Card removal option must be configured to Force Logoff or Lock Workstation.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455600" comment="Verifies 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455601" comment="Verifies 'Interactive logon: Smart card removal behavior' is set to 'Force Logoff'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4557" version="1" class="compliance">
      <metadata>
        <title>SMB Client Packet Signing (Always)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6832" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24969-8" />
        <description>The Windows SMB client must be configured to always perform SMB packet signing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455700" comment="Verifies 'Microsoft Network Client: Digitally sign communications (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4558" version="1" class="compliance">
      <metadata>
        <title>SMB Client Packet Signing (if server agrees)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1166" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24740-3" />
        <description>The Windows SMB client must be enabled to perform SMB packet signing when possible.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455800" comment="Verifies 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4559" version="1" class="compliance">
      <metadata>
        <title>Unencrypted Password is Sent to SMB Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1141" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24751-0" />
        <description>Unencrypted passwords must not be sent to a third-party SMB Server.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455900" comment="Verifies 'Microsoft Network Client: Send unencrypted password to connect to third-party SMB servers' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4560" version="1" class="compliance">
      <metadata>
        <title>Idle Time Before Suspending a Session.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1174" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23897-2" />
        <description>The amount of idle time required before suspending a session must be properly set.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456000" comment="Verifies 'Microsoft network server: Amount of idle time required before suspending session' is set to '15' minutes or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4561" version="1" class="compliance">
      <metadata>
        <title>SMB Server Packet Signing (Always)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6833" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23716-4" />
        <description>The Windows SMB server must be configured to always perform SMB packet signing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456100" comment="Verifies 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4562" version="1" class="compliance">
      <metadata>
        <title>SMB Server Packet Signing (if client agrees)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1162" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24354-3" />
        <description>The Windows SMB server must perform SMB packet signing when possible.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456200" comment="Verifies 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4563" version="1" class="compliance">
      <metadata>
        <title>Forcibly Disconnect when Logon Hours Expire</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1136" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24148-9" />
        <description>Users must be forcibly disconnected when their logon hours expire.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456300" comment="Verifies 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4564" version="1" class="compliance">
      <metadata>
        <title>SPN Target Name Validation Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21950" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24502-7" />
        <description>The service principal name (SPN) target name validation level must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456400" comment="Verifies 'Microsoft network server: Server SPN target name validation level' is set to 'Off'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4565" version="1" class="compliance">
      <metadata>
        <title>Disable Automatic Logon</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1145" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24927-6" />
        <description>Automatic logons must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456500" comment="Verifes 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456501" comment="Verifies the automatic logon password registry value (DefaultPassword) does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4566" version="1" class="compliance">
      <metadata>
        <title>IPv6 Source Routing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21955" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24452-5" />
        <description>IPv6 source routing must be configured to the highest protection level.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456600" comment="Verifies 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4567" version="1" class="compliance">
      <metadata>
        <title>Disable IP Source Routing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4110" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24968-0" />
        <description>The system must be configured to prevent IP source routing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456700" comment="Verifies 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4568" version="1" class="compliance">
      <metadata>
        <title>Disable ICMP Redirect</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4111" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24977-1" />
        <description>The system must be configured to prevent ICMP redirects from overriding OSPF generated routes.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456800" comment="Verifies 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4569" version="1" class="compliance">
      <metadata>
        <title>TCP Connection Keep-Alive Time</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24310-5" />
        <description>The system must be configured to limit how often keep-alive packets are sent.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456900" comment="Verifies 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to '300000 or 5 minutes (recommended)' or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4570" version="1" class="compliance">
      <metadata>
        <title>IPSec Exemptions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14232" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24253-7" />
        <description>IPSec Exemptions must be limited.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457000" comment="Verifies 'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic' is set to 'Only ISAKMP is exempt (recommended for Windows Server 2003)'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4571" version="1" class="compliance">
      <metadata>
        <title>Name-Release Attacks</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4116" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23715-6" />
        <description>The system must be configured to ignore NetBIOS name release requests except from WINS servers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457100" comment="Verifies 'MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4572" version="1" class="compliance">
      <metadata>
        <title>Disable Router Discovery</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4112" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23677-8" />
        <description>The system must be configured to disable the Internet Router Discovery Protocol (IRDP).</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457200" comment="Verifies 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4573" version="1" class="compliance">
      <metadata>
        <title>Safe DLL Search Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3479" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23462-5" />
        <description>The system must be configured to use Safe DLL Search Mode.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457300" comment="Verifies 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4574" version="1" class="compliance">
      <metadata>
        <title>Screen Saver Grace Period</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4442" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24993-8" />
        <description>The system must be configured to have password protection take effect within a limited time frame when the screen saver becomes active.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457400" comment="Verifies 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 5 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4575" version="1" class="compliance">
      <metadata>
        <title>IPv6 TCP Data Retransmissions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21956" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25202-3" />
        <description>IPv6 TCP data retransmissions must be configured to prevent resources from becoming exhausted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457500" comment="Verifies 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to '3' or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4576" version="1" class="compliance">
      <metadata>
        <title>TCP Data Retransmissions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4438" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25455-7" />
        <description>The system must limit how many times unacknowledged TCP data is retransmitted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457600" comment="Verifies 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4577" version="1" class="compliance">
      <metadata>
        <title>Audit Log Warning Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4108" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25110-8" />
        <description>The system must generate an audit event when the audit log reaches a percentage of full threshold.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457700" comment="Verifies 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 90 percent or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4578" version="1" class="compliance">
      <metadata>
        <title>Restrict Anonymous SAM Enumeration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26283" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23082-1" />
        <description>Anonymous enumeration of SAM accounts must not be allowed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457800" comment="Verifies 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4579" version="1" class="compliance">
      <metadata>
        <title>Restrict Anonymous Network Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1093" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24774-2" />
        <description>Anonymous enumeration of shares must be restricted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457900" comment="Verifies 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4580" version="1" class="compliance">
      <metadata>
        <title>Storage of Passwords and Credentials</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3376" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23358-5" />
        <description>The system must be configured to prevent the storage of passwords and credentials.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458000" comment="Verifies 'Network access: Do not allow storage of credentials or .NET Passports for network authentication' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4581" version="1" class="compliance">
      <metadata>
        <title>Everyone Anonymous Rights</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3377" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23807-1" />
        <description>The system must not be configured to give anonymous users Everyone rights.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458100" comment="Verifies 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4582" version="2" class="compliance">
      <metadata>
        <title>Remotely Accessible Registry Paths</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3339" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23899-8" />
        <description>Unauthorized registry paths must not be remotely accessible.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458200" comment="Verifies 'Network access: Remotely accessible registry paths' is configured to contain authorized registry paths" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458201" comment="Verifies 'Network access: Remotely accessible registry paths' is configured with no entries" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458202" comment="Verifies 'Network access: Remotely accessible registry paths' is not configured" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4583" version="2" class="compliance">
      <metadata>
        <title>Remotely Accessible Registry Paths and Sub-Paths</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4443" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25426-8" />
        <description>Unauthorized remotely accessible registry paths and sub-paths must not be configured.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458300" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is configured to contain authorized registry paths" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458301" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is not configured" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458302" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is configured but contains no entries" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4584" version="1" class="compliance">
      <metadata>
        <title>Anonymous Access to Named Pipes and Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6834" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24564-7" />
        <description>Anonymous access to Named Pipes and Shares must be restricted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458400" comment="Verifies 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4585" version="2" class="compliance">
      <metadata>
        <title>Anonymous Access to Network Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3340" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25592-7" />
        <description>Unauthorized shares must not be accessed anonymously.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458500" comment="Verifies 'Network access: Shares that can be accessed anonymously' is blank" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458501" comment="Verifies 'Network access: Shares that can be accessed anonymously' is not configured" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4586" version="1" class="compliance">
      <metadata>
        <title>Sharing and Security Model for Local Accounts</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3378" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-22742-1" />
        <description>The system must be configured to use the Classic security model.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458600" comment="Verifies 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4587" version="1" class="compliance">
      <metadata>
        <title>Computer Identity Authentication for NTLM</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21951" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25508-3" />
        <description>Services using Local System that use negotiate when reverting to NTLM authentication must use the computer identity vs. authenticating anonymously.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458700" comment="Verifies 'Network Security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4588" version="1" class="compliance">
      <metadata>
        <title>NTLM NULL Session Fallback</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21952" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25531-5" />
        <description>NTLM must be prevented from falling back to a Null session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458800" comment="Verifies 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4589" version="1" class="compliance">
      <metadata>
        <title>PKU2U Online Identities Authentication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21953" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25299-9" />
        <description>PKU2U authentication using online identities must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458900" comment="Verifies 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4590" version="2" class="compliance">
      <metadata>
        <title>Kerberos Encryption Types</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21954" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24147-1" />
        <description>Kerberos encryption types must be configured to prevent the use of DES encryption suites.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459000" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is not configured" />
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:459001" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC' not selected" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:459002" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC_MD5' not selected" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:459003" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC_MD5' not selected" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4591" version="1" class="compliance">
      <metadata>
        <title>LAN Manager Hash Value Stored</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3379" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24150-5" />
        <description>The system must be configured to prevent the storage of the LAN Manager hash of passwords.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459100" comment="Verifies 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4592" version="1" class="compliance">
      <metadata>
        <title>Force Logoff When Logon Hours Expire</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3380" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25367-4" />
        <description>The system must be configured to force users to log off when their allowed logon hours expire.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459200" comment="Verifies 'Network security: Force logoff when logon hours expire' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4593" version="1" class="compliance">
      <metadata>
        <title>LanMan Authentication Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1153" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24650-4" />
        <description>The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459300" comment="Verifies 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM &amp; NTLM'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4594" version="1" class="compliance">
      <metadata>
        <title>LDAP Client Signing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3381" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25245-2" />
        <description>Network Security: LDAP client signing requirements</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459400" comment="Verifies 'Network security: LDAP client signing requirements' is set to at a minimum 'Negotiate signing'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4595" version="1" class="compliance">
      <metadata>
        <title>Session Security for NTLM SSP Based Clients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3382" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24783-3" />
        <description>The system must be configured to meet the minimum session security requirement for NTLM SSP based clients.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459500" comment="Verifies 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459501" comment="Verifies 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require 128-bit encryption'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4596" version="1" class="compliance">
      <metadata>
        <title>Session Security for NTLM SSP Based Servers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25264-3" />
        <description>The system must be configured to meet the minimum session security requirement for NTLM SSP based servers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459600" comment="Verifies 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459601" comment="Verifies 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require 128-bit encryption'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4599" version="1" class="compliance">
      <metadata>
        <title>Display Shutdown Button</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1075" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25100-9" />
        <description>The shutdown option must be available from the logon dialog box.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459900" comment="Verifies 'Shutdown: Allow system to be shutdown without having to log on' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4600" version="1" class="compliance">
      <metadata>
        <title>FIPS Compliant Algorithms</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3383" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23921-0" />
        <description>The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460000" comment="Verifies 'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4601" version="1" class="compliance">
      <metadata>
        <title>Case Insensitivity for Non-Windows</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3385" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24870-8" />
        <description>The system must be configured to require case insensitivity for non-Windows subsystems.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460100" comment="Verifies 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4602" version="1" class="compliance">
      <metadata>
        <title>Global System Objects Permission Strength</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1173" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24633-0" />
        <description>The default permissions of global system objects must be increased.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460200" comment="Verifies 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4603" version="1" class="compliance">
      <metadata>
        <title>UAC - Admin Approval Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14234" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24134-9" />
        <description>User Account Control approval mode for the built-in Administrator must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460300" comment="Verifies 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4604" version="1" class="compliance">
      <metadata>
        <title>UAC - Admin Elevation Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14235" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23877-4" />
        <description>User Account Control must, at minimum, prompt administrators for consent.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460400" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent' or more secure options" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460401" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is not set to 'Elevate without prompting'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4605" version="1" class="compliance">
      <metadata>
        <title>UAC - User Elevation Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14236" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24519-1" />
        <description>User Account Control must automatically deny standard user requests for elevation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460500" comment="Verifies 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4606" version="1" class="compliance">
      <metadata>
        <title>UAC - Application Installations</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14237" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24498-8" />
        <description>User Account Control must be configured to detect application installations and prompt for elevation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460600" comment="Verifies 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4607" version="1" class="compliance">
      <metadata>
        <title>UAC - Application Elevations</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="16008" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23880-8" />
        <description>Windows must elevate all applications in User Account Control, not just signed ones.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460700" comment="Verifies 'User Account Control: Only elevate executables that are signed and validated' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4608" version="1" class="compliance">
      <metadata>
        <title>UAC - UIAccess Application Elevation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14239" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25471-4" />
        <description>User Account Control must only elevate UIAccess applications that are installed in secure locations.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460800" comment="Verifies 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4609" version="1" class="compliance">
      <metadata>
        <title>UAC - All Admin Approval Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14240" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23653-9" />
        <description>User Account Control must run all administrators in Admin Approval Mode, enabling UAC.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460900" comment="Verifies 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4610" version="1" class="compliance">
      <metadata>
        <title>UAC - Secure Desktop Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14241" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23656-2" />
        <description>User Account Control must switch to the secure desktop when prompting for elevation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461000" comment="Verifies 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4611" version="1" class="compliance">
      <metadata>
        <title>UAC - Non UAC Compliant Application Virtualization</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14242" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24231-3" />
        <description>User Account Control must virtualize file and registry write failures to per-user locations.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461100" comment="Verifies 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4614" version="1" class="compliance">
      <metadata>
        <title>NTFS Requirement</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1081" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Local volumes must be formatted using NTFS.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461400" comment="Verifies local volumes are formatted using NTFS" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4615" version="1" class="compliance">
      <metadata>
        <title>Legal Notice Display</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1089" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25355-9" />
        <description>The required legal notice must be configured to display before console logon.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461500" comment="Legal Notice is configured with the required text." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461501" comment="Legal Notice is configured with the required text." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4616" version="2" class="compliance">
      <metadata>
        <title>Caching of logon credentials</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1090" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24264-4" />
        <description>Caching of logon credentials must be limited.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461600" comment="Verifies 'Interactive Logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4' logons or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469400" comment="System is not a member of a domain" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4617" version="1" class="compliance">
      <metadata>
        <title>UR: Act as part of the operating system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1102" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25043-1" />
        <description>Unauthorized accounts must not have the Act as part of the operating system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461700" comment="Act as part of the operating system - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4618" version="1" class="compliance">
      <metadata>
        <title>Secure Print Driver Installation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1151" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25176-9" />
        <description>The print driver installation privilege must be restricted to administrators.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461800" comment="Verifies 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4619" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Session Limit</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3449" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23328-8" />
        <description>Remote Desktop Services must limit users to one remote session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461900" comment="Verifies 'Restrict Remote Desktop Services users to a Single Remote Desktop Services Session' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4620" version="4" class="compliance">
      <metadata>
        <title>Group Policy - Do Not Turn off Background Refresh</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <description>Group Policies must be refreshed in the background if the user is logged on.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462000" comment="Verifies 'Turn Off Background Refresh of Group Policy' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462001" comment="Verifies 'DisableBkGndGroupPolicy' registry value is set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4621" version="2" class="compliance">
      <metadata>
        <title>Optional Subsystems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4445" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24878-1" />
        <description>Optional Subsystems must not be permitted to operate on the system.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462100" comment="Verifies 'System Settings: Optional Subsystems' is blank" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4623" version="1" class="compliance">
      <metadata>
        <title>Event Viewer Events.asp Links</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15672" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24235-4" />
        <description>Event Viewer Events.asp links must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462300" comment="Verifies 'Turn off Event Viewer “Events.asp' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4624" version="1" class="compliance">
      <metadata>
        <title>Media Player - First Use Dialog Boxes</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15687" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25014-2" />
        <description>Users must not be presented with Privacy and Installation options on first use of Windows Media Player.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462400" comment="Verifies 'Do Not Show First Use Dialog Boxes' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4625" version="1" class="compliance">
      <metadata>
        <title>Media DRM - Internet Access</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15722" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24380-8" />
        <description>Windows Media Digital Rights Management (DRM) must be prevented from accessing the Internet.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462500" comment="Verifies 'Prevent Windows Media DRM Internet Access' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4626" version="1" class="compliance">
      <metadata>
        <title>Software Certificate Installation Files</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15823" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Software certificate installation files must be removed from a system.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462600" comment="Verifies certificate installation files (*.p12 and *.pfx) are not present on the system" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4627" version="1" class="compliance">
      <metadata>
        <title>UAC - UIAccess Secure Desktop</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15991" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23295-9" />
        <description>UIAccess applications must not be allowed to prompt for elevation without using the secure desktop.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462700" comment="Verifies 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4628" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - COM Port Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15997" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24625-6" />
        <description>Users must be prevented from mapping local COM ports and redirecting data from the Remote Desktop Session Host to local COM ports.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462800" comment="Verifies 'Do not allow COM port redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4629" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - LPT Port Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15998" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24381-6" />
        <description>Users must be prevented from mapping local LPT ports and redirecting data from the Remote Desktop Session Host to local LPT ports.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462900" comment="Verifies 'Do not allow LPT port redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4630" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - PNP Device Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15999" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24708-0" />
        <description>Users must be prevented from redirecting Plug and Play devices to the Remote Desktop Session Host.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463000" comment="Verifies 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4631" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Smart Card Device Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="16000" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24260-2" />
        <description>The system must be configured to ensure smart card devices can be redirected to the Remote Desktop session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463100" comment="Verifies 'Do not allow smart card device redirection' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4633" version="1" class="compliance">
      <metadata>
        <title>UR: Debug Programs</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="18010" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23648-9" />
        <description>Unauthorized accounts must not have the Debug programs user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463300" comment="Debug Programs - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4634" version="1" class="compliance">
      <metadata>
        <title>Legal Banner Dialog Box Title</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26359" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24020-0" />
        <description>The Windows dialog box title for the legal banner must be configured.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463400" comment="Legal Notice Caption - DoD Notice and Consent Banner" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463401" comment="Legal Notice Caption - US Department of Defense Warning Statement" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4636" version="1" class="compliance">
      <metadata>
        <title>UR: Allow log on locally</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26472" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25228-8" />
        <description>Unauthorized accounts must not have the Allow log on locally user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463600" comment="Allow log on locally - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4638" version="1" class="compliance">
      <metadata>
        <title>UR: Back up files and directories</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26474" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25380-7" />
        <description>Unauthorized accounts must not have the Back up files and directories user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463800" comment="Back up files and directories - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4639" version="1" class="compliance">
      <metadata>
        <title>UR: Bypass traverse checking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26475" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25271-8" />
        <description>Unauthorized accounts must not have the Bypass traverse checking user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463900" comment="Bypass traverse checking - Administrators, Authenticated Users, Local Service, Network Service, Window Manager\Window Manager Group" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4640" version="1" class="compliance">
      <metadata>
        <title>UR: Change the system time</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26476" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24185-1" />
        <description>Unauthorized accounts must not have the Change the system time user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464000" comment="Change the system time - Administrators, Local Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4641" version="1" class="compliance">
      <metadata>
        <title>UR: Change the time zone</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26477" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24632-2" />
        <description>Unauthorized accounts must not have the Change the time zone user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464100" comment="Change the time zone - Administrators, Local Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4642" version="1" class="compliance">
      <metadata>
        <title>UR: Create a pagefile</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26478" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23972-3" />
        <description>Unauthorized accounts must not have the Create a pagefile user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464200" comment="Create a pagefile - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4643" version="1" class="compliance">
      <metadata>
        <title>UR: Create a token object</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26479" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23939-2" />
        <description>Unauthorized accounts must not have the Create a token object user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464300" comment="Create a token object - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4644" version="1" class="compliance">
      <metadata>
        <title>UR: Create global objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26480" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23850-1" />
        <description>Unauthorized accounts must not have the Create global objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464400" comment="Create global objects - Administrators, Service, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4645" version="1" class="compliance">
      <metadata>
        <title>UR: Create permanent shared objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26481" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23723-0" />
        <description>Unauthorized accounts must not have the Create permanent shared objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464500" comment="Create permanent shared objects - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4646" version="2" class="compliance">
      <metadata>
        <title>UR: Create symbolic links</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26482" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24549-8" />
        <description>Unauthorized accounts must not have the Create symbolic links user right.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464600" comment="Create symbolic links - Administrators" />
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:464601" comment="Hyper-v role installed" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:464602" comment="Create symbolic links - Administrators and VMs" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4647" version="1" class="compliance">
      <metadata>
        <title>UR: Force shutdown from a remote system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26488" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24734-6" />
        <description>Unauthorized accounts must not have the Force shutdown from a remote system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464700" comment="Force shutdown from a remote system - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4648" version="1" class="compliance">
      <metadata>
        <title>UR: Generate security audits</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26489" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24048-1" />
        <description>Unauthorized accounts must not have the Generate security audits user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464800" comment="Generate security audits - Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4649" version="1" class="compliance">
      <metadata>
        <title>UR: Impersonate a client after authentication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26490" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24477-2" />
        <description>Unauthorized accounts must not have the Impersonate a client after authentication user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464900" comment="Impersonate a client after authentication - Administrators, Service, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4651" version="1" class="compliance">
      <metadata>
        <title>UR: Increase scheduling priority</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26492" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24911-0" />
        <description>Unauthorized accounts must not have the Increase scheduling priority user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465100" comment="Increase scheduling priority - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4652" version="1" class="compliance">
      <metadata>
        <title>UR: Load and unload device drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26493" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24779-1" />
        <description>Unauthorized accounts must not have the Load and unload device drivers user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465200" comment="Load and unload device drivers - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4653" version="1" class="compliance">
      <metadata>
        <title>UR: Lock pages in memory</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26494" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23829-5" />
        <description>Unauthorized accounts must not have the Lock pages in memory user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465300" comment="Lock pages in memory - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4655" version="1" class="compliance">
      <metadata>
        <title>UR: Modify an object label</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26497" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24682-7" />
        <description>Unauthorized accounts must not have the Modify an object label user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465500" comment="Modify an object label - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4656" version="1" class="compliance">
      <metadata>
        <title>UR: Modify firmware environment values</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26498" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25533-1" />
        <description>Unauthorized accounts must not have the Modify firmware environment values user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465600" comment="Modify firmware environment values - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4657" version="1" class="compliance">
      <metadata>
        <title>UR: Perform volume maintenance tasks</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26499" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25070-4" />
        <description>Unauthorized accounts must not have the Perform volume maintenance tasks user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465700" comment="Perform volume maintenance tasks - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4658" version="1" class="compliance">
      <metadata>
        <title>UR: Profile single process</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26500" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23844-4" />
        <description>Unauthorized accounts must not have the Profile single process user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465800" comment="Profile single process - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4659" version="1" class="compliance">
      <metadata>
        <title>UR: Profile system performance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26501" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23802-2" />
        <description>Unauthorized accounts must not have the Profile system performance user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465900" comment="Profile system performance - Administrators, NT Service\WdiServiceHost" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4660" version="1" class="compliance">
      <metadata>
        <title>UR: Replace a process level token</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26503" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24555-5" />
        <description>Unauthorized accounts must not have the Replace a process level token user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466000" comment="Replace a process level token - Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4661" version="1" class="compliance">
      <metadata>
        <title>UR: Restore files and directories</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25518-2" />
        <description>Unauthorized accounts must not have the Restore files and directories user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466100" comment="Restore files and directories - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4662" version="1" class="compliance">
      <metadata>
        <title>UR: Shut down the system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26505" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23500-2" />
        <description>Unauthorized accounts must not have the Shut down the system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466200" comment="Shut down the system - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4663" version="1" class="compliance">
      <metadata>
        <title>UR: Take ownership of files or other objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26506" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25585-1" />
        <description>Unauthorized accounts must not have the Take ownership of files or other objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466300" comment="Take ownership of files or other objects - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4664" version="1" class="compliance">
      <metadata>
        <title>Audit - Credential Validation - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26529" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Credential Validation successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Credential Validation - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466400" comment="Audit - Credential Validation - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466401" comment="Audit - Credential Validation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4665" version="1" class="compliance">
      <metadata>
        <title>Audit - Credential Validation - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26530" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Credential Validation failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Credential Validation - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466500" comment="Audit - Credential Validation - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466401" comment="Audit - Credential Validation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4666" version="1" class="compliance">
      <metadata>
        <title>Audit - Computer Account Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26531" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Computer Account Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Computer Account Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466600" comment="Audit - Computer Account Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466601" comment="Audit - Computer Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4667" version="1" class="compliance">
      <metadata>
        <title>Audit - Computer Account Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26532" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Computer Account Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Computer Account Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466700" comment="Audit - Computer Account Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466601" comment="Audit - Computer Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4668" version="1" class="compliance">
      <metadata>
        <title>Audit - Other Account Management Events - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26533" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Other Account Management Events successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Other Account Management Events - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466800" comment="Audit - Other Account Management Events - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466801" comment="Audit - Other Account Management Events - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4669" version="1" class="compliance">
      <metadata>
        <title>Audit - Other Account Management Events - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26534" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Other Account Management Events failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Other Account Management Events - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466900" comment="Audit - Other Account Management Events - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466801" comment="Audit - Other Account Management Events - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4670" version="1" class="compliance">
      <metadata>
        <title>Audit - Security Group Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26535" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Security Group Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security Group Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467000" comment="Audit - Security Group Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467001" comment="Audit - Security Group Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4671" version="1" class="compliance">
      <metadata>
        <title>Audit - Security Group Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26536" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Security Group Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security Group Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467100" comment="Audit - Security Group Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467001" comment="Audit - Security Group Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4672" version="1" class="compliance">
      <metadata>
        <title>Audit - User Account Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26537" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - User Account Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - User Account Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467200" comment="Audit - User Account Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467201" comment="Audit - User Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4673" version="1" class="compliance">
      <metadata>
        <title>Audit - User Account Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26538" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - User Account Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - User Account Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467300" comment="Audit - User Account Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467201" comment="Audit - User Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4674" version="1" class="compliance">
      <metadata>
        <title>Audit - Process Creation - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26539" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Detailed Tracking - Process Creation successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Process Creation - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467400" comment="Audit - Process Creation - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467401" comment="Audit - Process Creation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4675" version="1" class="compliance">
      <metadata>
        <title>Audit - Logoff - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26540" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logoff successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logoff - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467500" comment="Audit - Logoff - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467501" comment="Audit - Logoff - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4676" version="1" class="compliance">
      <metadata>
        <title>Audit - Logon - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26541" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logon successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logon - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467600" comment="Audit - Logon - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467601" comment="Audit - Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4677" version="1" class="compliance">
      <metadata>
        <title>Audit - Logon - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26542" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logon failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logon - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467700" comment="Audit - Logon - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467601" comment="Audit - Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4678" version="1" class="compliance">
      <metadata>
        <title>Audit - Special Logon - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26543" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Special Logon successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Special Logon - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467800" comment="Audit - Special Logon - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467801" comment="Audit - Special Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4681" version="1" class="compliance">
      <metadata>
        <title>Audit - Audit Policy Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26546" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Audit Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468100" comment="Audit - Audit Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468101" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4682" version="1" class="compliance">
      <metadata>
        <title>Audit - Audit Policy Change - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26547" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Audit Policy Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468200" comment="Audit - Audit Policy Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468101" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4683" version="1" class="compliance">
      <metadata>
        <title>Audit - Authentication Policy Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26548" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Authentication Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Authentication Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468300" comment="Audit - Authentication Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468301" comment="Audit - Authentication Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4684" version="1" class="compliance">
      <metadata>
        <title>Audit - Sensitive Privilege Use - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26549" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Privilege Use - Sensitive Privilege Use successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Sensitive Privilege Use - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468400" comment="Audit - Sensitive Privilege Use - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468401" comment="Audit - Sensitive Privilege Use - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4685" version="1" class="compliance">
      <metadata>
        <title>Audit - Sensitive Privilege Use - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26550" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Privilege Use - Sensitive Privilege Use failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Sensitive Privilege Use - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468500" comment="Audit - Sensitive Privilege Use - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468401" comment="Audit - Sensitive Privilege Use - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4686" version="1" class="compliance">
      <metadata>
        <title>Audit - IPSec Driver - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26551" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - IPsec Driver successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - IPSec Driver - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468600" comment="Audit - IPSec Driver - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468601" comment="Audit - IPSec Driver - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4687" version="1" class="compliance">
      <metadata>
        <title>Audit - IPSec Driver - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26552" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - IPsec Driver failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - IPSec Driver - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468700" comment="Audit - IPSec Driver - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468601" comment="Audit - IPSec Driver - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4688" version="1" class="compliance">
      <metadata>
        <title>Audit - Security State Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26553" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security State Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security State Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468800" comment="Audit - Security State Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468801" comment="Audit - Security State Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4689" version="1" class="compliance">
      <metadata>
        <title>Audit - Security State Change - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26554" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security State Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security State Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468900" comment="Audit - Security State Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468801" comment="Audit - Security State Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4690" version="1" class="compliance">
      <metadata>
        <title>Audit - Security System Extension - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26555" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security System Extension successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security System Extension - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469000" comment="Audit - Security System Extension - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469001" comment="Audit - Security System Extension - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4691" version="1" class="compliance">
      <metadata>
        <title>Audit - Security System Extension - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26556" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security System Extension failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security System Extension - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469100" comment="Audit - Security System Extension - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469001" comment="Audit - Security System Extension - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4692" version="1" class="compliance">
      <metadata>
        <title>Audit - System Integrity - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26557" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - System Integrity successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - System Integrity - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469200" comment="Audit - System Integrity - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469201" comment="Audit - System Integrity - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4693" version="1" class="compliance">
      <metadata>
        <title>Audit - System Integrity - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26558" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - System Integrity failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - System Integrity - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469300" comment="Audit - System Integrity - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469201" comment="Audit - System Integrity - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4694" version="1" class="compliance">
      <metadata>
        <title>Local admin accounts filtered token policy enabled on domain systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36439" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469400" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469401" comment="Verifies local admin accounts filtered token policy is enabled on domain systems" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4715" version="1" class="compliance">
      <metadata>
        <title>Anonymous Access to Named Pipes - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3338" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25466-4" />
        <description>Named pipes that can be accessed anonymously must be configured to contain no values.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471500" comment="Verifies 'Network access: Named Pipes that can be accessed anonymously' is configured to contain no values" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4716" version="1" class="compliance">
      <metadata>
        <title>UR: Access this computer from the network - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26470" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24938-3" />
        <description>Unauthorized accounts must not have the Access this computer from the network user right on member servers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471600" comment="Access this computer from the network - Administrators, Authenticated Users" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4717" version="1" class="compliance">
      <!--This check for the Deny log on as a batch will return an Unknown with Policy Auditor 5.3 due a case sensitivity issue with user right name as defined in the schema - sedenybatchLogonright.-->
      <metadata>
        <title>UR: Deny log on as a batch job - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26483" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25215-5" />
        <description>The Deny log on as a batch job user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4720" comment="Deny log on as a batch job - Non-Domain Systems." />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4721" comment="Deny log on as a batch job - Domain Joined Systems." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4718" version="1" class="compliance">
      <metadata>
        <title>UR: Deny log on as a service - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26484" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23117-5" />
        <description>The Deny log on as a service user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems. No other groups or accounts must be assigned this right.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4722" comment="Deny log on as a service - Non-Domain Systems." />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4723" comment="Deny log on as a service - Domain Joined Systems." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4719" version="1" class="compliance">
      <metadata>
        <title>UR: Deny log on locally - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26485" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24460-8" />
        <description>The Deny log on locally user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4724" comment="Deny log on locally - Non-Domain Systems." />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4725" comment="Deny log on locally - Domain Joined Systems." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4720" version="1" class="compliance">
      <metadata>
        <title>UR: Deny log on as a batch job - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26483" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25215-5" />
        <description>The Deny log on as a batch job user right on member servers must be configured to prevent unauthenticated access on non-domain systems.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469400" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471300" comment="Deny log on as a batch job - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4721" version="2" class="compliance">
      <metadata>
        <title>UR: Deny log on as a batch job - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26483" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25215-5" />
        <description>The Deny log on as a batch job user right on member servers must be configured to prevent access from highly privileged domain accounts and unauthenticated access on domain systems.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469402" comment="System is a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471300" comment="Deny log on as a batch job - Guests" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472100" comment="Deny log on as a batch job - Domain Admins" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472101" comment="Deny log on as a batch job - Enterprise Admins" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4722" version="1" class="compliance">
      <metadata>
        <title>UR: Deny log on as a service - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26484" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23117-5" />
        <description>The Deny log on as a service user right on non-domain systems must be configured to include no accounts or groups.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469400" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470500" comment="Deny log on as a service - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4723" version="2" class="compliance">
      <metadata>
        <title>UR: Deny log on as a service - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26484" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23117-5" />
        <description>The Deny log on as a service user right on on domain systems must be configured to prevent access from highly privileged domain accounts on domain systems.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469402" comment="System is a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472300" comment="Deny log on as a service - Domain Admins" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472301" comment="Deny log on as a service - Enterprise Admins" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4724" version="1" class="compliance">
      <metadata>
        <title>UR: Deny log on locally - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26485" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24460-8" />
        <description>The Deny log on locally user right on member servers must be configured to prevent unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469400" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470600" comment="Deny log on locally - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4725" version="2" class="compliance">
      <metadata>
        <title>UR: Deny log on locally - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26485" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24460-8" />
        <description>The Deny log on locally user right on member servers must be configured to prevent access from highly privileged domain accounts and unauthenticated access on domain systems.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469402" comment="System is a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470600" comment="Deny log on locally - Guests" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472500" comment="Deny log on locally - Domain Admins" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472501" comment="Deny log on locally - Enterprise Admins" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4727" version="1" class="compliance">
      <metadata>
        <title>WINCC-000011</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36673" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24070-5" />
        <description>IP stateless autoconfiguration limits state must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472700" comment="Verifies 'Set IP Stateless Autoconfiguration Limits State' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4728" version="1" class="compliance">
      <metadata>
        <title>WINCC-000106</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36709" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23213-2" />
        <description>Basic authentication for RSS feeds over HTTP must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472800" comment="Verifies 'Turn on Basic feed authentication over HTTP' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4730" version="2" class="compliance">
      <metadata>
        <title>WINSO-000021</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <description>The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473000" comment="Verifies 'Interactive logon: Machine inactivity limit' is set to '900' seconds or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4731" version="3" class="compliance">
      <metadata>
        <title>Fax Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26600" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25383-1" />
        <description>The Fax service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473100" comment="Verifies the Fax service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473101" comment="Verifies the Fax service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4732" version="2" class="compliance">
      <metadata>
        <title>Microsoft FTP Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26602" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23863-4" />
        <description>The Microsoft FTP service must not be installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473200" comment="Verifies the Microsoft FTP service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473201" comment="Verifies the Microsoft FTP service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4733" version="1" class="compliance">
      <metadata>
        <title>Peer Networking Identity Manager Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26604" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24910-2" />
        <description>The Peer Networking Identity Manager service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473300" comment="Verifies the Peer Networking Identity Manager service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473301" comment="Verifies the Peer Networking Identity Manager service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4734" version="1" class="compliance">
      <metadata>
        <title>Simple TCP/IP Services Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26605" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23748-7" />
        <description>The Simple TCP/IP Services service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473400" comment="Verifies the Simple TCP/IP Services service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473401" comment="Verifies the Simple TCP/IP Services service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4735" version="1" class="compliance">
      <metadata>
        <title>Telnet Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26606" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24474-9" />
        <description>The Telnet service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473500" comment="Verifies the Telnet service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473501" comment="Verifies the Telnet service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4736" version="1" class="compliance">
      <metadata>
        <title>WNSV-000106</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="40206" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24365-9" />
        <description>The Smart Card Removal Policy service must be configured to automatic.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473600" comment="Verifies the Smart Card Removal Policy service startup type is Automatic" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4737" version="3" class="compliance">
      <metadata>
        <title>UR: Manage auditing and security log</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>Unauthorized accounts must not have the Manage auditing and security log user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473700" comment="Manage auditing and security log - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4739" version="1" class="compliance">
      <metadata>
        <title>UR: Enable computer and user accounts to be trusted for delegation - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26487" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25270-0" />
        <description>Unauthorized accounts must not have the Enable computer and user accounts to be trusted for delegation user right on member servers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473900" comment="Enable computer and user accounts to be trusted for delegation - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4740" version="2" class="compliance">
      <metadata>
        <title>UR: Access Credential Manager as a trusted caller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <description>Unauthorized accounts must not have the Access Credential Manager as a trusted caller user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:474000" comment="Access Credential Manager as a trusted caller - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4837" version="3" class="compliance">
      <metadata>
        <title>WINPK-000001 DoD Root Certificate</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="32272" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The DoD Root Certificate must be installed into the Trusted Root Store.</description>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Checking HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\ for the trusted root certificates.">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483700" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483704" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483708" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
        </criteria>
        <criteria operator="AND" comment="Checking HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\ for the trusted root certificates.">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483701" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483705" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483709" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
        </criteria>
        <criteria operator="AND" comment="Checking HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\ for the trusted root certificates.">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483702" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483706" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483710" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
        </criteria>
        <criteria operator="AND" comment="Checking HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\ for the trusted root certificates.">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483703" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483707" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483711" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4838" version="3" class="compliance">
      <metadata>
        <title>WINPK-000003 DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate. Windows 2012.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="32274" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4876" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4839" version="3" class="compliance">
      <metadata>
        <title>The US DoD CCEB Interoperability Root CA cross-certificates must be installed in the Untrusted Certificates Store. Win2012.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="40237" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4877" comment="US DoD CCEB Interoperability cross-certs must be installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4840" version="1" class="compliance">
      <metadata>
        <title>UR: Deny access to this computer from the network - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1155" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-24188-5" />
        <description>The Deny access to this computer from the network user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4841" comment="Deny access to this computer from the network - Non-Domain Systems" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4842" comment="Deny access to this computer from the network - Domain Joined Systems" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4841" version="2" class="compliance">
      <metadata>
        <title>UR: Deny access to this computer from the network - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1155" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny access to this computer from the network user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4982" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469500" comment="Deny access to this computer from the network - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4842" version="4" class="compliance">
      <metadata>
        <title>UR: Deny access to this computer from the network - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1155" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny access to this computer from the network user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="System is not a member of a domain" definition_ref="oval:mil.disa.fso.windows:def:4982" negate="true" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469500" comment="Deny access to this computer from the network - Guests" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:484000" comment="Deny access to this computer from the network - Domain Admins" />
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:484001" comment="Deny access to this computer from the network - Enterprise Admins pattern" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:484002" comment="Deny access to this computer from the network - Enterprise Admins strict" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4876" version="5" class="compliance">
      <metadata>
        <title>WINPK-000003 DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487600" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487601" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487602" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487603" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487604" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487605" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487606" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487607" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487608" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487609" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487610" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487611" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4877" version="336" class="compliance">
      <metadata>
        <title>WINPK-000004</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487704" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487705" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487706" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487707" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4882" version="2" class="compliance">
      <metadata>
        <title>UR: Deny log on through Remote Desktop Services - Member Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26486" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23273-6" />
        <description>The Deny log on through Remote Desktop Services user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4883" comment="Deny log on through Remote Desktop Services - Non-Domain Systems" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4884" comment="Deny log on through Remote Desktop Services - Domain Joined Systems" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4883" version="3" class="compliance">
      <metadata>
        <title>UR: Deny log on through Remote Desktop Services - Non-Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26486" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on through Remote Desktop Services user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4982" comment="System is not a member of a domain" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:488200" comment="Deny log on through Remote Desktop Services - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4884" version="3" class="compliance">
      <metadata>
        <title>UR: Deny log on through Remote Desktop Services - Domain Systems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26486" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on through Remote Desktop Services user right on member servers must be configured to prevent access from highly privileged domain accounts and local administrator accounts on domain systems and unauthenticated access on all systems.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4982" comment="System is not a member of a domain" negate="true" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:488200" comment="Deny log on through Remote Desktop Services - Guests" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:488201" comment="Deny log on through Remote Desktop Services - Domain Admins" />
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:488202" comment="Deny log on through Remote Desktop Services - Enterprise Admins pattern" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:488203" comment="Deny log on through Remote Desktop Services - Enterprise Admins strict" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:488204" comment="Deny log on through Remote Desktop Services - Local account pattern" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:488205" comment="Deny log on through Remote Desktop Services - Local account strict" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4973" version="1" class="compliance">
      <metadata>
        <title>The operating system must shut down by default upon audit failure (unless availability is an overriding concern).</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 2008 R2</platform>
          <platform>Microsoft Windows 2012</platform>
        </affected>
        <description>Required to enter a password to access private keys</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497300" comment="HKEY_LOCAL_MACHINE\System\Policies\Microsoft\Cryptography\ForceKeyProtection exists and equals 2" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4975" version="2" class="compliance">
      <metadata>
        <title>The system must be configured to audit Policy Change - Authorization Policy Change successes.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>The system must be configured to audit Policy Change - Audit Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497500" comment="Audit - Audit Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497501" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4976" version="2" class="compliance">
      <metadata>
        <title>The system must be configured to audit Policy Change - Authorization Policy Change failures.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>The system must be configured to audit Policy Change - Audit Policy Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497600" comment="Audit - Audit Policy Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497601" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4982" version="1" class="compliance">
      <metadata>
        <title>Standalone Workstation/Server System</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <description>The system is not a member of a domain.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:498200" comment="System is not a member of a domain" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4984" version="2" class="compliance">
      <metadata>
        <title>Event Viewer must be protected from unauthorized modification and deletion</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>Verify the permissions on Event Viewer only allow TrustedInstaller permissions to change or modify.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:498400" comment="Eventvwr.exe: Read and Execute rights for Administrators, System, Users, All Application Packages" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4987" version="1" class="compliance">
      <metadata>
        <title>UR: Access Credential Manager as a trusted caller (Windows 2012)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <reference ref_id="CCE-25683-4" source="http://cce.mitre.org" />
        <description>Unauthorized accounts must not have the Access Credential Manager as a trusted caller user right. (Windows 2012)</description>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4740" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4988" version="1" class="compliance">
      <metadata>
        <title>WINSO-000021 (Windows 2012)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <reference ref_id="CCE-23043-3" source="http://cce.mitre.org" />
        <description>The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver. (Windows 2012)</description>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4730" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4989" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Do Not Turn off Background Refresh (Windows 2012)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <reference ref_id="CCE-23622-4" source="http://cce.mitre.org" />
        <description>Group Policies must be refreshed in the background if the user is logged on. (Windows 2012)</description>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4620" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4990" version="1" class="compliance">
      <metadata>
        <title>UR: Manage auditing and security log (Windows 2012)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference ref_id="CCE-23456-7" source="http://cce.mitre.org" />
        <description>Unauthorized accounts must not have the Manage auditing and security log user right. (Windows 2012)</description>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4737" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:5145" version="1" class="compliance">
      <metadata>
        <title>UR: Allow log on through Remote Desktop Services</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26473" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24406-1" />
        <description>Unauthorized accounts must not have the Allow log on through Remote Desktop Services user right.</description>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:514501" comment="Is the Remote Desktop Services role installed" negate="true" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:514500" comment="Allow log on through Remote Desktop Services - Administrators" />
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:514501" comment="Is the Remote Desktop Services role installed" negate="false" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:514502" comment="Allow log on through Remote Desktop Services - Administrators and Remote Desktop Users group" />
        </criteria>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442200" version="2" comment="'Account lockout duration' is set to '0'" check_existence="at_least_one_exists" check="all" state_operator="OR">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442201" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442300" version="1" comment="'Account lockout threshold' is set to '3' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442300" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442301" version="2" comment="'Account lockout threshold' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442301" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442400" version="1" comment="'Reset account lockout counter after' is set to at least '60' minutes" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442400" />
    </lockoutpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442500" version="1" comment="'Enforce password history' is set to '5' passwords or more" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442500" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442600" version="1" comment="'Maximum Password Age' is set to '60' days or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442600" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442601" version="1" comment="'Maximum Password Age' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442601" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442700" version="1" comment="'Minimum Password Age' is set to at least '1' day" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442700" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442800" version="1" comment="'Minimum password length' is set to at least '14' characters" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442800" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442900" version="1" comment="'Password must meet complexity requirements' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442900" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443000" version="1" comment="'Store password using reversible encryption' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443000" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443100" version="1" comment="ProhibitLLTDIOOnPrivateNet value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443101" version="1" comment="AllowLLTDIOOnDomain value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443101" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443102" version="1" comment="AllowLLTDIOOnPublicNet value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443102" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443103" version="1" comment="EnableLLTDIO value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443103" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443200" version="1" comment="ProhibitRspndrOnPrivateNet value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443201" version="1" comment="EnableRspndr value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443201" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443202" version="1" comment="AllowRspndrOnDomain value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443202" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443203" version="1" comment="AllowRspndrOnPublicNet value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443203" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443300" version="1" comment="'Turn Off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443400" version="1" comment="'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443500" version="1" comment="'Require domain users to elevate when setting a network's location' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443600" version="1" comment="'Route all traffic through the internal network' is set to 'Enabled: Enabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443700" version="1" comment="'Set 6to4 State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443800" version="1" comment="'IP-HTTPS URL:' is not null" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443801" version="1" comment="'IP-HTTPS State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443801" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443801" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443900" version="1" comment="'ISATAP State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444000" version="1" comment="'Teredo State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444100" version="1" comment="EnableRegistrars value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444101" version="1" comment="DisableWPDRegistrar value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444101" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444102" version="1" comment="DisableUPnPRegistrar value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444102" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444103" version="1" comment="DisableInBand802DOT11Registrar value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444103" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444104" version="1" comment="DisableFlashConfigRegistrar value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444104" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444200" version="1" comment="'Prohibit Access of the Windows Connect Now wizards' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444300" version="1" comment="'Extend Point and Print connection to search Windows Update' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444400" version="1" comment="'Specify settings for optional component installation and component repair' is set to 'Enabled' with 'Never attempt to download payload from Windows Update' selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444500" version="1" comment="'Allow remote access to the Plug and Play interface' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444600" version="1" comment="'Do not send a Windows error report when a generic driver is installed on a device' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444700" version="1" comment="'Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444800" version="1" comment="'Prevent device metadata retrieval from the Internet' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444900" version="1" comment="'Prevent Windows from sending an error report when a device driver requests additional software during installation' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445000" version="1" comment="'Specify search order for device driver source locations' is set to 'Enabled: Do not search Windows Update'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445100" version="1" comment="'Specify the search server for device driver updates' is set to 'Enabled' with 'Search Managed Server' selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445200" version="1" comment="'Turn off Windows Update device driver search prompt' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445300" version="1" comment="'Boot-Start Driver Initialization Policy' is set to 'Enabled' with 'Good and Unknown' selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445400" version="1" comment="'Registry policy processing' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445401" version="1" comment="'Process even if the Group Policy objects have not changed' is selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445401" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445402" version="1" comment="'Registry policy processing' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445402" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445403" version="1" comment="'Registry policy processing' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445402" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445404" version="1" comment="'Process even if the Group Policy objects have not changed' is not selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445401" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445405" version="1" comment="Registry Policy Variable = -1" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445402" />
    </variable_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445406" version="1" comment="Registry Policy Variable = 0" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445403" />
    </variable_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445407" version="1" comment="Registry Policy Variable = 1" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445404" />
    </variable_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445408" version="1" comment="Registry Policy Variable = 2" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445405" />
    </variable_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445409" version="1" comment="Registry Policy Variable = 3" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445406" />
    </variable_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445500" version="1" comment="'Turn off access to the Store' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445501" version="1" comment="Windows\WinStore exist" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445501" />
    </file_test>
    <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445502" version="1" comment="Windows\WinStore does not exist, Not Applicable" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445501" />
    </file_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445700" version="1" comment="'Turn off downloading of print drivers over HTTP' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445800" version="1" comment="'Turn off handwriting recognition error reporting' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:446100" version="1" comment="'Turn off Internet File Association service' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:446100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:446100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:446200" version="1" comment="'Turn off printing over HTTP' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:446200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:446200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:446800" version="1" comment="'Turn off Windows Customer Experience Improvement Program' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:446800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:446800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447000" version="1" comment="'Turn off Windows Update device driver searching' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:447000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447100" version="1" comment="'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447200" version="1" comment="'Always use classic logon' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:447200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447300" version="1" comment="'Enumerate local users on domain-joined computers' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447400" version="1" comment="'Turn off app notifications on the lock screen' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447500" version="1" comment="'Require a password when a computer wakes (on battery)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:447500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447600" version="1" comment="'Require a password when a computer wakes (plugged in)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:447600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447900" version="1" comment="'Configure Offer Remote Assistance' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:447900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448000" version="1" comment="'Configure Solicited Remote Assistance' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448100" version="1" comment="'Turn on session logging' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448300" version="1" comment="'Restrict Unauthenticated RPC clients' is set to 'Enabled' and 'Authenticated'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448400" version="1" comment="'Detect compatibility issues for applications and drivers' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448500" version="1" comment="'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448600" version="1" comment="'Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448700" version="1" comment="'Enable/Disable PerfTrack' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448800" version="1" comment="'Allow all trusted apps to install' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448900" version="2" comment="'Turn off Inventory Collector' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449000" version="1" comment="'Disallow Autoplay for non-volume devices' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:449000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449100" version="1" comment="'Default behavior for AutoRun' is set to 'Enabled:Do not execute any autorun commands'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:449100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449200" version="1" comment="'Turn off AutoPlay' is set to 'Enabled:All Drives'" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:449200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449300" version="1" comment="'Detect compatibility issues for applications and drivers' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449400" version="1" comment="'Do not display the password reveal button' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449500" version="1" comment="'Enumerate administrator accounts on elevation' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:449500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450200" version="1" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450300" version="1" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:81920'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450400" version="1" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450500" version="1" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450600" version="1" comment="'Configure Windows SmartScreen' is set to 'Enabled' with 'Turn off SmartScreen' selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450700" version="1" comment="'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450800" version="1" comment="'Turn off heap termination on corruption' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450900" version="1" comment="'Turn off shell protocol protected mode' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451000" version="1" comment="'Turn off location' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451100" version="1" comment="'Do not allow passwords to be saved' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451200" version="1" comment="'Do not allow drive redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451300" version="1" comment="'Always prompt for password upon connection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451400" version="1" comment="'Set client connection encryption level' is set to 'Enabled' and 'High Level'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451700" version="1" comment="'Do not delete temp folder upon exit' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451800" version="1" comment="'Do not use temporary folders per session' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451900" version="1" comment="'Prevent downloading of enclosures' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452200" version="1" comment="'Configure Microsoft Active Protection Service Reporting' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452201" version="1" comment="'Configure Microsoft Active Protection Service Reporting' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452201" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452500" version="1" comment="'Enable user control over installs' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452600" version="1" comment="'Always install with elevated privileges' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452700" version="1" comment="'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452800" version="1" comment="'Prohibit non-administrators from applying vendor signed updates' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453000" version="1" comment="'Prevent Automatic Updates' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453100" version="1" comment="'Allow Basic authentication' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453200" version="1" comment="'Allow unencrypted traffic' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453300" version="1" comment="'Disallow Digest authentication' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453400" version="1" comment="'Allow Basic authentication' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453500" version="1" comment="'Allow unencrypted traffic' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453600" version="1" comment="'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453700" version="1" comment="'Require secure RPC communication' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453800" version="1" comment="The OS Build is equal to or greater than 9200" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453801" version="1" comment="The OS Version is equal to or greater than 6.2" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453801" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453801" />
    </registry_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453900" version="1" comment="'Accounts: Guest account status' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453901" />
    </user_test>
    <sid_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453901" version="1" comment="The built-in guest account does not exist" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453901" />
    </sid_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454000" version="1" comment="'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454000" />
    </registry_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454100" version="2" comment="'Accounts: Rename administrator account' is set to a value other than 'Administrator'" check_existence="at_least_one_exists" check="none satisfy">
      <object object_ref="oval:mil.disa.fso.windows:obj:454100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454101" />
    </user_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454200" version="2" comment="'Accounts: Rename guest account' is set to a value other than 'Guest'" check_existence="at_least_one_exists" check="none satisfy">
      <object object_ref="oval:mil.disa.fso.windows:obj:453900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454200" />
    </user_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454300" version="1" comment="'Audit: Audit the access of global system objects' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454400" version="1" comment="'Audit: Audit the use of Backup and Restore privilege' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454500" version="1" comment="'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454600" version="1" comment="'Devices: Allowed to Format and Eject Removable Media' is set to 'Administrators'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454700" version="1" comment="'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454800" version="1" comment="'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454801" version="1" comment="'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454900" version="1" comment="'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455000" version="1" comment="'Domain member: Disable machine account password changes' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455100" version="1" comment="'Domain member: Maximum machine account password age' is set to '30' days or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455101" version="1" comment="'Domain member: Maximum machine account password age' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455101" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455200" version="1" comment="'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455300" version="1" comment="'Interactive logon: Do not display last user name' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455400" version="1" comment="'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455500" version="1" comment="'Interactive logon: Prompt user to change password before expiration' is set for '14' days or more" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455600" version="1" comment="'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455601" version="1" comment="'Interactive logon: Smart card removal behavior' is set to 'Force Logoff'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455601" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455700" version="1" comment="'Microsoft Network Client: Digitally sign communications (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455800" version="1" comment="'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455900" version="1" comment="'Microsoft Network Client: Send unencrypted password to connect to third-party SMB servers' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456000" version="1" comment="'Microsoft network server: Amount of idle time required before suspending session' is set to '15' minutes or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456100" version="1" comment="'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456200" version="1" comment="'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456300" version="1" comment="'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456400" version="1" comment="'Microsoft network server: Server SPN target name validation level' is set to 'Off'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456500" version="1" comment="'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456501" version="1" comment="The automatic logon password registry value (DefaultPassword) does not exist" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456501" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456600" version="1" comment="'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456700" version="1" comment="'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456800" version="1" comment="'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456900" version="1" comment="'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to '300000 or 5 minutes (recommended)' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457000" version="1" comment="'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic' is set to 'Only ISAKMP is exempt (recommended for Windows Server 2003)'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457100" version="1" comment="'MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457200" version="1" comment="'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457300" version="1" comment="'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457400" version="1" comment="'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 5 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457500" version="1" comment="'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to '3' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457600" version="1" comment="'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457700" version="1" comment="'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 90 percent or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457800" version="1" comment="'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457900" version="1" comment="'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458000" version="1" comment="'Network access: Do not allow storage of credentials or .NET Passports for network authentication' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458100" version="1" comment="'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458200" version="1" comment="'Network access: Remotely accessible registry paths' is configured to contain authorized registry paths" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458201" version="1" comment="'Network access: Remotely accessible registry paths' is configured to contain no entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:462100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458202" version="1" comment="'Network access: Remotely accessible registry paths' is is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458300" version="1" comment="'Network access: Remotely accessible registry paths and sub paths' is configured to contain authorized registry paths" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458301" version="1" comment="'Network access: Remotely accessible registry paths and sub paths' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458302" version="1" comment="'Network access: Remotely accessible registry paths and sub paths' is configured but contains no entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:462100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458400" version="1" comment="'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458500" version="1" comment="'Network access: Shares that can be accessed anonymously' is blank" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458501" version="1" comment="'Network access: Shares that can be accessed anonymously' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458600" version="1" comment="'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458700" version="1" comment="'Network Security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458800" version="1" comment="'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458900" version="1" comment="'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459000" version="2" comment="'Network Security: Configure encryption types allowed for Kerberos' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459001" version="2" comment="'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC' not selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459001" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459002" version="2" comment="'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC_MD5' not selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459002" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459003" version="2" comment="'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC_MD5' not selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459003" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459100" version="1" comment="'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459100" />
    </registry_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459200" version="1" comment="'Network security: Force logoff when logon hours expire' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459200" />
    </lockoutpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459300" version="1" comment="'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM &amp; NTLM'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459400" version="1" comment="'Network security: LDAP client signing requirements' is set to at a minimum 'Negotiate signing'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459500" version="1" comment="'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459501" version="1" comment="'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require 128-bit encryption'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459501" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459600" version="1" comment="'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459601" version="1" comment="'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require 128-bit encryption'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459501" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459900" version="1" comment="'Shutdown: Allow system to be shutdown without having to log on' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460000" version="1" comment="'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460100" version="1" comment="'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460200" version="1" comment="'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460300" version="1" comment="'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460400" version="1" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent' or more secure options" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460401" version="1" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is not set to 'Elevate without prompting'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455101" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460500" version="1" comment="'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460600" version="1" comment="'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460700" version="1" comment="'User Account Control: Only elevate executables that are signed and validated' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460800" version="1" comment="'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460900" version="1" comment="'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461000" version="1" comment="'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461100" version="1" comment="'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461100" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461400" version="1" check="all" comment="Local volumes are formatted using NTFS">
      <object object_ref="oval:mil.disa.fso.windows:obj:461400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461400" />
    </wmi_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461500" version="1" comment="Legal Notice is configured with the required text." check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461501" version="1" comment="Legal Notice is configured with the required text." check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461501" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461600" version="2" comment="'Interactive Logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4' logons or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461600" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461700" version="1" check="all" comment="Act as part of the operating system - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461700" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461800" version="1" comment="'Devices: Prevent users from installing printer drivers' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461900" version="1" comment="'Restrict Remote Desktop Services users to a Single Remote Desktop Services Session' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462000" version="3" comment="Verifies 'Turn Off Background Refresh of Group Policy' is set to 'Disabled'" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462001" version="2" comment="Verifies 'DisableBkGndGroupPolicy' registry value is set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:462001" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462100" version="1" check="all" comment="'System Settings: Optional Subsystems' is blank" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:462100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:462100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462300" version="1" comment="'Turn off Event Viewer “Events.asp' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462400" version="1" comment="'Do Not Show First Use Dialog Boxes' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462500" version="1" comment="'Prevent Windows Media DRM Internet Access' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462600" version="1" comment="Software certificate installation files (*.p12 and *.pfx) are not present on the system" check="none exist" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:462600" />
    </file_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462700" version="1" comment="'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462800" version="1" comment="'Do not allow COM port redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462900" version="1" comment="'Do not allow LPT port redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463000" version="1" comment="'Do not allow supported Plug and Play device redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:463000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463100" version="1" comment="'Do not allow smart card device redirection' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:463100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463300" version="1" check="all" comment="Debug Programs - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463301" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463400" version="1" comment="Legal Notice Caption - DoD Notice and Consent Banner" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:463400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463401" version="1" comment="Legal Notice Caption - US Department of Defense Warning Statement" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:463400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463401" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463600" version="1" check="all" comment="Allow log on locally - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463800" version="1" check="all" comment="Back up files and directories - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463900" version="1" check="all" comment="Bypass traverse checking - Administrators, Authenticated Users, Local Service, Network Service, Window Manager\Window Manager Group">
      <object object_ref="oval:mil.disa.fso.windows:obj:463900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463900" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464000" version="1" check="all" comment="Change the system time - Administrators, Local Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464100" version="1" check="all" comment="Change the time zone - Administrators, Local Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464200" version="1" check="all" comment="Create a pagefile - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464300" version="1" check="all" comment="Create a token object - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464400" version="1" check="all" comment="Create global objects - Administrators, Service, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464401" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464500" version="1" check="all" comment="Create permanent shared objects - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464600" version="2" check="all" comment="Create symbolic links - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464600" />
    </accesstoken_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464601" version="2" check="all" comment="verify hyper-v role installed" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:464601" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464601" />
    </wmi_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464602" version="2" check="all" comment="Create symbolic links - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:464602" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464700" version="1" check="all" comment="Force shutdown from a remote system - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464800" version="1" check="all" comment="Generate security audits - Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464900" version="1" check="all" comment="Impersonate a client after authentication - Administrators, Service, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464900" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465100" version="1" check="all" comment="Increase scheduling priority - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465200" version="1" check="all" comment="Load and unload device drivers - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465300" version="1" check="all" comment="Lock pages in memory - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465500" version="1" check="all" comment="Modify an object label - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465600" version="1" check="all" comment="Modify firmware environment values - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465700" version="1" check="all" comment="Perform volume maintenance tasks - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465800" version="1" check="all" comment="Profile single process - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465900" version="1" check="all" comment="Profile system performance - Administrators, NT Service\WdiServiceHost">
      <object object_ref="oval:mil.disa.fso.windows:obj:465900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465901" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466000" version="1" check="all" comment="Replace a process level token - Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466100" version="1" check="all" comment="Restore files and directories - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466200" version="1" check="all" comment="Shut down the system - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466300" version="1" check="all" comment="Take ownership of files or other objects - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466300" />
    </accesstoken_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466400" version="1" comment="Audit - Credential Validation - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466401" version="1" comment="Audit - Credential Validation - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466401" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466500" version="1" comment="Audit - Credential Validation - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466600" version="1" comment="Audit - Computer Account Management - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466601" version="1" comment="Audit - Computer Account Management - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466601" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466700" version="1" comment="Audit - Computer Account Management - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466800" version="1" comment="Audit - Other Account Management Events - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466801" version="1" comment="Audit - Other Account Management Events - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466801" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466900" version="1" comment="Audit - Other Account Management Events - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467000" version="1" comment="Audit - Security Group Management - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467000" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467001" version="1" comment="Audit - Security Group Management - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467001" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467100" version="1" comment="Audit - Security Group Management - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467200" version="1" comment="Audit - User Account Management - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467201" version="1" comment="Audit - User Account Management - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467201" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467300" version="1" comment="Audit - User Account Management - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467400" version="1" comment="Audit - Process Creation - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467401" version="1" comment="Audit - Process Creation - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467401" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467500" version="1" comment="Audit - Logoff - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467501" version="1" comment="Audit - Logoff - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467600" version="1" comment="Audit - Logon - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467601" version="1" comment="Audit - Logon - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467601" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467700" version="1" comment="Audit - Logon - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467800" version="1" comment="Audit - Special Logon - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467801" version="1" comment="Audit - Special Logon - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467801" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468100" version="1" comment="Audit - Audit Policy Change - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468101" version="1" comment="Audit - Audit Policy Change - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468101" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468200" version="1" comment="Audit - Audit Policy Change - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468300" version="1" comment="Audit - Authentication Policy Change - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468301" version="1" comment="Audit - Authentication Policy Change - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468301" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468400" version="1" comment="Audit - Sensitive Privilege Use - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468401" version="1" comment="Audit - Sensitive Privilege Use - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468401" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468500" version="1" comment="Audit - Sensitive Privilege Use - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468600" version="1" comment="Audit - IPSec Driver - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468601" version="1" comment="Audit - IPSec Driver - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468601" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468700" version="1" comment="Audit - IPSec Driver - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468800" version="1" comment="Audit - Security State Change - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468801" version="1" comment="Audit - Security State Change - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468801" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468900" version="1" comment="Audit - Security State Change - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469000" version="1" comment="Audit - Security System Extension - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469000" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469001" version="1" comment="Audit - Security System Extension - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469001" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469100" version="1" comment="Audit - Security System Extension - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469200" version="1" comment="Audit - System Integrity - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469201" version="1" comment="Audit - System Integrity - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469201" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469300" version="1" comment="Audit - System Integrity - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469300" />
    </auditeventpolicysubcategories_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469400" version="2" check="all" comment="System is not a member of a domain">
      <object object_ref="oval:mil.disa.fso.windows:obj:469400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469401" version="1" comment="Local admin accounts filtered token policy is enabled on domain systems" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:469401" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469402" version="1" check="all" comment="System is a member of a domain">
      <object object_ref="oval:mil.disa.fso.windows:obj:469400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:449800" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469500" version="1" check="all" comment="Deny access to this computer from the network - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:469500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470500" version="1" check="all" comment="Deny log on as a service - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470600" version="1" check="all" comment="Deny log on locally - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:469500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:471300" version="1" check="all" comment="Deny log on as a batch job - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:469500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471300" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:471500" version="1" comment="'Network access: Named Pipes that can be accessed anonymously' is configured to contain no values" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:470100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:462100" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:471600" version="1" check="all" comment="Access this computer from the network - Administrators, Authenticated Users">
      <object object_ref="oval:mil.disa.fso.windows:obj:471600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470402" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472100" version="1" check="all" comment="Deny log on as a batch job - Domain Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:472100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472101" version="1" check="all" comment="Deny log on as a batch job - Enterprise Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:472101" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472300" version="1" check="all" comment="Deny log on as a service - Domain Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:472100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:472300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472301" version="1" check="all" comment="Deny log on as a service - Enterprise Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:472101" />
      <state state_ref="oval:mil.disa.fso.windows:ste:472300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472500" version="1" check="all" comment="Deny log on locally - Domain Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:472100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472501" version="1" check="all" comment="Deny log on as a locally - Enterprise Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:472101" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470600" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472700" version="1" comment="'Set IP Stateless Autoconfiguration Limits State' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:472700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472800" version="1" comment="'Turn on Basic feed authentication over HTTP' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:472800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473000" version="1" comment="'Interactive logon: Machine inactivity limit' is set to '900' seconds or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473000" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473100" version="1" comment="The Fax service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473101" version="1" comment="The Fax service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473200" version="1" comment="The Microsoft FTP service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473201" version="1" comment="The Microsoft FTP service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473200" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473300" version="1" comment="The Peer Networking Identity Manager service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473301" version="1" comment="The Peer Networking Identity Manager service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473300" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473400" version="1" comment="The Simple TCP/IP Services service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473401" version="1" comment="The Simple TCP/IP Services service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473400" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473500" version="1" comment="The Telnet service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473501" version="1" comment="The Telnet service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473500" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473600" version="1" comment="The Smart Card Removal Policy service startup type is Automatic" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473600" />
    </wmi_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473700" version="2" check_existence="any_exist" check="all" comment="Manage auditing and security log - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473900" version="1" check="all" comment="Enable computer and user accounts to be trusted for delegation - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:474000" version="1" check="all" comment="Access Credential Manager as a trusted caller - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:474000" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483700" version="2" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483701" version="2" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483701" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483702" version="2" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483702" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483703" version="2" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483703" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483704" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483704" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483705" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483705" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483706" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483706" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483707" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483707" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483708" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483708" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483709" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483709" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483710" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483710" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483711" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483711" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:484000" version="1" comment="Deny access to this computer from the network - Domain Admins" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:484000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:484001" version="1" comment="Deny access to this computer from the network - Enterprise Admins pattern" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:484001" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:484002" version="1" comment="Deny access to this computer from the network - Enterprise Admins strict" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:484002" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469500" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487600" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487601" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487601" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487602" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487602" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487603" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487603" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487604" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487604" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487605" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487605" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487606" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487606" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487607" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487607" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487608" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487608" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487609" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487609" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487610" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487610" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487611" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487611" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487704" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487704" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487705" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487705" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487706" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487706" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487707" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487707" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:488200" version="1" check="all" comment="Deny log on through Remote Desktop Services - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:469500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:488201" version="1" check="all" comment="Deny log on through Remote Desktop Services - Domain Admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:484000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:488202" version="1" check="all" comment="Deny log on through Remote Desktop Services - Enterprise Admins pattern">
      <object object_ref="oval:mil.disa.fso.windows:obj:484001" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:488203" version="1" check="all" comment="Deny log on through Remote Desktop Services - Enterprise Admins strict">
      <object object_ref="oval:mil.disa.fso.windows:obj:484002" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:488204" version="1" check="all" comment="Deny log on through Remote Desktop Services - Local account pattern">
      <object object_ref="oval:mil.disa.fso.windows:obj:484003" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:488205" version="1" check="all" comment="Deny log on through Remote Desktop Services - Local account strict">
      <object object_ref="oval:mil.disa.fso.windows:obj:484004" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471400" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497300" version="1" comment="HKEY_LOCAL_MACHINE\System\Policies\Microsoft\Cryptography\ForceKeyProtection exists and equals 2" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:497300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497300" />
    </registry_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497500" version="2" check="all" comment="Audit - Audit Policy Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497501" version="2" check="all" comment="Audit - Audit Policy Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497600" version="2" check="all" comment="Audit - Audit Policy Change - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497601" version="2" check="all" comment="Audit - Audit Policy Change - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497601" />
    </auditeventpolicysubcategories_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498200" state_operator="OR" version="1" comment="System is not a member of a domain" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498203" />
    </wmi_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498400" version="1" comment="Eventvwr.exe: Only Read and Execute rights for users other than TrustedInstaller" check_existence="any_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498404" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498408" />
    </fileeffectiverights53_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514500" version="1" check="all" comment="Allow log on through Remote Desktop Services - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463700" />
    </accesstoken_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514501" version="1" check="all" comment="Is the Remote Desktop Service role installed" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:514501" />
      <state state_ref="oval:mil.disa.fso.windows:ste:514501" />
    </wmi57_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514502" version="1" check="all" comment="Allow log on through Remote Desktop Services - Administrators and Remote Desktop Users">
      <object object_ref="oval:mil.disa.fso.windows:obj:514500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463700" />
    </accesstoken_test>
  </tests>
  <objects>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:388601" version="2" comment="System Root Directory Registry Object">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name datatype="string">SystemRoot</name>
    </registry_object>
    <lockoutpolicy_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:442300" version="2" comment="Lockout policy" />
    <passwordpolicy_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:442600" version="1" comment="Password policy" />
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">ProhibitLLTDIOOnPrivateNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443101" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowLLTDIOOnDomain</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443102" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowLLTDIOOnPublicNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443103" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">EnableLLTDIO</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">ProhibitRspndrOnPrivateNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443201" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">EnableRspndr</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443202" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowRspndrOnDomain</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443203" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowRspndrOnPublicNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\policies\Microsoft\Peernet</key>
      <name datatype="string">Disabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Network Connections</key>
      <name datatype="string">NC_AllowNetBridge_NLA</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Network Connections</key>
      <name datatype="string">NC_StdDomainUserSetLocation</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">Force_Tunneling</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">6to4_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface</key>
      <name datatype="string">IPHTTPS_ClientUrl</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443801" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface</key>
      <name datatype="string">IPHTTPS_ClientState</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">ISATAP_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">Teredo_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">EnableRegistrars</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444101" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableWPDRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444102" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableUPnPRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444103" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableInBand802DOT11Registrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444104" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableFlashConfigRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\UI</key>
      <name datatype="string">DisableWcnUi</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DoNotInstallCompatibleDriverFromWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows\CurrentVersion\Policies\Servicing</key>
      <name datatype="string" operation="equals">UseWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">AllowRemoteRPC</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSendGenericDriverNotFoundToWER</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSystemRestore</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Device Metadata</key>
      <name datatype="string">PreventDeviceMetadataFromNetwork</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444900" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string" operation="equals">DisableSendRequestAdditionalSoftwareToWER</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">SearchOrderConfig</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string" operation="equals">DriverServerSelection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">DontPromptForWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">System\CurrentControlSet\Policies\EarlyLaunch</key>
      <name datatype="string" operation="equals">DriverLoadPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</key>
      <name xsi:nil="true" datatype="string" />
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445401" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</key>
      <name datatype="string">NoBackgroundPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445402" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</key>
      <name datatype="string">NoGPOListChanges</name>
    </registry_object>
    <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:obj:445403" version="1" comment="Variable">
      <var_ref datatype="string">oval:mil.disa.fso.windows:var:445400</var_ref>
    </variable_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445500" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string" operation="equals">NoUseStoreOpenWith</name>
    </registry_object>
    <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445501" version="1" comment="Windows/WinStore exist">
      <behaviors recurse_direction="down" max_depth="-1" />
      <path datatype="string" operation="equals">C:\Windows\WinStore</path>
      <filename xsi:nil="true" datatype="string" />
    </file_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DisableWebPnPDownload</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\HandwritingErrorReports</key>
      <name datatype="string">PreventHandwritingErrorReports</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:446100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoInternetOpenWith</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:446200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DisableHTTPPrinting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:446800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\SQMClient\Windows</key>
      <name datatype="string">CEIPEnable</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">DontSearchWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Control Panel\International</key>
      <name datatype="string" operation="equals">BlockUserInputMethodsForSignIn</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LogonType</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\System</key>
      <name datatype="string" operation="equals">EnumerateLocalUsers</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\System</key>
      <name datatype="string" operation="equals">DisableLockScreenAppNotifications</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51</key>
      <name datatype="string">DCSettingIndex</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51</key>
      <name datatype="string">ACSettingIndex</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fAllowUnsolicited</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fAllowToGetHelp</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">LoggingEnabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Rpc</key>
      <name datatype="string">RestrictRemoteClients</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\AppCompat</key>
      <name datatype="string" operation="equals">DisablePcaUI</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy</key>
      <name datatype="string">DisableQueryRemoteServer</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy</key>
      <name datatype="string">EnableQueryRemoteServer</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}</key>
      <name datatype="string">ScenarioExecutionEnabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448800" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Appx</key>
      <name datatype="string" operation="equals">AllowAllTrustedApps</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\AppCompat</key>
      <name datatype="string">DisableInventory</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoAutoplayfornonVolume</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoAutorun</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoDriveTypeAutoRun</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\Biometrics</key>
      <name datatype="string" operation="equals">Enabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CredUI</key>
      <name datatype="string" operation="equals">DisablePasswordReveal</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI</key>
      <name datatype="string">EnumerateAdministrators</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Application</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Security</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\System</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450600" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\System</key>
      <name datatype="string" operation="equals">EnableSmartScreen</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoDataExecutionPrevention</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoHeapTerminationOnCorruption</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">PreXPSP2ShellProtocolBehavior</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451000" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\LocationAndSensors</key>
      <name datatype="string" operation="equals">DisableLocation</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">DisablePasswordSaving</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableCdm</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fPromptForPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">MinEncryptionLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">DeleteTempDirsOnExit</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">PerSessionTempDir</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451900" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Feeds</key>
      <name datatype="string" operation="equals">DisableEnclosureDownload</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows Defender\SpyNet</key>
      <name xsi:nil="true" datatype="string" />
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452201" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows Defender\SpyNet</key>
      <name datatype="string">SpyNetReporting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452500" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string" operation="equals">EnableUserControl</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452600" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string" operation="equals">AlwaysInstallElevated</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452700" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string" operation="equals">SafeForScripting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string">DisableLUAPatching</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\WindowsMediaPlayer</key>
      <name datatype="string">DisableAutoUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Client</key>
      <name datatype="string" operation="equals">AllowBasic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453200" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Client</key>
      <name datatype="string" operation="equals">AllowUnencryptedTraffic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Client</key>
      <name datatype="string" operation="equals">AllowDigest</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Service</key>
      <name datatype="string" operation="equals">AllowBasic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453500" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Service</key>
      <name datatype="string" operation="equals">AllowUnencryptedTraffic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453600" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Service</key>
      <name datatype="string" operation="equals">DisableRunAs</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453700" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string" operation="equals">fEncryptRPCTraffic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453800" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows NT\CurrentVersion</key>
      <name datatype="string" operation="equals">CurrentBuildNumber</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453801" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows NT\CurrentVersion</key>
      <name datatype="string" operation="equals">CurrentVersion</name>
    </registry_object>
    <user_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453900" version="1" comment="Built-in Guest">
      <user var_ref="oval:mil.disa.fso.windows:var:453900" datatype="string" />
    </user_object>
    <sid_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453901" version="2" comment="Built-in Guest SID">
      <trustee_name operation="pattern match" datatype="string">.*</trustee_name>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.fso.windows:ste:453900</filter>
    </sid_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\Currentcontrolset\Control\Lsa</key>
      <name datatype="string">Limitblankpassworduse</name>
    </registry_object>
    <user_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454100" version="1" comment="Built-in Administrator">
      <user var_ref="oval:mil.disa.fso.windows:var:454100" datatype="string" />
    </user_object>
    <sid_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454101" version="2" comment="Built-in Administrator SID">
      <trustee_name operation="pattern match" datatype="string">.*</trustee_name>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.fso.windows:ste:454100</filter>
    </sid_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\Currentcontrolset\Control\Lsa</key>
      <name datatype="string">AuditBaseObjects</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\Currentcontrolset\Control\Lsa</key>
      <name datatype="string">FullPrivilegeAuditing</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\Currentcontrolset\Control\Lsa</key>
      <name datatype="string">scenoapplylegacyauditpolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">AllocateDASD</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireSignOrSeal</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">SealSecureChannel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">SignSecureChannel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">DisablePasswordChange</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">MaximumPasswordAge</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireStrongKey</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">DontDisplayLastUserName</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">DisableCAD</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">PasswordExpiryWarning</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">scremoveoption</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanWorkstation\Parameters</key>
      <name datatype="string">RequireSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanWorkstation\Parameters</key>
      <name datatype="string">EnableSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanWorkstation\Parameters</key>
      <name datatype="string">EnablePlainTextPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">AutoDisconnect</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">RequireSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">EnableSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">EnableForcedLogOff</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">SMBServerNameHardeningLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456500" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string" operation="equals">AutoAdminLogon</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456501" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">DefaultPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip6\Parameters</key>
      <name datatype="string">DisableIPSourceRouting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">DisableIPSourceRouting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">EnableICMPRedirect</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">KeepAliveTime</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\IPSEC</key>
      <name datatype="string">NoDefaultExempt</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netbt\Parameters</key>
      <name datatype="string">NoNameReleaseOnDemand</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">PerformRouterDiscovery</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Session Manager</key>
      <name datatype="string">SafeDllSearchMode</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">ScreenSaverGracePeriod</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip6\Parameters</key>
      <name datatype="string">TcpMaxDataRetransmissions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">TcpMaxDataRetransmissions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Eventlog\Security</key>
      <name datatype="string">WarningLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">RestrictAnonymousSAM</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">RestrictAnonymous</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">DisableDomainCreds</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">EveryoneIncludesAnonymous</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths</key>
      <name datatype="string">Machine</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths</key>
      <name datatype="string">Machine</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">restrictnullsessaccess</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">NullSessionShares</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">ForceGuest</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">UseMachineId</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">allownullsessionfallback</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\pku2u</key>
      <name datatype="string">AllowOnlineID</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters</key>
      <name datatype="string">SupportedEncryptionTypes</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">NoLMHash</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">LmCompatibilityLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\LDAP</key>
      <name datatype="string">LDAPClientIntegrity</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">NTLMMinClientSec</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">NTLMMinServerSec</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ShutdownWithoutLogon</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy</key>
      <name datatype="string">Enabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Session Manager\Kernel</key>
      <name datatype="string">ObCaseInsensitive</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Session Manager</key>
      <name datatype="string">ProtectionMode</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">FilterAdministratorToken</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ConsentPromptBehaviorAdmin</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ConsentPromptBehaviorUser</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableInstallerDetection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ValidateAdminCodeSignatures</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableSecureUIAPaths</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableLUA</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">PromptOnSecureDesktop</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableVirtualization</name>
    </registry_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461301" version="1" comment="All 'Local Disk' Volumes">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT name FROM win32_logicaldisk WHERE drivetype=3</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461400" version="1" comment="All 'Local Disk' File systems">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT filesystem FROM win32_logicaldisk WHERE drivetype=3</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LegalNoticeText</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">CachedLogonsCount</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461700" version="2" comment="All security principles">
      <security_principle datatype="string" operation="pattern match">.*</security_principle>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers</key>
      <name datatype="string">AddPrinterDrivers</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fSingleSessionPerUser</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\system</key>
      <name datatype="string">DisableBkGndGroupPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems</key>
      <name datatype="string" operation="equals">Optional</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\EventViewer</key>
      <name datatype="string">MicrosoftEventVwrDisableLinks</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WindowsMediaPlayer</key>
      <name datatype="string">GroupPrivacyAcceptance</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WMDRM</key>
      <name datatype="string">DisableOnline</name>
    </registry_object>
    <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462600" version="2" comment="Local Volumes\*.p12 and *.pfx">
      <behaviors recurse_direction="down" max_depth="-1" />
      <path datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:461300" var_check="at least one" />
      <filename datatype="string" operation="pattern match">^.*\.[Pp](12|[Ff][Xx])$</filename>
    </file_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableUIADesktopToggle</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462800" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableCcm</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462900" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableLPT</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463000" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisablePNPRedir</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fEnableSmartCard</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463300" version="2" comment="Filter for Administrators">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
      </set>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LegalNoticeCaption</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463900" version="1" comment="Filter for Administrators, Authenticated Users, Local Service, Network Service, Window Manager\Window Manager Group">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:470400</filter>
        <filter>oval:mil.disa.fso.windows:ste:463500</filter>
        <filter>oval:mil.disa.fso.windows:ste:463501</filter>
        <filter>oval:mil.disa.fso.windows:ste:463901</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464000" version="1" comment="Filter for Administrators and Local Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:463500</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464400" version="1" comment="Filter for Administrators, Service, Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:464400</filter>
        <filter>oval:mil.disa.fso.windows:ste:463500</filter>
        <filter>oval:mil.disa.fso.windows:ste:463501</filter>
      </set>
    </accesstoken_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464601" version="3" comment="verify hyper-v role installed">
      <namespace datatype="string" operation="equals">root\cimv2</namespace>
      <wql datatype="string" operation="equals">SELECT name FROM Win32_ServerFeature WHERE ID = 20</wql>
    </wmi_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464602" version="2" comment="Filter for Administrators and VMs">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:464602</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464800" version="1" comment="Filter for Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463500</filter>
        <filter>oval:mil.disa.fso.windows:ste:463501</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:465900" version="1" comment="Filter for Administrators and NT Service\WdiServiceHost">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:465900</filter>
      </set>
    </accesstoken_object>
    <auditeventpolicysubcategories_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:466400" version="1" />
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:469400" version="1" comment="Registry path to determine domain membership.">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\TCPIP\Parameters</key>
      <name datatype="string">Domain</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:469401" version="1" comment="Registry path for enabling the filtering of privileged tokens for local administrator accounts.">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LocalAccountTokenFilterPolicy</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:469500" version="1" comment="Guests">
      <security_principle datatype="string" operation="equals">Guests</security_principle>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:470100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">NullSessionPipes</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:471600" version="1" comment="Filter for Administrators and Authenticated Users">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:470400</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:472100" version="2" comment="Domain Admins">
      <security_principle datatype="string" operation="pattern match">^.*\\Domain Admins$|^Domain Admins$</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:472101" version="3" comment="Enterprise Admins set union">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:472102</object_reference>
        <object_reference>oval:mil.disa.fso.windows:obj:472103</object_reference>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:472102" version="1" comment="Enterprise Admins pattern match check">
      <security_principle datatype="string" operation="pattern match">^.*\\Enterprise Admins$</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:472103" version="1" comment="Enterprise Admins equals check">
      <security_principle datatype="string" operation="equals">Enterprise Admins</security_principle>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:472700" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string" operation="equals">EnableIPAutoConfigurationLimits</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:472800" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Feeds</key>
      <name datatype="string" operation="equals">AllowBasicAuthInClear</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">InactivityTimeoutSecs</name>
    </registry_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473100" version="1" comment="Fax Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='Fax'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473200" version="1" comment="Microsoft FTP Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='ftpsvc'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473300" version="1" comment="Peer Networking Identity Manager Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='p2pimsvc'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473400" version="1" comment="Simple TCP/IP Services Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='simptcp'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473500" version="1" comment="Telnet Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='tlntsvr'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473600" version="1" comment="Smart Card Removal Policy Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='SCPolicySvc'</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483700" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483701" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483702" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483703" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483704" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483705" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483706" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483707" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483708" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483709" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483710" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483711" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:484000" version="2" comment="Domain Admins">
      <security_principle datatype="string" operation="pattern match">^(.*\\)?Domain Admins$</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:484001" version="2" comment="Enterprise Admins pattern match">
      <security_principle datatype="string" operation="pattern match">^(.*\\)?Enterprise Admins$</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:484002" version="2" comment="Enterprise Admins strict">
      <security_principle datatype="string" operation="equals">Enterprise Admins</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:484003" version="1" comment="Local account pattern match">
      <security_principle datatype="string" operation="pattern match">^(.*\\)?Local account$</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:484004" version="1" comment="Local account strict">
      <security_principle datatype="string" operation="equals">Local account</security_principle>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487600" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487601" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487602" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487603" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487604" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487605" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487606" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487607" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487608" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487609" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487610" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487611" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487704" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487705" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487706" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487707" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:497300" version="1" comment="HKEY_LOCAL_MACHINE\System\Policies\Microsoft\Cryptography\ForceKeyProtection">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Cryptography</key>
      <name datatype="string">ForceKeyProtection</name>
    </registry_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498200" version="1" comment="DomainRole property">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string" operation="equals">SELECT DomainRole FROM win32_computersystem</wql>
    </wmi_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498401" version="1" comment="Event Viewer Rights">
      <path var_ref="oval:mil.disa.fso.windows:var:498401" var_check="at least one" datatype="string" />
      <filename datatype="string">Eventvwr.exe</filename>
      <trustee_sid operation="pattern match" datatype="string">.*</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498404" version="1" comment="Eventvwr Rights except for TrustedInstaller">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <object_reference>oval:mil.disa.fso.windows:obj:498401</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:498402</filter>
      </set>
    </fileeffectiverights53_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514500" version="1" comment="Filter for Remote Desktop Users only">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:514500</filter>
      </set>
    </accesstoken_object>
    <wmi57_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514501" version="1" comment="Is the Remote Desktop Services role installed">
      <namespace datatype="string" operation="equals">root\cimv2</namespace>
      <wql datatype="string" operation="equals">SELECT id FROM Win32_ServerFeature WHERE name='Remote Desktop Services'</wql>
    </wmi57_object>
  </objects>
  <states>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442200" version="2" comment="Lockout Duration equals -1">
      <lockout_duration datatype="int" operation="less than or equal" entity_check="all">0</lockout_duration>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442201" version="2" comment="lockout duration is forever,option2">
      <lockout_duration datatype="int" operation="equals" entity_check="all">4294967295</lockout_duration>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442300" version="1" comment="Lockout Threshold is less than or equal to variable">
      <lockout_threshold operation="less than or equal" datatype="int" var_ref="oval:mil.disa.fso.windows:var:442300" />
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442301" version="2" comment="Lockout Threshold is greater than 0">
      <lockout_threshold operation="greater than" datatype="int">0</lockout_threshold>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442400" version="1" comment="Lockout Observation Window is greater than or equal to variable">
      <lockout_observation_window operation="greater than or equal" datatype="int" var_ref="oval:mil.disa.fso.windows:var:442400" />
    </lockoutpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442500" version="1" comment="Password History Length is greater than or equal to variable">
      <password_hist_len datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:442500" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442600" version="1" comment="Maximum Password Age is less than or equal to variable">
      <max_passwd_age datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:442600" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442601" version="1" comment="Maximum Password Age is not equal to 0">
      <max_passwd_age datatype="int" operation="greater than">0</max_passwd_age>
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442700" version="1" comment="Minimum Password Age is greater than or equal to variable">
      <min_passwd_age datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:442700" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442800" version="1" comment="Minimum Password Length is greater than or equal to variable">
      <min_passwd_len operation="greater than or equal" datatype="int" var_ref="oval:mil.disa.fso.windows:var:442800" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442900" version="1" comment="Password Complexity equals variable">
      <password_complexity datatype="boolean" var_ref="oval:mil.disa.fso.windows:var:442900" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443000" version="1" comment="Reversible Encryption equals variable">
      <reversible_encryption datatype="boolean" var_ref="oval:mil.disa.fso.windows:var:443000" />
    </passwordpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:443300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:443400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443600" version="1" comment="Reg_Sz type and value equals variable">
      <type>reg_sz</type>
      <value datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443700" version="1" comment="Reg_Sz type and value equals variable">
      <type>reg_sz</type>
      <value datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443800" version="1" comment="Reg_Sz type and value is not null">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^.+$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443801" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443900" version="1" comment="Reg_Sz type and value equals variable">
      <type>reg_sz</type>
      <value datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444000" version="1" comment="Reg_Sz type and value equals variable">
      <type>reg_sz</type>
      <value datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:444000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:444200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:444300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444400" version="1" comment="Reg_Dword type and value equals 2">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:444500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:444600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:444700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:444800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:445000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:445000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:445200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:445200" />
    </registry_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445402" version="1" comment="Value equals -1">
      <value datatype="int">-1</value>
    </variable_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445403" version="1" comment="Value equals 0">
      <value datatype="int">0</value>
    </variable_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445404" version="1" comment="Value equals 1">
      <value datatype="int">1</value>
    </variable_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445405" version="1" comment="Value equals 2">
      <value datatype="int">2</value>
    </variable_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445406" version="1" comment="Value equals 3">
      <value datatype="int">3</value>
    </variable_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:445700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:445700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:445800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:445800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:446100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:446100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:446200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:446200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:446800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:446800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:447000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:447000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:447200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:447200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:447500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:447500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:447600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:447600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:447900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:447900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:448000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:448100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448300" version="1" comment="Reg_Dword type and value is greater than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:448300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:448500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:448600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:448700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:448900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:449000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:449000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:449100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:449100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:449200" version="1" comment="Reg_Dword type and value equals 255">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">255</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:449500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:449500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:449800" version="1" comment="Reg_Sz type and value is not null">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^.+$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450200" version="1" comment="Reg_Dword type and value equals or is greater than variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:450200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450300" version="1" comment="Reg_Dword type and value equals or is greater than variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:450300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450400" version="1" comment="Reg_Dword type and value equals or is greater than variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:450400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450500" version="1" comment="Reg_Dword type and value equals or is greater than variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:450500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:450700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:450800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:450900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:451100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:452200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:452200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:452700" version="1" comment="Reg_Dword type and value equals 0">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:452800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:452800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:453000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453700" version="1" comment="Reg_Dword type and value equals 1">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453800" version="1" comment="Reg_Sz type and value is greater than or equal to 9200">
      <type>reg_sz</type>
      <value datatype="version" operation="greater than or equal">9200</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453801" version="1" comment="Reg_Sz type and value is greater than or equal to 6.2">
      <type>reg_sz</type>
      <value datatype="version" operation="greater than or equal">6.2</value>
    </registry_state>
    <sid_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453900" version="3" comment="Built-in Guest SID">
      <trustee_sid operation="pattern match">^S-1-5-[0-9-]+-501$</trustee_sid>
    </sid_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453901" version="1" comment="Enabled equals variable">
      <enabled datatype="boolean" var_ref="oval:mil.disa.fso.windows:var:453901" />
    </user_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454000" />
    </registry_state>
    <sid_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454100" version="3" comment="Built-in Administrator SID">
      <trustee_sid operation="pattern match">^S-1-5-[0-9-]+-500$</trustee_sid>
    </sid_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454101" version="2" comment="Account name is Administrator">
      <user datatype="string" operation="pattern match">^.*\\[Aa]dministrator$|^[Aa]dministrator$</user>
    </user_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454200" version="2" comment="Account name is Guest">
      <user datatype="string" operation="pattern match">^.*\\[Gg]uest$|^[Gg]uest$</user>
    </user_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454400" version="1" comment="Reg_Binary type and value equals variable">
      <type>reg_binary</type>
      <value datatype="binary" var_ref="oval:mil.disa.fso.windows:var:454400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454600" version="1" comment="Reg_Sz type and value is less than or equal to variable">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:454600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455100" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:455100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455101" version="1" comment="Reg_Dword type and value is greater than 0">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455500" version="1" comment="Reg_Dword type and value is greater than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:455500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455600" version="1" comment="Reg_Sz type and value equals 1">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455601" version="1" comment="Reg_Sz type and value equals 2">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456000" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:456000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456500" version="1" comment="Reg_Sz type and value equals 0">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:456900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:457000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:457100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:457200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:457300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457400" version="1" comment="Reg_Sz type and value is less than or equal to variable">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:457400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457500" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:457500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457600" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:457600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457700" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:457700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:457800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:457900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458200" version="1" comment="Value matches ^((System\\CurrentControlSet\\Control\\ProductOptions)|(System\\CurrentControlSet\\Control\\Server Applications)|(Software\\Microsoft\\Windows NT\\CurrentVersion))$">
      <type>reg_multi_sz</type>
      <value operation="pattern match" entity_check="all">^((System\\CurrentControlSet\\Control\\ProductOptions)|(System\\CurrentControlSet\\Control\\Server Applications)|(Software\\Microsoft\\Windows NT\\CurrentVersion)|())$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458300" version="2" comment="Value matches ^((Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows)|(System\\CurrentControlSet\\Control\\Print\\Printers)|(System\\CurrentControlSet\\Services\\Eventlog)|(Software\\Microsoft\\OLAP Server)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Print)|(System\\CurrentControlSet\\Control\\ContentIndex)|(System\\CurrentControlSet\\Control\\Terminal Server)|(System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig)|(System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib)|(System\\CurrentControlSet\\Services\\SysmonLog))$">
      <type>reg_multi_sz</type>
      <value operation="pattern match" entity_check="all">^((Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows)|(System\\CurrentControlSet\\Control\\Print\\Printers)|(System\\CurrentControlSet\\Services\\Eventlog)|(Software\\Microsoft\\OLAP Server)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Print)|(System\\CurrentControlSet\\Control\\ContentIndex)|(System\\CurrentControlSet\\Control\\Terminal Server)|(System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig)|(System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib)|(System\\CurrentControlSet\\Services\\Sysmon[Ll]og)|())$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458500" version="2" comment="Reg_Multi_Sz type and value is blank">
      <type>reg_multi_sz</type>
      <value datatype="string" operation="pattern match" entity_check="none satisfy">.+</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459001" version="2" comment="Reg_Dword type and value bitwise and is not 1">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and" entity_check="none satisfy">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459002" version="2" comment="Reg_Dword type and value bitwise and is not 2">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and" entity_check="none satisfy">2</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459003" version="2" comment="Reg_Dword type and value bitwise and is not 3">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and" entity_check="none satisfy">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:459100" />
    </registry_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459200" version="1" comment="Force Logoff equals variable">
      <force_logoff datatype="int" var_ref="oval:mil.disa.fso.windows:var:459200" />
    </lockoutpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:459300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459400" version="1" comment="Reg_Dword type and value is greater than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:459400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459500" version="1" comment="Reg_Dword type and value bitwise and 524288">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and">524288</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459501" version="1" comment="Reg_Dword type and value bitwise and 536870912">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and">536870912</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:459900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460400" version="1" comment="Reg_Dword type and value equals 4 or less than">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">4</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:461000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:461100" />
    </registry_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461400" version="1" comment="NTFS">
      <result>NTFS</result>
    </wmi_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461500" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^[[:space:]]*You[[:space:]]+are[[:space:]]+accessing[[:space:]]+a[[:space:]]+U\.S\.[[:space:]]+Government[[:space:]]+\(USG\)[[:space:]]+Information[[:space:]]+System[[:space:]]+\(IS\)[[:space:]]+that[[:space:]]+is[[:space:]]+provided[[:space:]]+for[[:space:]]+USG[-—]authorized[[:space:]]+use[[:space:]]+only\.[[:space:]]+By[[:space:]]+using[[:space:]]+this[[:space:]]+IS[[:space:]]+\(which[[:space:]]+includes[[:space:]]+any[[:space:]]+device[[:space:]]+attached[[:space:]]+to[[:space:]]+this[[:space:]]+IS\),[[:space:]]+you[[:space:]]+consent[[:space:]]+to[[:space:]]+the[[:space:]]+following[[:space:]]+conditions:[[:space:]]+-The[[:space:]]+USG[[:space:]]+routinely[[:space:]]+intercepts[[:space:]]+and[[:space:]]+monitors[[:space:]]+communications[[:space:]]+on[[:space:]]+this[[:space:]]+IS[[:space:]]+for[[:space:]]+purposes[[:space:]]+including,[[:space:]]+but[[:space:]]+not[[:space:]]+limited[[:space:]]+to,[[:space:]]+penetration[[:space:]]+testing,[[:space:]]+COMSEC[[:space:]]+monitoring,[[:space:]]+network[[:space:]]+operations[[:space:]]+and[[:space:]]+defense,[[:space:]]+personnel[[:space:]]+misconduct[[:space:]]+\(PM\),[[:space:]]+law[[:space:]]+enforcement[[:space:]]+\(LE\),[[:space:]]+and[[:space:]]+counterintelligence[[:space:]]+\(CI\)[[:space:]]+investigations\.[[:space:]]+-At[[:space:]]+any[[:space:]]+time,[[:space:]]+the[[:space:]]+USG[[:space:]]+may[[:space:]]+inspect[[:space:]]+and[[:space:]]+seize[[:space:]]+data[[:space:]]+stored[[:space:]]+on[[:space:]]+this[[:space:]]+IS\.[[:space:]]+-Communications[[:space:]]+using,[[:space:]]+or[[:space:]]+data[[:space:]]+stored[[:space:]]+on,[[:space:]]+this[[:space:]]+IS[[:space:]]+are[[:space:]]+not[[:space:]]+private,[[:space:]]+are[[:space:]]+subject[[:space:]]+to[[:space:]]+routine[[:space:]]+monitoring,[[:space:]]+interception,[[:space:]]+and[[:space:]]+search,[[:space:]]+and[[:space:]]+may[[:space:]]+be[[:space:]]+disclosed[[:space:]]+or[[:space:]]+used[[:space:]]+for[[:space:]]+any[[:space:]]+USG-authorized[[:space:]]+purpose\.[[:space:]]+[-—]This[[:space:]]+IS[[:space:]]+includes[[:space:]]+security[[:space:]]+measures[[:space:]]+\(e\.g\.,[[:space:]]+authentication[[:space:]]+and[[:space:]]+access[[:space:]]+controls\)[[:space:]]+to[[:space:]]+protect[[:space:]]+USG[[:space:]]+interests[—-]+not[[:space:]]+for[[:space:]]+your[[:space:]]+personal[[:space:]]+benefit[[:space:]]+or[[:space:]]+privacy\.[[:space:]]+[—-]Notwithstanding[[:space:]]+the[[:space:]]+above,[[:space:]]+using[[:space:]]+this[[:space:]]+IS[[:space:]]+does[[:space:]]+not[[:space:]]+constitute[[:space:]]+consent[[:space:]]+to[[:space:]]+PM,[[:space:]]+LE[[:space:]]+or[[:space:]]+CI[[:space:]]+investigative[[:space:]]+searching[[:space:]]+or[[:space:]]+monitoring[[:space:]]+of[[:space:]]+the[[:space:]]+content[[:space:]]+of[[:space:]]+privileged[[:space:]]+communications,[[:space:]]+or work product,[[:space:]]+related[[:space:]]+to[[:space:]]+personal[[:space:]]+representation[[:space:]]+or[[:space:]]+services[[:space:]]+by[[:space:]]+attorneys,[[:space:]]+psychotherapists,[[:space:]]+or[[:space:]]+clergy,[[:space:]]+and[[:space:]]+their[[:space:]]+assistants\.[[:space:]]+Such[[:space:]]+communications[[:space:]]+and[[:space:]]+work[[:space:]]+product[[:space:]]+are[[:space:]]+private[[:space:]]+and[[:space:]]+confidential\.[[:space:]]+See[[:space:]]+User[[:space:]]+Agreement[[:space:]]+for[[:space:]]+details\.[[:space:]]*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461501" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^\s*You\s+are\s+accessing\s+a\s+U\.S\.\s+Government\s+\(USG\)\s+Information\s+System\s+\(IS\)\s+that\s+is\s+provided\s+for\s+USG[-—]authorized\s+use\s+only\.\s+By\s+using\s+this\s+IS\s+\(which\s+includes\s+any\s+device\s+attached\s+to\s+this\s+IS\),\s+you\s+consent\s+to\s+the\s+following\s+conditions:\s+-The\s+USG\s+routinely\s+intercepts\s+and\s+monitors\s+communications\s+on\s+this\s+IS\s+for\s+purposes\s+including,\s+but\s+not\s+limited\s+to,\s+penetration\s+testing,\s+COMSEC\s+monitoring,\s+network\s+operations\s+and\s+defense,\s+personnel\s+misconduct\s+\(PM\),\s+law\s+enforcement\s+\(LE\),\s+and\s+counterintelligence\s+\(CI\)\s+investigations\.\s+-At\s+any\s+time,\s+the\s+USG\s+may\s+inspect\s+and\s+seize\s+data\s+stored\s+on\s+this\s+IS\.\s+-Communications\s+using,\s+or\s+data\s+stored\s+on,\s+this\s+IS\s+are\s+not\s+private,\s+are\s+subject\s+to\s+routine\s+monitoring,\s+interception,\s+and\s+search,\s+and\s+may\s+be\s+disclosed\s+or\s+used\s+for\s+any\s+USG-authorized\s+purpose\.\s+[-—]This\s+IS\s+includes\s+security\s+measures\s+\(e\.g\.,\s+authentication\s+and\s+access\s+controls\)\s+to\s+protect\s+USG\s+interests[—-]+not\s+for\s+your\s+personal\s+benefit\s+or\s+privacy\.\s+[—-]Notwithstanding\s+the\s+above,\s+using\s+this\s+IS\s+does\s+not\s+constitute\s+consent\s+to\s+PM,\s+LE\s+or\s+CI\s+investigative\s+searching\s+or\s+monitoring\s+of\s+the\s+content\s+of\s+privileged\s+communications,\s+or work product,\s+related\s+to\s+personal\s+representation\s+or\s+services\s+by\s+attorneys,\s+psychotherapists,\s+or\s+clergy,\s+and\s+their\s+assistants\.\s+Such\s+communications\s+and\s+work\s+product\s+are\s+private\s+and\s+confidential\.\s+See\s+User\s+Agreement\s+for\s+details\.\s*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461600" version="2" comment="Reg_SZ type and value equals 4 or less">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal">4</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461700" version="1" comment="Act as part of the operating system">
      <setcbprivilege datatype="boolean" operation="equals">0</setcbprivilege>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:462001" version="2" comment="Reg_Dword type and value equals 0">
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:462100" version="2" comment="Reg_Multi_Sz type and blank value">
      <type>reg_multi_sz</type>
      <value datatype="string" operation="pattern match" entity_check="none satisfy">.+</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463300" version="2" comment="Administrators">
      <security_principle datatype="string" operation="equals">Administrators</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463301" version="1" comment="Debug programs">
      <sedebugprivilege datatype="boolean" operation="equals">0</sedebugprivilege>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463400" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^D(oD|OD) N(otice|OTICE) (and|AND) C(onsent|ONSENT) B(anner|ANNER)$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463401" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^U\.?S\.? D(EPARTMENT|epartment) (OF|Of|of) D(EFENSE|efense) W(ARNING|arning) S(TATEMENT|tatement)$</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463500" version="1" comment="Local Service">
      <security_principle datatype="string" operation="equals">LOCAL SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463501" version="1" comment="Network Service">
      <security_principle datatype="string" operation="equals">NETWORK SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463600" version="1" comment="Allow log on locally">
      <seinteractivelogonright datatype="boolean" operation="equals">0</seinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463700" version="1" comment="Allow log on through Remote Desktop Services">
      <seremoteinteractivelogonright datatype="boolean" operation="equals">0</seremoteinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463800" version="1" comment="Back up files and directories">
      <sebackupprivilege datatype="boolean" operation="equals">0</sebackupprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463900" version="1" comment="Bypass traverse checking">
      <sechangenotifyprivilege datatype="boolean" operation="equals">0</sechangenotifyprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463901" version="1" comment="Window Manager\Window Manager Group">
      <security_principle datatype="string" operation="equals">Window Manager\Window Manager Group</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464000" version="1" comment="Change the system time">
      <sesystemtimeprivilege datatype="boolean" operation="equals">0</sesystemtimeprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464100" version="1" comment="Change the time zone">
      <setimezoneprivilege datatype="boolean" operation="equals">0</setimezoneprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464200" version="1" comment="Create a pagefile">
      <secreatepagefileprivilege datatype="boolean" operation="equals">0</secreatepagefileprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464300" version="1" comment="Create a token object">
      <secreatetokenprivilege datatype="boolean" operation="equals">0</secreatetokenprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464400" version="1" comment="Service">
      <security_principle datatype="string" operation="equals">SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464401" version="1" comment="Create global objects">
      <secreateglobalprivilege datatype="boolean" operation="equals">0</secreateglobalprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464500" version="1" comment="Create permanent shared objects">
      <secreatepermanentprivilege datatype="boolean" operation="equals">0</secreatepermanentprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464600" version="2" comment="Create symbolic links">
      <secreatesymboliclinkprivilege datatype="boolean" operation="equals">0</secreatesymboliclinkprivilege>
    </accesstoken_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464601" version="3" comment="verify hyper-v role installed">
      <result datatype="string" operation="equals" entity_check="all">Hyper-V</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464602" version="3" comment="VMs">
      <security_principle datatype="string" operation="equals">NT VIRTUAL MACHINE\Virtual Machines</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464700" version="1" comment="Force shutdown from a remote system">
      <seremoteshutdownprivilege datatype="boolean" operation="equals">0</seremoteshutdownprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464800" version="1" comment="Generate security audits">
      <seauditprivilege datatype="boolean" operation="equals">0</seauditprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464900" version="1" comment="Impersonate a client after authentication">
      <seimpersonateprivilege datatype="boolean" operation="equals">0</seimpersonateprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465100" version="1" comment="Increase scheduling priority">
      <seincreasebasepriorityprivilege datatype="boolean" operation="equals">0</seincreasebasepriorityprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465200" version="1" comment="Load and unload device drivers">
      <seloaddriverprivilege datatype="boolean" operation="equals">0</seloaddriverprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465300" version="1" comment="Lock pages in memory">
      <selockmemoryprivilege datatype="boolean" operation="equals">0</selockmemoryprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465500" version="1" comment="Modify an object label">
      <serelabelprivilege datatype="boolean" operation="equals">0</serelabelprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465600" version="1" comment="Modify firmware environment values">
      <sesystemenvironmentprivilege datatype="boolean" operation="equals">0</sesystemenvironmentprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465700" version="1" comment="Perform volume maintenance tasks">
      <semanagevolumeprivilege datatype="boolean" operation="equals">0</semanagevolumeprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465800" version="1" comment="Profile single process">
      <seprofilesingleprocessprivilege datatype="boolean" operation="equals">0</seprofilesingleprocessprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465900" version="1" comment="NT Service\WdiServiceHost">
      <security_principle datatype="string" operation="equals">NT SERVICE\WdiServiceHost</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465901" version="1" comment="Profile system performance">
      <sesystemprofileprivilege datatype="boolean" operation="equals">0</sesystemprofileprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466000" version="1" comment="Replace a process level token">
      <seassignprimarytokenprivilege datatype="boolean" operation="equals">0</seassignprimarytokenprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466100" version="1" comment="Restore files and directories">
      <serestoreprivilege datatype="boolean" operation="equals">0</serestoreprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466200" version="1" comment="Shut down the system">
      <seshutdownprivilege datatype="boolean" operation="equals">0</seshutdownprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466300" version="1" comment="Take ownership of files or other objects">
      <setakeownershipprivilege datatype="boolean" operation="equals">0</setakeownershipprivilege>
    </accesstoken_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466400" version="1" comment="Audit - Credential Validation - Success only">
      <credential_validation datatype="string" operation="equals">AUDIT_SUCCESS</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466401" version="1" comment="Audit - Credential Validation - Success and Failure">
      <credential_validation datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466500" version="1" comment="Audit - Credential Validation - Failure only">
      <credential_validation datatype="string" operation="equals">AUDIT_FAILURE</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466600" version="1" comment="Audit - Computer Account Management - Success only">
      <computer_account_management datatype="string" operation="equals">AUDIT_SUCCESS</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466601" version="1" comment="Audit - Computer Account Management - Success and Failure">
      <computer_account_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466700" version="1" comment="Audit - Computer Account Management - Failure only">
      <computer_account_management datatype="string" operation="equals">AUDIT_FAILURE</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466800" version="1" comment="Audit - Other Account Management Events - Success only">
      <other_account_management_events datatype="string" operation="equals">AUDIT_SUCCESS</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466801" version="1" comment="Audit - Other Account Management Events - Success and Failure">
      <other_account_management_events datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466900" version="1" comment="Audit - Other Account Management Events - Failure only">
      <other_account_management_events datatype="string" operation="equals">AUDIT_FAILURE</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467000" version="1" comment="Audit - Security Group Management - Success only">
      <security_group_management datatype="string" operation="equals">AUDIT_SUCCESS</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467001" version="1" comment="Audit - Security Group Management - Success and Failure">
      <security_group_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467100" version="1" comment="Audit - Security Group Management - Failure only">
      <security_group_management datatype="string" operation="equals">AUDIT_FAILURE</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467200" version="1" comment="Audit - User Account Management - Success only">
      <user_account_management datatype="string" operation="equals">AUDIT_SUCCESS</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467201" version="1" comment="Audit - User Account Management - Success and Failure">
      <user_account_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467300" version="1" comment="Audit - User Account Management - Failure only">
      <user_account_management datatype="string" operation="equals">AUDIT_FAILURE</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467400" version="1" comment="Audit - Process Creation - Success only">
      <process_creation datatype="string" operation="equals">AUDIT_SUCCESS</process_creation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467401" version="1" comment="Audit - Process Creation - Success and Failure">
      <process_creation datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</process_creation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467500" version="1" comment="Audit - Logoff - Success only">
      <logoff datatype="string" operation="equals">AUDIT_SUCCESS</logoff>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467501" version="1" comment="Audit - Logoff - Success and Failure">
      <logoff datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</logoff>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467600" version="1" comment="Audit - Logon - Success only">
      <logon datatype="string" operation="equals">AUDIT_SUCCESS</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467601" version="1" comment="Audit - Logon - Success and Failure">
      <logon datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467700" version="1" comment="Audit - Logon - Failure only">
      <logon datatype="string" operation="equals">AUDIT_FAILURE</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467800" version="1" comment="Audit - Special Logon - Success only">
      <special_logon datatype="string" operation="equals">AUDIT_SUCCESS</special_logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467801" version="1" comment="Audit - Special Logon - Success and Failure">
      <special_logon datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</special_logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468100" version="1" comment="Audit - Audit Policy Change - Success only">
      <audit_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468101" version="1" comment="Audit - Audit Policy Change - Success and Failure">
      <audit_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468200" version="1" comment="Audit - Audit Policy Change - Failure only">
      <audit_policy_change datatype="string" operation="equals">AUDIT_FAILURE</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468300" version="1" comment="Audit - Authentication Policy Change - Success only">
      <authentication_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</authentication_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468301" version="1" comment="Audit - Authentication Policy Change - Success and Failure">
      <authentication_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</authentication_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468400" version="1" comment="Audit - Sensitive Privilege Use - Success only">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_SUCCESS</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468401" version="1" comment="Audit - Sensitive Privilege Use - Success and Failure">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468500" version="1" comment="Audit - Sensitive Privilege Use - Failure only">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_FAILURE</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468600" version="1" comment="Audit - IPSec Driver - Success only">
      <ipsec_driver datatype="string" operation="equals">AUDIT_SUCCESS</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468601" version="1" comment="Audit - IPSec Driver - Success and Failure">
      <ipsec_driver datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468700" version="1" comment="Audit - IPSec Driver - Failure only">
      <ipsec_driver datatype="string" operation="equals">AUDIT_FAILURE</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468800" version="1" comment="Audit - Security State Change - Success only">
      <security_state_change datatype="string" operation="equals">AUDIT_SUCCESS</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468801" version="1" comment="Audit - Security State Change - Success and Failure">
      <security_state_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468900" version="1" comment="Audit - Security State Change - Failure only">
      <security_state_change datatype="string" operation="equals">AUDIT_FAILURE</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469000" version="1" comment="Audit - Security System Extension - Success only">
      <security_system_extension datatype="string" operation="equals">AUDIT_SUCCESS</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469001" version="1" comment="Audit - Security System Extension - Success and Failure">
      <security_system_extension datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469100" version="1" comment="Audit - Security System Extension - Failure only">
      <security_system_extension datatype="string" operation="equals">AUDIT_FAILURE</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469200" version="1" comment="Audit - System Integrity - Success only">
      <system_integrity datatype="string" operation="equals">AUDIT_SUCCESS</system_integrity>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469201" version="1" comment="Audit - System Integrity - Success and Failure">
      <system_integrity datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</system_integrity>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469300" version="1" comment="Audit - System Integrity - Failure only">
      <system_integrity datatype="string" operation="equals">AUDIT_FAILURE</system_integrity>
    </auditeventpolicysubcategories_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469400" version="1" comment="Reg_Sz type and blank value">
      <type datatype="string" operation="equals">reg_sz</type>
      <value />
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469500" version="1" comment="Deny access from the network">
      <sedenynetworklogonright datatype="boolean" operation="equals">1</sedenynetworklogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470400" version="1" comment="Authenticated Users">
      <security_principle datatype="string" operation="equals">Authenticated Users</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470402" version="1" comment="Access this computer from the network">
      <senetworklogonright datatype="boolean" operation="equals">0</senetworklogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470500" version="1" comment="Deny log on as a service">
      <sedenyservicelogonright datatype="boolean" operation="equals">0</sedenyservicelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470600" version="1" comment="Deny log on locally">
      <sedenyinteractivelogonright datatype="boolean" operation="equals">1</sedenyinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470700" version="1" comment="Enable computer and user accounts to be trusted for delegation">
      <seenabledelegationprivilege datatype="boolean" operation="equals">0</seenabledelegationprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:471300" version="1" comment="Deny log on as a batch job">
      <sedenybatchLogonright datatype="boolean" operation="equals">1</sedenybatchLogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:471400" version="1" comment="Deny log on through Remote Desktop Services">
      <sedenyremoteInteractivelogonright datatype="boolean" operation="equals">1</sedenyremoteInteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:472300" version="1" comment="Deny log on as a service">
      <sedenyservicelogonright datatype="boolean" operation="equals">1</sedenyservicelogonright>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473000" version="1" comment="Reg_Dword type and value is less than or equals 900">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">900</value>
    </registry_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473100" version="1" comment="Service Startup Type is Disabled">
      <result>Disabled</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473600" version="1" comment="Service Startup Type is Automatic">
      <result>Auto</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473700" version="1" comment="Manage auditing and security log">
      <sesecurityprivilege datatype="boolean" operation="equals">0</sesecurityprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:474000" version="1" comment="Access Credential Manager as a trusted caller">
      <setrustedcredmanaccessnameright datatype="boolean" operation="equals">0</setrustedcredmanaccessnameright>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497300" version="1" comment="Reg_Dword type and value equals 2">
      <type datatype="string" operation="equals">reg_dword</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497500" version="1" comment="Audit - Audit Policy Change - Success only">
      <authorization_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</authorization_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497501" version="1" comment="Audit - Audit Policy Change - Success only">
      <authorization_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</authorization_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497600" version="1" comment="Audit - Audit Policy Change - Failure only">
      <authorization_policy_change datatype="string" operation="equals">AUDIT_FAILURE</authorization_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497601" version="1" comment="Audit - Audit Policy Change - Failure only">
      <authorization_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</authorization_policy_change>
    </auditeventpolicysubcategories_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498200" version="1" comment="Standalone Workstation is 0">
      <result datatype="int" operation="equals">0</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498203" version="1" comment="Standalone Server is 2">
      <result datatype="int" operation="equals">2</result>
    </wmi_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498402" version="1" comment="TrustedInstaller">
      <trustee_sid operation="equals" datatype="string">S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464</trustee_sid>
    </fileeffectiverights53_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498408" version="1" comment="No Rights except Read and Execute">
      <standard_delete datatype="boolean" operation="equals" entity_check="all">false</standard_delete>
      <standard_write_dac datatype="boolean" operation="equals" entity_check="all">false</standard_write_dac>
      <standard_write_owner datatype="boolean" operation="equals" entity_check="all">false</standard_write_owner>
      <generic_write datatype="boolean" operation="equals" entity_check="all">false</generic_write>
      <file_write_data datatype="boolean" operation="equals" entity_check="all">false</file_write_data>
      <file_append_data datatype="boolean" operation="equals" entity_check="all">false</file_append_data>
      <file_write_ea datatype="boolean" operation="equals" entity_check="all">false</file_write_ea>
      <file_delete_child datatype="boolean" operation="equals" entity_check="all">false</file_delete_child>
      <file_write_attributes datatype="boolean" operation="equals" entity_check="all">false</file_write_attributes>
    </fileeffectiverights53_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514500" version="1" comment="Remote Desktop Users">
      <security_principle datatype="string" operation="equals">Remote Desktop Users</security_principle>
    </accesstoken_state>
    <wmi57_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514501" version="1" comment="Is the Remote Desktop Services role installed">
      <result datatype="record" operation="equals">
        <field xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" name="id" entity_check="at least one" datatype="string">18</field>
      </result>
    </wmi57_state>
  </states>
  <variables>
    <external_variable id="oval:mil.disa.fso.windows:var:442300" version="1" datatype="int" comment="Account Lockout Threshold">
      <possible_value hint="3_attempts">3</possible_value>
      <possible_value hint="5_attempts">5</possible_value>
      <possible_value hint="10_attempts">10</possible_value>
      <possible_value hint="50_attempts">50</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442400" version="1" datatype="int" comment="Reset Account Lockout Counter After">
      <possible_value hint="900_seconds">900</possible_value>
      <possible_value hint="3600_seconds">3600</possible_value>
      <possible_value hint="86400_seconds">86400</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442500" version="1" datatype="int" comment="Enforce Password History">
      <possible_value hint="5_passwords">5</possible_value>
      <possible_value hint="24_passwords">24</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442600" version="1" datatype="int" comment="Maximum Password Age">
      <possible_value hint="5184000_seconds">5184000</possible_value>
      <possible_value hint="7776000_seconds">7776000</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442700" version="1" datatype="int" comment="Minimum Password Age">
      <possible_value hint="86400_seconds">86400</possible_value>
      <possible_value hint="172800_seconds">172800</possible_value>
      <possible_value hint="432000_seconds">432000</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442800" version="1" datatype="int" comment="Minimum Password Length">
      <possible_value hint="8_characters">8</possible_value>
      <possible_value hint="9_characters">9</possible_value>
      <possible_value hint="12_characters">12</possible_value>
      <possible_value hint="14_characters">14</possible_value>
      <possible_value hint="15_characters">15</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442900" version="1" datatype="boolean" comment="Enforce Password Complexity">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443000" version="1" datatype="boolean" comment="Enforce Reversible Encryption When Storing Passwords">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443300" version="1" datatype="int" comment="Turn Off Microsoft Peer-to-Peer Networking Services">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443400" version="1" datatype="int" comment="Prohibit installation and configuration of Network Bridge on your DNS domain network">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443500" version="1" datatype="int" comment="Require domain users to elevate when setting a network's location">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443600" version="1" datatype="string" comment="Route all traffic through the internal network">
      <possible_value hint="enabled_enabled_state">Enabled</possible_value>
      <possible_value hint="enabled_disabled_state">Disabled</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443700" version="1" datatype="string" comment="6to4 State">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443800" version="1" datatype="int" comment="IP HTTPS State">
      <possible_value hint="default">0</possible_value>
      <possible_value hint="disabled">3</possible_value>
      <possible_value hint="enabled">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443900" version="1" datatype="string" comment="ISATAP State">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444000" version="1" datatype="string" comment="Teredo State">
      <possible_value hint="disabled">Disabled</possible_value>
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="client">Client</possible_value>
      <possible_value hint="enterprise_client">Enterprise Client</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444200" version="1" datatype="int" comment="Prohibit Access of the Windows Connect Now Wizards">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444300" version="1" datatype="int" comment="Extend Point and Print connection to search Windows Update and use alternate connection if needed">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444500" version="1" datatype="int" comment="Allow remote access to the PnP interface">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444600" version="1" datatype="int" comment="Do not send a Windows Error Report when a generic driver is installed on a device">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444700" version="1" datatype="int" comment="Do not create system restore point when new device driver installed">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444800" version="1" datatype="int" comment="Prevent device metadata retrieval from the Internet">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445000" version="1" datatype="int" comment="Specify Search Order for device driver source locations">
      <possible_value hint="do_not_search_windows_update">0</possible_value>
      <possible_value hint="search_windows_update_first">1</possible_value>
      <possible_value hint="search_windows_update_last">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445200" version="1" datatype="int" comment="Turn off Windows Update device driver search prompt">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445400" version="1" datatype="int" comment="Registry Policy Processing">
      <possible_value hint="not configured">-1</possible_value>
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy">1</possible_value>
      <possible_value hint="enabled:nogpolistchanges">2</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy_and_nogpolistchanges">3</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445700" version="1" datatype="int" comment="Turn off downloading of print drivers over HTTP">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445800" version="1" datatype="int" comment="Turn Off Handwriting Recognition Error Reporting">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:446100" version="1" datatype="int" comment="Turn Off Internet File Association Service">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:446200" version="1" datatype="int" comment="Turn off printing over HTTP">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:446800" version="1" datatype="int" comment="Turn off Windows Customer Experience Improvement Program">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:447000" version="1" datatype="int" comment="Turn off Windows Update device driver searching">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:447200" version="1" datatype="int" comment="Always Use Classic Logon">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:447500" version="1" datatype="int" comment="Require a Password when a Computer Wakes (On Battery)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:447600" version="1" datatype="int" comment="Require a Password when a Computer Wakes (Plugged)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:447900" version="1" datatype="int" comment="Offer Remote Assistance">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448000" version="1" datatype="int" comment="Solicited Remote Assistance">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448100" version="1" datatype="int" comment="Turn on session logging">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448300" version="1" datatype="int" comment="Restrictions for Unauthenticated RPC clients">
      <possible_value hint="enabled:none">0</possible_value>
      <possible_value hint="enabled:authenticated">1</possible_value>
      <possible_value hint="enabled:authenticated_with_exceptions">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448500" version="1" datatype="int" comment="Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448600" version="1" datatype="int" comment="Troubleshooting: Allow user to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448700" version="1" datatype="int" comment="Enable/Disable PerfTrack">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448900" version="1" datatype="int" comment="Turn off Program Inventory">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:449000" version="1" datatype="int" comment="Turn off Autoplay for non-volume devices">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:449100" version="1" datatype="int" comment="Default behavior for AutoRun">
      <possible_value hint="do_not_execute_autorun_commands">1</possible_value>
      <possible_value hint="automatically_execute_autorun_commands">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:449500" version="1" datatype="int" comment="Enumerate administrator accounts on elevation">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450200" version="1" datatype="int" comment="Maximum Application Log Size">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450300" version="1" datatype="int" comment="Maximum Security Log Size">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450400" version="1" datatype="int" comment="Maximum Setup Log Size">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450500" version="1" datatype="int" comment="Maximum System Log Size">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450700" version="1" datatype="int" comment="Turn off Data Execution Protection">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450800" version="1" datatype="int" comment="Turn off Heap termination on corruption">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450900" version="1" datatype="int" comment="Turn off shell protocol protected mode">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451100" version="1" datatype="int" comment="Do not allow passwords to be saved">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451200" version="1" datatype="int" comment="Do not allow drive redirection">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451300" version="1" datatype="int" comment="Always prompt for password upon connection">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451400" version="1" datatype="int" comment="Set client connection encryption level">
      <possible_value hint="low_level">1</possible_value>
      <possible_value hint="client_compatible">2</possible_value>
      <possible_value hint="high_level">3</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451700" version="1" datatype="int" comment="Do not delete temp folder upon exit">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451800" version="1" datatype="int" comment="Do not use temporary folders per session">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:452200" version="1" datatype="int" comment="Configure Microsoft SpyNet Reporting">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:452800" version="1" datatype="int" comment="Prohibit non-administrators from applying vendor signed updates">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:453000" version="1" datatype="int" comment="Prevent Automatic Updates">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:453900" version="1" datatype="string" comment="Built-in Guest">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:453901" item_field="trustee_name" />
    </local_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:453901" version="1" datatype="boolean" comment="Status of Guest Account">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454000" version="1" datatype="int" comment="Accounts: Limit local account use to blank passwords to console logon only">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:454100" version="1" datatype="string" comment="Built-in Administrator">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:454101" item_field="trustee_name" />
    </local_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454300" version="1" datatype="int" comment="Audit: Audit the access of global system objects">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454400" version="1" datatype="binary" comment="Audit: Audit the use of Backup and Restore privilege">
      <possible_value hint="disabled">00</possible_value>
      <possible_value hint="enabled">01</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454500" version="1" datatype="int" comment="Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454600" version="1" datatype="int" comment="Devices: Allow only administrators to format and eject removable media">
      <possible_value hint="administrator_only">0</possible_value>
      <possible_value hint="administrator_and_powerusers_only">1</possible_value>
      <possible_value hint="administrator_and_interactiveuser_only">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454700" version="1" datatype="int" comment="Domain member: Digitally encrypt or sign secure channel data (always)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454800" version="1" datatype="int" comment="Domain member: Digitally encrypt secure channel data (when possible)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454900" version="1" datatype="int" comment="Domain member: Digitally sign secure channel data (when possible)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455000" version="1" datatype="int" comment="Domain member: Disable machine account password changes">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455100" version="1" datatype="int" comment="Maximum Machine Account Password Age">
      <possible_value hint="7_days">7</possible_value>
      <possible_value hint="30_days">30</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455200" version="1" datatype="int" comment="Require Strong Session Key">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455300" version="1" datatype="int" comment="Interactive logon: Do not display last user name">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455400" version="1" datatype="int" comment="Interactive logon: Do not require CTRL+ALT+DEL">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455500" version="1" datatype="int" comment="Prompt User to Change Password Before Expiration">
      <possible_value hint="14_days">14</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455700" version="1" datatype="int" comment="Client Digitally Sign Communications (Always)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455800" version="1" datatype="int" comment="Microsoft network client: Digitally sign communications (if server agrees)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455900" version="1" datatype="int" comment="Microsoft network client: Send unencrypted password to third-party SMB servers">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456000" version="1" datatype="int" comment="Amount of Idle Time Required Before Suspending Session">
      <possible_value hint="15_minutes">15</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456100" version="1" datatype="int" comment="Microsoft network server: Digitally sign communications (always)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456200" version="1" datatype="int" comment="Microsoft network server: Digitally sign communications (if client agrees)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456300" version="1" datatype="int" comment="Microsoft network server: Disconnect clients when logon hours expire">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456400" version="1" datatype="int" comment="Microsoft network server: SPN Target name validation">
      <possible_value hint="off">0</possible_value>
      <possible_value hint="accept_if_provided_by_client">1</possible_value>
      <possible_value hint="required_from_client">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456600" version="1" datatype="int" comment="MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)">
      <possible_value hint="No_additional_protection">0</possible_value>
      <possible_value hint="Medium_protection">1</possible_value>
      <possible_value hint="Highest_protection">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456700" version="1" datatype="int" comment="MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)">
      <possible_value hint="source_routing_packets_allowed">0</possible_value>
      <possible_value hint="source_routing_packets_ignored">1</possible_value>
      <possible_value hint="source_routing_packets_disabled">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456800" version="1" datatype="int" comment="MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456900" version="1" datatype="int" comment="MSS: (KeepAliveTime)How often keep-alive packets are sent in milliseconds">
      <possible_value hint="300000_seconds">300000</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457000" version="1" datatype="int" comment="MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic">
      <possible_value hint="multicast_broadcast_rsvp_kerberos_isakmp_exempt">0</possible_value>
      <possible_value hint="multicast_broadcast_isakmp_exempt">1</possible_value>
      <possible_value hint="rsvp_kerberos_isakmp_exempt">2</possible_value>
      <possible_value hint="isakmp_exempt">3</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457100" version="1" datatype="int" comment="MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457200" version="1" datatype="int" comment="MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure DefaultGateway addresses (could lead to DoS)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
      <possible_value hint="enabled_only_if_dhcp_sends_perform_router_discovery_option">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457300" version="1" datatype="int" comment="MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457400" version="1" datatype="int" comment="MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)">
      <possible_value hint="zero_seconds">0</possible_value>
      <possible_value hint="5_seconds">5</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457500" version="1" datatype="int" comment="MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457600" version="1" datatype="int" comment="MSS: (TCPMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457700" version="1" datatype="int" comment="MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning">
      <possible_value hint="90_percent">90</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457800" version="1" datatype="int" comment="Network access: Do not allow anonymous enumeration of SAM accounts">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457900" version="1" datatype="int" comment="Network access: Do not allow anonymous enumeration of SAM accounts and shares">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458000" version="1" datatype="int" comment="Network access: Do not allow storage of credentials or .NET Passports for network authentication">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458100" version="1" datatype="int" comment="Network access: Let Everyone permissions apply to anonymous users">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458400" version="1" datatype="int" comment="Network access: Restrict anonymous access to Named Pipes and Shares">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458600" version="1" datatype="int" comment="Network access: Sharing and security model for local accounts">
      <possible_value hint="classic">0</possible_value>
      <possible_value hint="guests_only">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458700" version="1" datatype="int" comment="Network security: Allow Local System to use computer identity for NTLM">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458800" version="1" datatype="int" comment="Network security: Allow LocalSystem NULL session fallback">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458900" version="1" datatype="int" comment="Network Security: Allow PKU2U authentication requests to this computer to use online identities">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459100" version="1" datatype="int" comment="Network security: Do not store LAN Manager hash value on next password change">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459200" version="1" datatype="int" comment="Network security: Force logoff when logon hours expire">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459300" version="1" datatype="int" comment="Network Security: LAN Manager Authentication Level">
      <possible_value hint="send_LM_and_NTLM_responses">0</possible_value>
      <possible_value hint="send_LM_and_NTLM_use_NTLMv2_session_security_if_negotiated">1</possible_value>
      <possible_value hint="send_NTLM_response_only">2</possible_value>
      <possible_value hint="send_NTLMv2_response_only">3</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM">4</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM_and_NTLM">5</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459400" version="1" datatype="int" comment="Network Security: LDAP client signing requirements">
      <possible_value hint="none">0</possible_value>
      <possible_value hint="negotiate_signing">1</possible_value>
      <possible_value hint="require_signing">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459900" version="1" datatype="int" comment="Shutdown: Allow System to be Shut Down Without Having to Log On">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460000" version="1" datatype="int" comment="System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460100" version="1" datatype="int" comment="System objects: Require case insensitivity for non-Windows subsystems">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460200" version="1" datatype="int" comment="System objects: Strengthen default permissions of internal system objects">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460300" version="1" datatype="int" comment="Admin Approval Mode for the Built-in Administrator account">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460500" version="1" datatype="int" comment="Behavior of the elevation prompt for standard users">
      <possible_value hint="automatically_deny">0</possible_value>
      <possible_value hint="prompt_for_credentials_on_the_secure_desktop">1</possible_value>
      <possible_value hint="prompt_for_credentials">3</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460600" version="1" datatype="int" comment="Detect application installations and prompt for elevation">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460700" version="1" datatype="int" comment="Only elevate executables that are signed and validated">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460800" version="1" datatype="int" comment="Only elevate UIAccess applications that are installed in secure locations">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460900" version="1" datatype="int" comment="Run all administrators in Admin Approval Mode">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:461000" version="1" datatype="int" comment="Switch to the secure desktop when prompting for elevation">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:461100" version="1" datatype="int" comment="Virtualize file and registry write failures to per-user locations">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:461300" version="1" datatype="string" comment="All 'local disk' volumes, in X:\ format">
      <end character="\">
        <object_component object_ref="oval:mil.disa.fso.windows:obj:461301" item_field="result" />
      </end>
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:498401" version="1" datatype="string" comment="SystemRoot\System32">
      <concat>
        <object_component object_ref="oval:mil.disa.fso.windows:obj:388601" item_field="value" />
        <literal_component>\System32</literal_component>
      </concat>
    </local_variable>
  </variables>
</oval_definitions>

