<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:windows-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/windows-definitions-schema.xsd       http://oval.mitre.org/XMLSchema/oval-definitions-5#independent http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/independent-definitions-schema.xsd       http://oval.mitre.org/XMLSchema/oval-definitions-5 http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 http://oval.mitre.org/language/download/schema/version5.3/ovaldefinition/complete/oval-common-schema.xsd">
  <generator>
    <oval:product_name>DISA FSO</oval:product_name>
    <oval:schema_version>5.3</oval:schema_version>
    <oval:timestamp>2014-09-30T04:03:30</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:mil.disa.fso.ie:def:101" version="1" class="compliance">
      <metadata>
        <title>DTBI031 - The Java Permissions must be disallowed (Internet zone)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Java application could contain malicious code, sites located in this security zone are more likely to be hosted by malicious people. This policy setting allows you to manage permissions for Java Applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Low Safety enables applets to perform all operations. Medium Safety enables applets to run in their sandbox. High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. If you disable this policy setting, Java applets cannot run. If you do not configure this policy setting, the permission is set to High Safety.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Java permissions">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:10100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:106" version="1" class="compliance">
      <metadata>
        <title>DTBI039 - Navigating windows and frames across different domains must be disallowed (Internet zone)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Frames that navigate across different domains are a security concern, because the user may think they are accessing pages on one site while they are actually accessing pages on another site. It is possible that a web site hosting malicious content could use this feature in a manner similar to cross site scripting. This policy setting allows you to manage the opening of sub-frames and access of applications across different domains.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Navigate windows and frames across different domains">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Navigate windows and frames across different domains" test_ref="oval:mil.disa.fso.ie:tst:10600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:111" version="1" class="compliance">
      <metadata>
        <title>DTBI061 - Java Permissions must be configured with High Safety (Intranet zone)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Java application could contain malicious code, sites located in this security zone are more likely to be hosted by malicious people. This policy setting allows you to manage permissions for Java Applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Low Safety enables applets to perform all operations. Medium Safety enables applets to run in their sandbox. High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. If you disable this policy setting, Java applets cannot run. If you do not configure this policy setting, the permission is set to High Safety.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Java permissions">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:11100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:112" version="1" class="compliance">
      <metadata>
        <title>DTBI091 - The Java Permissions must be set with High Safety (Trusted Sites zone)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Java application could contain malicious code, sites located in this security zone are more likely to be hosted by malicious people. This policy setting allows you to manage permissions for Java Applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually. Low Safety enables applets to perform all operations. Medium Safety enables applets to run in their sandbox. High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. If you disable this policy setting, Java applets cannot run. If you do not configure this policy setting, the permission is set to High Safety.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Java permissions">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:11200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:132" version="2" class="compliance">
      <metadata>
        <title>DTBI697 - IE - Users enable or disable add-ons</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Users often choose to install add-ons that are not permitted by an organization's security policy. Such add-ons can pose a significant security and privacy risk to your network. This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager. If you enable this policy setting, users cannot enable or disable add-ons through Add-On Manager. The only exception occurs if an add-on has been specifically entered into the 'Add-On List' policy setting in such a way as to allow users to continue to manage the add-on. In this case, the user can still manage the add-on. If you disable or do not configure this policy setting, the appropriate controls in the Add-On Manager will be available to the user.</description>
      </metadata>
      <criteria operator="OR" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons" test_ref="oval:mil.disa.fso.ie:tst:13200" />
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons" test_ref="oval:mil.disa.fso.ie:tst:13201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:134" version="1" class="compliance">
      <metadata>
        <title>DTBI315 - Participation in the Customer Experience Improvement Program must be disallowed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This setting controls whether users can participate in the Microsoft Customer Experience Improvement Program to help improve Microsoft applications. When users choose to participate in the Customer Experience Improvement Program (CEIP), applications automatically send information to Microsoft about how the applications are used. This information is combined with other CEIP data to help Microsoft solve problems and to improve the products and features customers use most often. This feature does not collect users' names, addresses, or any other identifying information except the IP address that is used to send the data. By default, users have the opportunity to opt into participation in the CEIP the first time they run an application. If your organization has policies that govern the use of external resources such as the CEIP, allowing users to opt in to the program might cause them to violate these policies.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Prevent participation in the Customer Experience Improvement Program">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Prevent participation in the Customer Experience Improvement Program" test_ref="oval:mil.disa.fso.ie:tst:13400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:154" version="1" class="compliance">
      <metadata>
        <title>DTBI465 - MIME sniffing - Internet</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature. If you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature. If you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process. If you do not configure this policy setting, the MIME Sniffing Safety Feature will not apply in this zone.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Enable MIME Sniffing">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Enable MIME Sniffing" test_ref="oval:mil.disa.fso.ie:tst:15400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:155" version="1" class="compliance">
      <metadata>
        <title>DTBI470 - MIME sniffing - Restricted</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature. If you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature. If you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process. If you do not configure this policy setting, the MIME Sniffing Safety Feature will not apply in this zone.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Enable MIME Sniffing">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Enable MIME Sniffing" test_ref="oval:mil.disa.fso.ie:tst:15500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:165" version="1" class="compliance">
      <metadata>
        <title>DTBI580 - Automatic prompting for file downloads must be disallowed (Restricted Sites zone)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads. If you enable this setting, users will receive a file download dialog for automatic download attempts. If you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Information Bar instead of the file download dialog. Users can then click the Information Bar to allow the file download prompt.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Automatic prompting for file downloads">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Automatic prompting for file downloads" test_ref="oval:mil.disa.fso.ie:tst:16500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:166" version="1" class="compliance">
      <metadata>
        <title>DTBI590 - Internet Explorer Processes for MIME handling must be enforced (Reserved)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server. The Consistent MIME Handling\Internet Explorer Processes policy setting determines whether Internet Explorer requires that all file-type information provided by Web servers be consistent. For example, if the MIME type of a file is text/plain but the MIME data indicates that the file is really an executable file, Internet Explorer changes its extension to reflect this executable status. This capability helps ensure that executable code cannot masquerade as other types of data that may be trusted. If you enable this policy setting, Internet Explorer examines all received files and enforces consistent MIME data for them. If you disable or do not configure this policy setting, Internet Explorer does not require consistent MIME data for all received files and will use the MIME data provided by the file. MIME file-type spoofing is a potential threat to your organization. Ensuring that these files are consistent and properly labeled helps prevent malicious file downloads from infecting your network.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:16600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:167" version="1" class="compliance">
      <metadata>
        <title>DTBI595 - Internet Explorer Processes for MIME sniffing must be enforced (Reserved).</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>MIME sniffing is the process of examining the content of a MIME file to determine its context ? whether it is a data file, an executable file, or some other type of file. This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. When set to Enabled, MIME sniffing will never promote a file of one type to a more dangerous file type. Disabling MIME sniffing configures Internet Explorer processes to allow a MIME sniff that promotes a file of one type to a more dangerous file type. For example, promoting a text file to an executable file is a dangerous promotion because any code in the supposed text file would be executed. MIME file-type spoofing is a potential threat to your organization. Ensuring that these files are consistently handled helps prevent malicious file downloads from infecting your network. This guide recommends you configure this policy as Enabled for all environments specified in this guide. Note: This setting works in conjunction with, but does not replace, the Consistent MIME Handling settings.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:16700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:168" version="1" class="compliance">
      <metadata>
        <title>DTBI600 - Internet Explorer Processes for MK protocol must be enforced (Explorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>The MK Protocol Security Restriction policy setting reduces attack surface area by blocking the seldom used MK protocol. Some older Web applications use the MK protocol to retrieve information from compressed files. Because the MK Protocol is not widely used, it should be blocked wherever it is not needed. Setting this policy to enabled, blocks the MK protocol for Windows Explorer and Internet Explorer, which causes resources that use the MK protocol to fail. Disabling this setting allows applications to use the MK protocol API. Because the MK protocol is not widely used, it should be blocked wherever it is not needed. This guide recommends you configure this setting to Enabled to block the MK protocol unless you specifically need it in your environment. Note: Because resources that use the MK protocol will fail when you deploy this setting, you should ensure that none of your applications use the MK protocol.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:16800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:169" version="1" class="compliance">
      <metadata>
        <title>DTBI605 - Internet Explorer Processes for MK protocol must be enforced (IExplore)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>The MK Protocol Security Restriction policy setting reduces attack surface area by blocking the seldom used MK protocol. Some older Web applications use the MK protocol to retrieve information from compressed files. Because the MK Protocol is not widely used, it should be blocked wherever it is not needed. Setting this policy to enabled, blocks the MK protocol for Windows Explorer and Internet Explorer, which causes resources that use the MK protocol to fail. Disabling this setting allows applications to use the MK protocol API. Because the MK protocol is not widely used, it should be blocked wherever it is not needed. This guide recommends you configure this setting to Enabled to block the MK protocol unless you specifically need it in your environment. Note: Because resources that use the MK protocol will fail when you deploy this setting, you should ensure that none of your applications use the MK protocol.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:16900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:170" version="1" class="compliance">
      <metadata>
        <title>DTBI610 - Internet Explorer Processes for Zone Elevation must be enforced (Reserved)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Internet Explorer places restrictions on each Web page it opens that are dependent upon the location of the Web page (such as Internet Zone, Intranet Zone, or Local Machine Zone). Web pages on a local computer have the fewest security restrictions and reside in the Local Machine Zone, which makes the Local Machine Security Zone a prime target for malicious attackers. If you enable this policy setting, any zone can be protected from zone elevation by Internet Explorer processes. This approach stops content running in one zone from gaining the elevated privileges of another zone. If you disable this policy setting, no zone receives such protection for Internet Explorer processes. Because of the severity and relative frequency of zone elevation attacks, this guide recommends that you configure this setting as Enabled in all environments.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:17000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:171" version="1" class="compliance">
      <metadata>
        <title>DTBI630 - File download processes - Reserved</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>In certain circumstances, Web sites can initiate file download prompts without interaction from users. This technique can allow Web sites to put unauthorized files on user's hard drives if they click the wrong button and accept the download. If you configure the Restrict File Download\Internet Explorer Processes policy setting to Enabled, file download prompts that are not user-initiated are blocked for Internet Explorer processes. If you configure this policy setting as Disabled, prompting will occur for file downloads that are not user-initiated for Internet Explorer processes. Note: This setting is configured as Enabled in all environments specified in this guide to help prevent attackers from placing arbitrary code on users' computers.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\ Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\ Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:17100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:172" version="1" class="compliance">
      <metadata>
        <title>DTBI635 - File download processes - Explorer</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>In certain circumstances, Web sites can initiate file download prompts without interaction from users. This technique can allow Web sites to put unauthorized files on user's hard drives if they click the wrong button and accept the download. If you configure the Restrict File Download\Internet Explorer Processes policy setting to Enabled, file download prompts that are not user-initiated are blocked for Internet Explorer processes. If you configure this policy setting as Disabled, prompting will occur for file downloads that are not user-initiated for Internet Explorer processes. Note: This setting is configured as Enabled in all environments specified in this guide to help prevent attackers from placing arbitrary code on users' computers.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:17200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:173" version="1" class="compliance">
      <metadata>
        <title>DTBI640 - File download processes - IExplore</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>In certain circumstances, Web sites can initiate file download prompts without interaction from users. This technique can allow Web sites to put unauthorized files on user's hard drives if they click the wrong button and accept the download. If you configure the Restrict File Download\Internet Explorer Processes policy setting to Enabled, file download prompts that are not user-initiated are blocked for Internet Explorer processes. If you configure this policy setting as Disabled, prompting will occur for file downloads that are not user-initiated for Internet Explorer processes. Note: This setting is configured as Enabled in all environments specified in this guide to help prevent attackers from placing arbitrary code on users' computers.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:17300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:174" version="1" class="compliance">
      <metadata>
        <title>DTBI645 - Internet Explorer Processes for restricting pop-up windows must be enforced (Reserved)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Internet Explorer allows scripts to programmatically open, resize, and reposition various types of windows. Often, disreputable Web sites will resize windows to either hide other windows or force you to interact with a window that contains malicious code. The Scripted Window Security Restrictions security feature restricts pop-up windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or hide other windows? title and status bars. If you enable the Scripted Window Security Restrictions\Internet Explorer Processes policy setting, pop-up windows and other restrictions apply for Windows Explorer and Internet Explorer processes. If you disable or do not configure this policy setting, scripts can continue to create pop-up windows and windows that hide other windows. Recommend configuring this setting to Enabled to help prevent malicious Web sites from controlling your Internet Explorer windows or fooling users into clicking on the wrong window.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:17400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:178" version="1" class="compliance">
      <metadata>
        <title>DTBI675 - Displaying URL's for update checking</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting allows checking for updates for Internet Explorer from the specified URL, included by default in Internet Explorer. If you enable this policy setting, users will not be able to change the URL to be displayed for checking updates to Internet Explorer and Internet Tools. You must specify the URL to be displayed for checking updates to Internet Explorer and Internet Tools. If you disable or do not configure this policy setting, users will be able to change the URL to be displayed for checking updates to Internet Explorer and Internet Tools.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools\Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools must be Enabled with a blank or empty selection box">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools\Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools must be Enabled with a blank or empty selection box" test_ref="oval:mil.disa.fso.ie:tst:17800" negate="false" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:180" version="1" class="compliance">
      <metadata>
        <title>DTBI592 - Internet Explorer Processes for MIME handling must be enforced (Explorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server. The Consistent MIME Handling\Internet Explorer Processes policy setting determines whether Internet Explorer requires that all file-type information provided by Web servers be consistent. For example, if the MIME type of a file is text/plain but the MIME data indicates that the file is really an executable file, Internet Explorer changes its extension to reflect this executable status. This capability helps ensure that executable code cannot masquerade as other types of data that may be trusted. If you enable this policy setting, Internet Explorer examines all received files and enforces consistent MIME data for them. If you disable or do not configure this policy setting, Internet Explorer does not require consistent MIME data for all received files and will use the MIME data provided by the file. MIME file-type spoofing is a potential threat to your organization. Ensuring that these files are consistent and properly labeled helps prevent malicious file downloads from infecting your network. This guide recommends you configure this policy as Enabled for all environments specified in this guide.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:18000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:181" version="1" class="compliance">
      <metadata>
        <title>DTBI592 - Internet Explorer Processes for MIME handling must be enforced (Explorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server. The Consistent MIME Handling\Internet Explorer Processes policy setting determines whether Internet Explorer requires that all file-type information provided by Web servers be consistent. For example, if the MIME type of a file is text/plain but the MIME data indicates that the file is really an executable file, Internet Explorer changes its extension to reflect this executable status. This capability helps ensure that executable code cannot masquerade as other types of data that may be trusted. If you enable this policy setting, Internet Explorer examines all received files and enforces consistent MIME data for them. If you disable or do not configure this policy setting, Internet Explorer does not require consistent MIME data for all received files and will use the MIME data provided by the file. MIME file-type spoofing is a potential threat to your organization. Ensuring that these files are consistent and properly labeled helps prevent malicious file downloads from infecting your network. This guide recommends you configure this policy as Enabled for all environments specified in this guide.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:18100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:182" version="1" class="compliance">
      <metadata>
        <title>DTBI599 - Internet Explorer Processes for MK protocol must be enforced (Reserved).</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>The MK Protocol Security Restriction policy setting reduces attack surface area by blocking the seldom used MK protocol. Some older Web applications use the MK protocol to retrieve information from compressed files. Because the MK Protocol is not widely used, it should be blocked wherever it is not needed. Setting this policy to enabled, blocks the MK protocol for Windows Explorer and Internet Explorer, which causes resources that use the MK protocol to fail. Disabling this setting allows applications to use the MK protocol API. Because the MK protocol is not widely used, it should be blocked wherever it is not needed. This guide recommends you configure this setting to Enabled to block the MK protocol unless you specifically need it in your environment. Note: Because resources that use the MK protocol will fail when you deploy this setting, you should ensure that none of your applications use the MK protocol.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:18200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:183" version="1" class="compliance">
      <metadata>
        <title>DTBI612 - Internet Explorer Processes for Zone Elevation must be enforced (Explorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Internet Explorer places restrictions on each Web page it opens that are dependent upon the location of the Web page (such as Internet Zone, Intranet Zone, or Local Machine Zone). Web pages on a local computer have the fewest security restrictions and reside in the Local Machine Zone, which makes the Local Machine Security Zone a prime target for malicious attackers. If you enable this policy setting, any zone can be protected from zone elevation by Internet Explorer processes. This approach stops content running in one zone from gaining the elevated privileges of another zone. If you disable this policy setting, no zone receives such protection for Internet Explorer processes. Because of the severity and relative frequency of zone elevation attacks, this guide recommends that you configure this setting as Enabled in all environments.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:18300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:184" version="1" class="compliance">
      <metadata>
        <title>DTBI614 - Internet Explorer Processes for Zone Elevation must be enforced (IExplorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Internet Explorer places restrictions on each Web page it opens that are dependent upon the location of the Web page (such as Internet Zone, Intranet Zone, or Local Machine Zone). Web pages on a local computer have the fewest security restrictions and reside in the Local Machine Zone, which makes the Local Machine Security Zone a prime target for malicious attackers. If you enable this policy setting, any zone can be protected from zone elevation by Internet Explorer processes. This approach stops content running in one zone from gaining the elevated privileges of another zone. If you disable this policy setting, no zone receives such protection for Internet Explorer processes. Because of the severity and relative frequency of zone elevation attacks, this guide recommends that you configure this setting as Enabled in all environments.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:18400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:185" version="1" class="compliance">
      <metadata>
        <title>DTBI647 - Internet Explorer Processes for restricting pop-up windows must be enforced (Explorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Internet Explorer allows scripts to programmatically open, resize, and reposition various types of windows. Often, disreputable Web sites will resize windows to either hide other windows or force you to interact with a window that contains malicious code. The Scripted Window Security Restrictions security feature restricts pop-up windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or hide other windows? title and status bars. If you enable the Scripted Window Security Restrictions\Internet Explorer Processes policy setting, pop-up windows and other restrictions apply for Windows Explorer and Internet Explorer processes. If you disable or do not configure this policy setting, scripts can continue to create pop-up windows and windows that hide other windows. This guide recommends you configure this setting to Enabled to help prevent malicious Web sites from controlling your Internet Explorer windows or fooling users into clicking on the wrong window.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:18500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:186" version="1" class="compliance">
      <metadata>
        <title>DTBI649 - Internet Explorer Processes for restricting pop-up windows must be enforced (IExplorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Internet Explorer allows scripts to programmatically open, resize, and reposition various types of windows. Often, disreputable Web sites will resize windows to either hide other windows or force you to interact with a window that contains malicious code. The Scripted Window Security Restrictions security feature restricts pop-up windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or hide other windows? title and status bars. If you enable the Scripted Window Security Restrictions\Internet Explorer Processes policy setting, pop-up windows and other restrictions apply for Windows Explorer and Internet Explorer processes. If you disable or do not configure this policy setting, scripts can continue to create pop-up windows and windows that hide other windows. This guide recommends you configure this setting to Enabled to help prevent malicious Web sites from controlling your Internet Explorer windows or fooling users into clicking on the wrong window.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:18600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:191" version="1" class="compliance">
      <metadata>
        <title>DTBI596 - Internet Explorer Processes for MIME sniffing must be enforced (Explorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>MIME sniffing is the process of examining the content of a MIME file to determine its context ? whether it is a data file, an executable file, or some other type of file. This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. When set to Enabled, MIME sniffing will never promote a file of one type to a more dangerous file type. Disabling MIME sniffing configures Internet Explorer processes to allow a MIME sniff that promotes a file of one type to a more dangerous file type. For example, promoting a text file to an executable file is a dangerous promotion because any code in the supposed text file would be executed. MIME file-type spoofing is a potential threat to your organization. Ensuring that these files are consistently handled helps prevent malicious file downloads from infecting your network. This guide recommends you configure this policy as Enabled for all environments specified in this guide. Note: This setting works in conjunction with, but does not replace, the Consistent MIME handling settings.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled" test_ref="oval:mil.disa.fso.ie:tst:19100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:192" version="1" class="compliance">
      <metadata>
        <title>DTBI597 - Internet Explorer Processes for MIME sniffing must be enforced (Explorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>MIME sniffing is the process of examining the content of a MIME file to determine its context ? whether it is a data file, an executable file, or some other type of file. This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. When set to Enabled, MIME sniffing will never promote a file of one type to a more dangerous file type. Disabling MIME sniffing configures Internet Explorer processes to allow a MIME sniff that promotes a file of one type to a more dangerous file type. For example, promoting a text file to an executable file is a dangerous promotion because any code in the supposed text file would be executed. MIME file-type spoofing is a potential threat to your organization. Ensuring that these files are consistently handled helps prevent malicious file downloads from infecting your network. This guide recommends you configure this policy as Enabled for all environments specified in this guide. Note: This setting works in conjunction with, but does not replace, the Consistent MIME handling settings.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled" test_ref="oval:mil.disa.fso.ie:tst:19200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:194" version="1" class="compliance">
      <metadata>
        <title>DTBI300 - Configuring History setting must be set to 40 days</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This setting specifies the number of days that Internet Explorer keeps track of the pages viewed in the History List. The delete Browsing History option can be accessed using Tools, Internet Options, General tab, and then click Settings under Browsing History. If you enable this policy setting, a user cannot set the number of days that Internet Explorer keeps track of the pages viewed in the History List. You must specify the number of days that Internet Explorer keeps track of the pages viewed in the History List. Users will not be able to delete browsing history. If you disable or do not configure this policy setting, a user can set the number of days that Internet Explorer tracks views of pages in the History List. Users can delete browsing history.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Configuring History setting must be set to 40 days">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History\Disable Configuring History must be Enabled" test_ref="oval:mil.disa.fso.ie:tst:19400" negate="false" />
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History\40 entered in Days to keep pages in History" test_ref="oval:mil.disa.fso.ie:tst:19401" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:204" version="1" class="compliance">
      <metadata>
        <title>DTBI840 - Cross-Site Scripting Filter - Internet</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>The Cross-Site Scripting (XSS) Filter is designed to prevent users from becoming victims of unintentional information disclosure. This setting controls if the Cross-Site Scripting (XSS) Filter detects and prevents cross-site script injection into Web sites in this zone. If you enable this policy setting, the XSS Filter will be enabled for sites in this zone, and the XSS Filter will attempt to block cross-site script injections. If you disable this policy setting, the XSS Filter will be disabled for sites in this zone, and Internet Explorer will permit cross-site script injections.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn on Cross-Site Scripting (XSS) Filter must be Enabled and Enable selected">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn on Cross-Site Scripting (XSS) Filter must be Enabled and Enable selected" test_ref="oval:mil.disa.fso.ie:tst:20400" negate="false" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:210" version="1" class="compliance">
      <metadata>
        <title>DTBI900 - ActiveX Install - Reserved</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Users often choose to install software such as ActiveX controls that are not permitted by their organization's security policy. Such software can pose significant security and privacy risks to networks. This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompts for ActiveX control installations will be blocked for Internet Explorer processes. If you disable this policy setting, prompts for ActiveX control installations will not be blocked and these prompts will be displayed to users. If you do not configure this policy setting, the user?s preference will be used to determine whether to block ActiveX control installations for Internet Explorer processes.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled" test_ref="oval:mil.disa.fso.ie:tst:21000" negate="false" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:211" version="1" class="compliance">
      <metadata>
        <title>DTBI910 - Status bar updates via script must be disallowed (Internet zone)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting allows you to manage whether script is allowed to update the status bar within the zone. A script running in the zone could cause false information to be displayed on the status bar, which could confuse the user and cause him to perform an undesirable action. If you enable this policy setting, script is allowed to update the status bar. If you disable this policy setting, script is not allowed to update the status bar. If you do not configure this policy setting, status bar updates via scripts will be disabled.</description>
      </metadata>
      <criteria operator="AND" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone Allow status bar updates via script must be Enabled and Disable selected" negate="false">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone Allow status bar updates via script must be Enabled and Disable selected" test_ref="oval:mil.disa.fso.ie:tst:21100" negate="false" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:215" version="1" class="compliance">
      <metadata>
        <title>DTBI950 - Status bar updates via script must be disallowed (Restricted Site zone)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>A script running in the zone could cause false information to be displayed on the status bar, which could confuse the user and cause an undesirable action. This policy setting allows you to manage whether script is allowed to update the status bar within the zone.</description>
      </metadata>
      <criteria operator="AND" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone Allow status bar updates via script must be Enabled and Disabled selected" negate="false">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone Allow status bar updates via script must be Enabled and Disabled selected" test_ref="oval:mil.disa.fso.ie:tst:21500" negate="false" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:216" version="1" class="compliance">
      <metadata>
        <title>DTBI1010 - Internet Explorer Processes Restrict ActiveX Install must be enforced (Explorer)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Users often choose to install software such as ActiveX controls that are not permitted by their organization's security policy. Such software can pose significant security and privacy risks to networks. This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompts for ActiveX control installations will be blocked for Internet Explorer processes. If you disable this policy setting, prompts for ActiveX control installations will not be blocked and these prompts will be displayed to users. If you do not configure this policy setting, the user?s preference will be used to determine whether to block ActiveX control installations for Internet Explorer processes.</description>
      </metadata>
      <criteria operator="AND" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled" negate="false">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled" test_ref="oval:mil.disa.fso.ie:tst:21600" negate="false" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:217" version="1" class="compliance">
      <metadata>
        <title>DTBI1020 - Internet Explorer Processes Restrict ActiveX Install must be enforced (IExplore)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>Users often choose to install software such as ActiveX controls that are not permitted by their organization's security policy. Such software can pose significant security and privacy risks to networks. This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompts for ActiveX control installations will be blocked for Internet Explorer processes. If you disable this policy setting, prompts for ActiveX control installations will not be blocked and these prompts will be displayed to users. If you do not configure this policy setting, the user?s preference will be used to determine whether to block ActiveX control installations for Internet Explorer processes.</description>
      </metadata>
      <criteria operator="AND" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled" negate="false">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled" test_ref="oval:mil.disa.fso.ie:tst:21700" negate="false" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:218" version="1" class="compliance">
      <metadata>
        <title>DTBI745 - Add-On Performance Notifications</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>The policy setting prevents Internet Explorer from displaying a notification when the average time it takes to load all the user's enabled add-ons exceeds the threshold. The notification informs the user that add-ons are slowing their browsing and displays a button which opens the Disable Add-ons dialog box. The Disable Add-ons dialog box displays the load time for each group of add-ons enabled in the browser. It allows the user to disable add-ons and configure the threshold. If you enable this policy setting, users will not be notified when the average time it takes to load all the user's enabled add-ons exceeds the threshold.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable add-on performance notifications">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable add-on performance notifications" test_ref="oval:mil.disa.fso.ie:tst:21800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:219" version="1" class="compliance">
      <metadata>
        <title>DTBI755 - Browser Geolocation Functionality</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This setting has a small impact on user privacy because users may unknowingly allow their browser to share location data with web sites that they visit. The value of enabling this setting is diminished due to the fact that malicious web sites can learn a great deal about the location of a user merely by analyzing their IP address. If you enable this policy setting, browser geolocation support will be turned off. If you disable this policy setting, browser geolocation will be turned on. If you do not configure this setting, browser geolocation support can be turned on or off in Internet Options on the Privacy Tab.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable Browser Geolocation">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable Browser Geolocation" test_ref="oval:mil.disa.fso.ie:tst:21900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:220" version="1" class="compliance">
      <metadata>
        <title>DTBI765 - Suggested Sites Functionality</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting controls the Suggested Sites feature, which recommends sites based on the user's browsing activity. Suggested Sites reports a user's browsing history to Microsoft to suggest sites the user might want to visit. If you enable this policy setting, the user will not be prompted to enable the Suggested Sites. The user's browsing history will be sent to produce suggestions. If you disable this policy setting, the entry points and functionality associated with this feature will be diabled.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn on Suggested Sites">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn on Suggested Sites" test_ref="oval:mil.disa.fso.ie:tst:22000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:221" version="1" class="compliance">
      <metadata>
        <title>DTBI775 - Internet Explorer Update Checking</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks occur approximately every 30 days, and users are prompted to install new versions as they become available. If you enable this policy setting, Internet Explorer checks the Internet for a new version approximately every 30 days and prompts the user to download new versions when they are available. Newer versions might not comply to the Internet Explorer version requirements of your organization.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page\Automatically check for Internet Explorer updates">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page\Automatically check for Internet Explorer updates" test_ref="oval:mil.disa.fso.ie:tst:22100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:222" version="1" class="compliance">
      <metadata>
        <title>DTBI805 - Opt-In Prompts for ActiveX</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting allows you to turn off the ActiveX opt-in prompt. The ActiveX opt-in prevents Web sites from loading any COM object without prior approval. If a page attempts to load a COM object that Internet Explorer has not used before, an Information bar will appear asking the user for approval. If you enable this policy setting, the ActiveX opt-in prompt will not appear. Internet Explorer does not ask the user for permission to load a control, and will load the ActiveX if it passes all other internal security checks. If you disable or do not configure this policy setting the ActiveX opt-in prompt will appear.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn off ActiveX opt-in prompt">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn off ActiveX opt-in prompt" test_ref="oval:mil.disa.fso.ie:tst:22200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:223" version="1" class="compliance">
      <metadata>
        <title>DTBI815 - Notification Bar Process - Reserved</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting allows you to manage whether the Notification bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Notification bar is displayed for Internet Explorer processes. If you enable this policy setting, the Notification bar will be displayed for Internet Explorer Processes. If you disable this policy setting, the Notification bar will not be displayed for Internet Explorer processes. If you do not configure this policy setting, the Notification bar will be displayed for Internet Explorer Processes.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:22300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:224" version="1" class="compliance">
      <metadata>
        <title>DTBI825 - Notification Bar Processes - Explorer</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting allows you to manage whether the Notification bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Notification bar is displayed for Internet Explorer processes. If you enable this policy setting, the Notification bar will be displayed for Internet Explorer Processes. If you disable this policy setting, the Notification bar will not be displayed for Internet Explorer processes. If you do not configure this policy setting, the Notification bar will be displayed for Internet Explorer Processes.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:22400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:225" version="1" class="compliance">
      <metadata>
        <title>DTBI835 - Notification Bar Processes - IExplorer</title>
        <affected family="windows">
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <description>This policy setting allows you to manage whether the Notification bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Notification bar is displayed for Internet Explorer processes. If you enable this policy setting, the Notification bar will be displayed for Internet Explorer Processes. If you disable this policy setting, the Notification bar will not be displayed for Internet Explorer processes. If you do not configure this policy setting, the Notification bar will be displayed for Internet Explorer Processes.</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes">
        <criterion comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes" test_ref="oval:mil.disa.fso.ie:tst:22500" negate="false" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:133" version="2" class="compliance">
      <metadata>
        <title>DTBI305 - Disable Changing Automatic Configuration Settings</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Disable Changing Automatic Configuration Settings" test_ref="oval:mil.disa.fso.ie:tst:13300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:96" version="2" class="compliance">
      <metadata>
        <title>DTBI367 - Computer Configuration\Network\Internet Explorer\Make Proxy Settings Per-Machine (Rather Then Per-User)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>The Make proxy settings per – machine (rather than per-user) setting ensures proxy settings for all users of the same computer are the same.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Make Proxy Settings Per-Machine (Rather Then Per-User)" test_ref="oval:mil.disa.fso.ie:tst:9600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:193" version="2" class="compliance">
      <metadata>
        <title>DTBI010 - Computer Configuration\Network\Internet Explorer\Prevent performance of First Run Customize settings</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when they launch Internet Explorer for the first time after installation of Internet Explorer.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Prevent performance of First Run Customize settings" test_ref="oval:mil.disa.fso.ie:tst:19300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:95" version="2" class="compliance">
      <metadata>
        <title>DTBI318 - Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Add/Delete Sites</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>The Security Zones: Do not allow users to add/delete sites setting prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security level.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Add/Delete Sites" test_ref="oval:mil.disa.fso.ie:tst:9500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:94" version="2" class="compliance">
      <metadata>
        <title>DTBI319 - Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Change Policies</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>The Security Zones: Do not allow users to change policies setting prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Change Policies" test_ref="oval:mil.disa.fso.ie:tst:9400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:227" version="2" class="compliance">
      <metadata>
        <title>DTBI320 - Computer Configuration\Network\Internet Explorer\Security Zones: Use Only Machine Settings</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security level. If you enable this policy, changes that the user makes to a security zone will apply to all users of that computer.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Security Zones: Use Only Machine Settings" test_ref="oval:mil.disa.fso.ie:tst:22700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:189" version="2" class="compliance">
      <metadata>
        <title>DTBI715 - Computer Configuration\Network\Internet Explorer\Turn Off Crash Detection</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>The Turn off Crash Detection policy setting allows you to manage the crash detection feature of add-on management in Internet Explorer. If you enable this policy setting, a crash in Internet Explorer will be similar to one on a computer running Windows XP.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Turn Off Crash Detection" test_ref="oval:mil.disa.fso.ie:tst:18900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:135" version="2" class="compliance">
      <metadata>
        <title>DTBI325 - Computer Configuration\Network\Internet Explorer\Turn off the Security Settings Check feature</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when the settings put Internet Explorer at risk.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Turn off the Security Settings Check feature" test_ref="oval:mil.disa.fso.ie:tst:13500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:136" version="2" class="compliance">
      <metadata>
        <title>DTBI340 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Active Content from CD's to Run on User Machine</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run. If you enable this policy setting, active content on a CD will run without a prompt.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Active Content from CD's to Run on User Machine" test_ref="oval:mil.disa.fso.ie:tst:13600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:137" version="2" class="compliance">
      <metadata>
        <title>DTBI350 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Software to Run or Install Even if the Signature is Invalid</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>Microsoft ActiveX controls and file downloads often have digital signatures attached that vouch for both the file's integrity and the identity of the signer (creator) of the software. Such signatures help ensure that unmodified.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Software to Run or Install Even if the Signature is Invalid" test_ref="oval:mil.disa.fso.ie:tst:13700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:138" version="2" class="compliance">
      <metadata>
        <title>DTBI355 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Third-Party Browser Extensions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such as toolbars.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Third-Party Browser Extensions" test_ref="oval:mil.disa.fso.ie:tst:13800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:139" version="2" class="compliance">
      <metadata>
        <title>DTBI365 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Server Certificate Revocation</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Server Certificate Revocation" test_ref="oval:mil.disa.fso.ie:tst:13900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:140" version="2" class="compliance">
      <metadata>
        <title>DTBI370 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Signature on Downloaded Programs</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it hasn't been modified or tampered with) on user computers before downloading executable programs.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Signature on Downloaded Programs" test_ref="oval:mil.disa.fso.ie:tst:14000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:141" version="2" class="compliance">
      <metadata>
        <title>DTBI375 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Sites: Include all network paths (UNCs)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. If you enable this policy setting, all network paths are mapped into the Intranet Zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Sites: Include all network paths (UNCs)" test_ref="oval:mil.disa.fso.ie:tst:14100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:102" version="2" class="compliance">
      <metadata>
        <title>DTBI032 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Access data sources across domains</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Access data sources across domains" test_ref="oval:mil.disa.fso.ie:tst:10200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:109" version="2" class="compliance">
      <metadata>
        <title>DTBI044 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow cut, copy, or paste operations from the clipboard via script</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region. If you enable this policy setting, a script can perform a clipboard operation.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow cut, copy, or paste operations from the clipboard via script" test_ref="oval:mil.disa.fso.ie:tst:10900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:103" version="2" class="compliance">
      <metadata>
        <title>DTBI036 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow drag and drop or copy and paste files</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. If you enable this policy setting, users can drag files or copy and paste files from this zone automatically.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow drag and drop or copy and paste files" test_ref="oval:mil.disa.fso.ie:tst:10300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:104" version="3" class="compliance" deprecated="true">
      <metadata>
        <title>DTBI037 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow installation of desktop items</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this option are: If you enable this policy setting, users can install desktop items from this zone automatically.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow installation of desktop items" test_ref="oval:mil.disa.fso.ie:tst:10400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:142" version="2" class="compliance">
      <metadata>
        <title>DTBI385 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow script-initiated windows without size or position constraints</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars. If you enable this policy setting, Windows Restrictions security will not apply in this zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow script-initiated windows without size or position constraints" test_ref="oval:mil.disa.fso.ie:tst:14200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:144" version="2" class="compliance">
      <metadata>
        <title>DTBI395 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow Scriptlets</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether scriptlets can be allowed. If you enable this policy setting, users will be able to run scriptlets. If you disable this policy setting, users will not be able to run scriptlets.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow Scriptlets" test_ref="oval:mil.disa.fso.ie:tst:14400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:145" version="2" class="compliance">
      <metadata>
        <title>DTBI415 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Automatic prompting for file downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Automatic prompting for file downloads" test_ref="oval:mil.disa.fso.ie:tst:14500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:97" version="2" class="compliance">
      <metadata>
        <title>DTBI022 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download signed ActiveX controls</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone. If you enable this policy, users can download signed controls without user intervention.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download signed ActiveX controls" test_ref="oval:mil.disa.fso.ie:tst:9700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:98" version="2" class="compliance">
      <metadata>
        <title>DTBI023 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download unsigned ActiveX controls</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download unsigned ActiveX controls" test_ref="oval:mil.disa.fso.ie:tst:9800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:99" version="2" class="compliance">
      <metadata>
        <title>DTBI024 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Initialize and script ActiveX controls not marked as safe</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Initialize and script ActiveX controls not marked as safe" test_ref="oval:mil.disa.fso.ie:tst:9900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:105" version="2" class="compliance">
      <metadata>
        <title>DTBI038 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching applications and files in an IFRAME</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching applications and files in an IFRAME" test_ref="oval:mil.disa.fso.ie:tst:10500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:110" version="2" class="compliance">
      <metadata>
        <title>DTBI046 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Logon options</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from the following logon options.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Logon options" test_ref="oval:mil.disa.fso.ie:tst:11000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:152" version="2" class="compliance">
      <metadata>
        <title>DTBI455 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Loose or un-compiled XAML files</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>These are eXtensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that leverage the Windows Presentation Foundation.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Loose or un-compiled XAML files" test_ref="oval:mil.disa.fso.ie:tst:15200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:107" version="3" class="compliance" deprecated="true">
      <metadata>
        <title>DTB1040 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel permissions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the following options from the drop-down box.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel permissions" test_ref="oval:mil.disa.fso.ie:tst:10700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:156" version="2" class="compliance">
      <metadata>
        <title>DTBI475 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First- Run Opt-In</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First- Run Opt-In</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First- Run Opt-In" test_ref="oval:mil.disa.fso.ie:tst:15600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:158" version="2" class="compliance">
      <metadata>
        <title>DTBI485 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn On Protected Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>The 'Turn on Protected Mode' setting should be configured correctly for the Internet Zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn On Protected Mode" test_ref="oval:mil.disa.fso.ie:tst:15800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:160" version="2" class="compliance">
      <metadata>
        <title>DTBI495 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Use Pop-up Blocker</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. If you enable this policy setting, most unwanted pop-up windows are prevented from appearing.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Use Pop-up Blocker" test_ref="oval:mil.disa.fso.ie:tst:16000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:108" version="2" class="compliance">
      <metadata>
        <title>DTBI042 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Userdata persistence</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Userdata persistence" test_ref="oval:mil.disa.fso.ie:tst:10800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:162" version="2" class="compliance">
      <metadata>
        <title>DTBI515 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Web sites in less privileged Web content zones can navigate into this zone</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Web sites in less privileged Web content zones can navigate into this zone" test_ref="oval:mil.disa.fso.ie:tst:16200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:146" version="2" class="compliance">
      <metadata>
        <title>DTBI425- -Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Java permissions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:14600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:150" version="2" class="compliance">
      <metadata>
        <title>DTBI445 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Internet Zone\Java permissions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Internet Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:15000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:148" version="2" class="compliance">
      <metadata>
        <title>DTBI435 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Intranet Zone\Java permissions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Intranet Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:14800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:147" version="2" class="compliance">
      <metadata>
        <title>DTBI430 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Local Machine Zone\Java permissions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Local Machine Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:14700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:151" version="2" class="compliance">
      <metadata>
        <title>DTBI450 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down restricted Sites Zone\Java permissions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down restricted Sites Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:15100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:149" version="2" class="compliance">
      <metadata>
        <title>DTBI440 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Trusted Sites Zone\Java permissions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Trusted Sites Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:14900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:120" version="2" class="compliance">
      <metadata>
        <title>DTBI122 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Access data sources across domains</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Access data sources across domains" test_ref="oval:mil.disa.fso.ie:tst:12000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:128" version="2" class="compliance">
      <metadata>
        <title>DTBI133 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow active scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether script code on pages in the zone is run. If you enable this policy setting, script code on pages in the zone can run automatically.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow active scripting" test_ref="oval:mil.disa.fso.ie:tst:12800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:164" version="2" class="compliance">
      <metadata>
        <title>DTBI575 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow binary and script behaviors</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which they were attached. If you enable this policy setting, binary and script behaviors are available.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow binary and script behaviors" test_ref="oval:mil.disa.fso.ie:tst:16400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:129" version="2" class="compliance">
      <metadata>
        <title>DTBI134 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow cut, copy, or paste operations from the clipboard via script</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region. If you enable this policy setting, a script can perform a clipboard operation.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow cut, copy, or paste operations from the clipboard via script" test_ref="oval:mil.disa.fso.ie:tst:12900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:122" version="2" class="compliance">
      <metadata>
        <title>DTBI126 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow drag and drop or copy and paste files</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. If you enable this policy setting, users can drag files or copy and paste files from this zone automatically.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow drag and drop or copy and paste files" test_ref="oval:mil.disa.fso.ie:tst:12200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:119" version="2" class="compliance">
      <metadata>
        <title>DTBI120 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow font downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether pages of the zone may download HTML fonts. If you enable this policy setting, HTML fonts can be downloaded automatically.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow font downloads" test_ref="oval:mil.disa.fso.ie:tst:11900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:123" version="2" class="compliance">
      <metadata>
        <title>DTBI127 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow installation of desktop items</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this option are: If you enable this policy setting, users can install desktop items from this zone automatically.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow installation of desktop items" test_ref="oval:mil.disa.fso.ie:tst:12300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:121" version="2" class="compliance">
      <metadata>
        <title>DTBI123 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow META REFRESH</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web page uses the Meta Refresh setting (tag) to redirect browsers to another Web page.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow META REFRESH" test_ref="oval:mil.disa.fso.ie:tst:12100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:143" version="2" class="compliance">
      <metadata>
        <title>DTBI390 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow script-initiated windows without size or position constraints</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars. If you enable this policy setting, Windows Restrictions security will not apply in this zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow script-initiated windows without size or position constraints" test_ref="oval:mil.disa.fso.ie:tst:14300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:113" version="2" class="compliance">
      <metadata>
        <title>DTBI112 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download signed ActiveX controls</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone. If you enable this policy, users can download signed controls without user intervention.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download signed ActiveX controls" test_ref="oval:mil.disa.fso.ie:tst:11300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:114" version="2" class="compliance">
      <metadata>
        <title>DTBI113 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download unsigned ActiveX controls</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download unsigned ActiveX controls" test_ref="oval:mil.disa.fso.ie:tst:11400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:115" version="2" class="compliance">
      <metadata>
        <title>DTBI114 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Initialize and script ActiveX controls not marked as safe</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Initialize and script ActiveX controls not marked as safe" test_ref="oval:mil.disa.fso.ie:tst:11500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:131" version="2" class="compliance">
      <metadata>
        <title>DTBI121 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Java permissions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Java permissions" test_ref="oval:mil.disa.fso.ie:tst:13100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:124" version="2" class="compliance">
      <metadata>
        <title>DTBI128 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching applications and files in an IFRAME</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching applications and files in an IFRAME" test_ref="oval:mil.disa.fso.ie:tst:12400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:130" version="2" class="compliance">
      <metadata>
        <title>DTBI136 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Logon options</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from the following logon options.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Logon options" test_ref="oval:mil.disa.fso.ie:tst:13000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:153" version="2" class="compliance">
      <metadata>
        <title>DTBI460 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Loose XAML files</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>These are eXtensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that leverage the Windows Presentation Foundation.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Loose XAML files" test_ref="oval:mil.disa.fso.ie:tst:15300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:125" version="2" class="compliance">
      <metadata>
        <title>DTBI129 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Navigate windows and frames across different domains</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage the opening of sub-frames and access of applications across different domains. If you enable this policy setting, users can open sub-frames from other domains and access applications from other domains.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Navigate windows and frames across different domains" test_ref="oval:mil.disa.fso.ie:tst:12500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:175" version="2" class="compliance">
      <metadata>
        <title>DTBI650 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components not signed with Authenticode</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components not signed with Authenticode" test_ref="oval:mil.disa.fso.ie:tst:17500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:176" version="2" class="compliance">
      <metadata>
        <title>DTBI655 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components signed with Authenticode</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components signed with Authenticode" test_ref="oval:mil.disa.fso.ie:tst:17600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:116" version="2" class="compliance">
      <metadata>
        <title>DTBI115 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run ActiveX controls and plugins</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone. If you enable this policy setting, controls and plug-ins can run without user intervention.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run ActiveX controls and plugins" test_ref="oval:mil.disa.fso.ie:tst:11600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:117" version="2" class="compliance">
      <metadata>
        <title>DTBI116 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Script ActiveX controls marked safe for scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script. If you enable this policy setting, script interaction can occur automatically without user intervention.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Script ActiveX controls marked safe for scripting" test_ref="oval:mil.disa.fso.ie:tst:11700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:177" version="2" class="compliance">
      <metadata>
        <title>DTBI670 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Scripting of Java applets</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether applets are exposed to scripts within the zone. If you enable this policy setting, scripts can access applets automatically without user intervention.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Scripting of Java applets" test_ref="oval:mil.disa.fso.ie:tst:17700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:126" version="3" class="compliance" deprecated="true">
      <metadata>
        <title>DTBI130 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Software channel permissions</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the following options from the drop-down box.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Software channel permissions" test_ref="oval:mil.disa.fso.ie:tst:12600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:157" version="2" class="compliance">
      <metadata>
        <title>DTBI480 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First- Run Opt-In</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First- Run Opt-In</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First- Run Opt-In" test_ref="oval:mil.disa.fso.ie:tst:15700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:159" version="2" class="compliance">
      <metadata>
        <title>DTBI490 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn On Protected Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>The 'Turn on Protected Mode' setting should be configured correctly for the Restricted Sites Zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn On Protected Mode" test_ref="oval:mil.disa.fso.ie:tst:15900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:161" version="2" class="compliance">
      <metadata>
        <title>DTBI500 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Use Pop-up Blocker</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. If you enable this policy setting, most unwanted pop-up windows are prevented from appearing.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Use Pop-up Blocker" test_ref="oval:mil.disa.fso.ie:tst:16100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:127" version="2" class="compliance">
      <metadata>
        <title>DTBI132 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Userdata persistence</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Userdata persistence" test_ref="oval:mil.disa.fso.ie:tst:12700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:163" version="2" class="compliance">
      <metadata>
        <title>DTBI520 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Web sites in less privileged Web content zones can navigate into this zone</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Web sites in less privileged Web content zones can navigate into this zone" test_ref="oval:mil.disa.fso.ie:tst:16300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:179" version="2" class="compliance">
      <metadata>
        <title>DTBI680 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off Configuring the Update Check Interval (In Days)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This setting specifies the update check interval. The default value is 30 days. If you enable this policy setting, the user will not be able to configure the update check interval. You have to specify the update check interval.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off Configuring the Update Check Interval (In Days)" test_ref="oval:mil.disa.fso.ie:tst:17900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:195" version="3" class="compliance">
      <metadata>
        <title>DTBI740 - Turn Off Managing SmartScreen Filter</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows the user to enable the SmartScreen Filter, which will warn if the Web site being visited is known for fraudulent attempts to gather personal information through 'phishing,' or is known to host malware.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Include updated Web site lists from Microsoft" test_ref="oval:mil.disa.fso.ie:tst:19500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:196" version="2" class="compliance">
      <metadata>
        <title>DTBI750 - Include updated Web site lists from Microsoft</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy controls the Web site compatibility lists provided by Microsoft.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Compatibility View\Include updated Web site lists from Microsoft" test_ref="oval:mil.disa.fso.ie:tst:19600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:197" version="2" class="compliance">
      <metadata>
        <title>DTBI760 - Configure Delete Browsing History on exit</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>Delete Browsing History on exit automatically deletes specified items when the last browser windows closes.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Configure Delete Browsing History on exit" test_ref="oval:mil.disa.fso.ie:tst:19700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:198" version="2" class="compliance">
      <metadata>
        <title>DTBI770 - Prevent Deleting Web sites that the User has Visited</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting prevents users from deleting the history of webs sites the user has visited.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History" test_ref="oval:mil.disa.fso.ie:tst:19800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:199" version="2" class="compliance">
      <metadata>
        <title>DTBI780 - Turn off InPrivate Browsing</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to disable the InPrivate Browsing feature.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\InPrivate\Turn off InPrivate Browsing" test_ref="oval:mil.disa.fso.ie:tst:19900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:212" version="2" class="compliance">
      <metadata>
        <title>DTBI920 - Run .NET Framework-reliant components not signed with Authenticode</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components not signed with Authenticode" test_ref="oval:mil.disa.fso.ie:tst:21200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:213" version="2" class="compliance">
      <metadata>
        <title>DTBI930 - Run .NET Framework-reliant components signed with Authenticode</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components signed with Authenticode" test_ref="oval:mil.disa.fso.ie:tst:21300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:214" version="2" class="compliance">
      <metadata>
        <title>DTBI940 - Allow Scriptlets</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting allows you to manage whether scriptlets can be allowed. If you enable this policy setting, users will be able to run scriptlets. If you disable this policy setting, users will not be able to run scriptlets.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow Scriptlets" test_ref="oval:mil.disa.fso.ie:tst:21400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:200" version="2" class="compliance">
      <metadata>
        <title>DTBI800 - Allow scripting of Internet Explorer web browser control</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether a page may control embedded WebBrowser Controls via script</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow scripting of Internet Explorer web browser control" test_ref="oval:mil.disa.fso.ie:tst:20000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:201" version="2" class="compliance">
      <metadata>
        <title>DTBI810 - Include local directory path when uploading files to a server</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether or not the local path information will be sent when uploading a file via a HTML form.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Include local directory path when uploading files to a server" test_ref="oval:mil.disa.fso.ie:tst:20100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:202" version="2" class="compliance">
      <metadata>
        <title>DTBI820 - Launching programs and unsafe files</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether or not the 'Open File - Security Warning' prompt is shown when launching executables or other unsafe files.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching programs and unsafe files" test_ref="oval:mil.disa.fso.ie:tst:20200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:203" version="2" class="compliance">
      <metadata>
        <title>DTBI830 - Only allow approved domains to use ActiveX controls without prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on Web sites other than the Web site that installed the ActiveX control.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Only allow approved domains to use ActiveX controls without prompt" test_ref="oval:mil.disa.fso.ie:tst:20300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:205" version="2" class="compliance">
      <metadata>
        <title>DTBI850 - Allow scripting of Internet Explorer web browser control</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether a page may control embedded WebBrowser Controls via script</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow scripting of Internet Explorer web browser control" test_ref="oval:mil.disa.fso.ie:tst:20500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:206" version="2" class="compliance">
      <metadata>
        <title>DTBI860 - Include local directory path when uploading files to a server</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether or not the local path information will be sent when uploading a file via a HTML form.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Include local directory path when uploading files to a server" test_ref="oval:mil.disa.fso.ie:tst:20600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:207" version="2" class="compliance">
      <metadata>
        <title>DTBI870 - Launching programs and unsafe files</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether or not the 'Open File - Security Warning' prompt is shown when launching executables or other unsafe files.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching programs and unsafe files" test_ref="oval:mil.disa.fso.ie:tst:20700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:208" version="2" class="compliance">
      <metadata>
        <title>DTBI880 - Only allow approved domains to use ActiveX controls without prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on Web sites other than the Web site that installed the ActiveX control.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Only allow approved domains to use ActiveX controls without prompt" test_ref="oval:mil.disa.fso.ie:tst:20800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:209" version="2" class="compliance">
      <metadata>
        <title>DTBI890 - Turn on Cross-Site Scripting (XSS) Filter</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <description>This policy setting controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injection into Web sites in this zone.</description>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:mil.disa.fso.ie:def:226" />
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn on Cross-Site Scripting (XSS) Filter" test_ref="oval:mil.disa.fso.ie:tst:20900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:226" version="2" class="inventory">
      <metadata>
        <title>Microsoft Internet Explorer 9 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows 7</platform>
        </affected>
        <description>A version of Microsoft Internet Explorer 9 is installed.</description>
      </metadata>
      <criteria>
        <criterion comment="Internet Explorer 9 is installed" test_ref="oval:mil.disa.fso.ie:tst:22600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:100" version="2" class="compliance">
      <metadata>
        <title>DTBI030 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow font downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 8</product>
        </affected>
        <description>This policy setting allows you to manage whether pages of the zone may download HTML fonts. If you enable this policy setting, HTML fonts can be downloaded automatically.</description>
      </metadata>
      <criteria>
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow font downloads" test_ref="oval:mil.disa.fso.ie:tst:10000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.ie:def:118" version="2" class="compliance">
      <metadata>
        <title>DTBI119 - Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow file downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 8</product>
        </affected>
        <description>This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered.</description>
      </metadata>
      <criteria>
        <criterion comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow file downloads" test_ref="oval:mil.disa.fso.ie:tst:11800" />
      </criteria>
    </definition>
  </definitions>
  <tests>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10100" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Java permissions" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:10100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10600" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Navigate windows and frames across different domains" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:10600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11100" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Java permissions" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:11100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11200" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Java permissions" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:11200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13201" version="2" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.ie:obj:13200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13200" version="2" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:13200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13400" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Prevent participation in the Customer Experience Improvement Program" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:13400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15400" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Enable MIME Sniffing" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:15400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15500" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Enable MIME Sniffing" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:15500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16500" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Automatic prompting for file downloads" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:16500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16600" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:16600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16700" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:16700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16800" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:16800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16900" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:16900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17000" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:17000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17100" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\ Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:17100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17200" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:17200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17300" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:17300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17400" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:17400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17800" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools\Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools must be Enabled with a blank or empty selection box" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:17800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:18000" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:18000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:18000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:18100" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:18100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:18100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:18200" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:18200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:18200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:18300" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:18300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:18300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:18400" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:18400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:18400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:18500" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:18500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:18500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:18600" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:18600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:18600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19100" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:19100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19200" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:19200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19401" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History\40 entered in Days to keep pages in History" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:19401" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19401" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19400" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History\Disable Configuring History must be Enabled" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:19400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20400" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn on Cross-Site Scripting (XSS) Filter must be Enabled and Enable selected" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:20400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21000" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:21000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21100" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone Allow status bar updates via script must be Enabled and Disable selected" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:21100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21500" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone Allow status bar updates via script must be Enabled and Disabled selected" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:21500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21600" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:21600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21700" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:21700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21800" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable add-on performance notifications" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:21800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21900" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable Browser Geolocation" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:21900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:22000" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn on Suggested Sites" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:22000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:22000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:22100" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page\Automatically check for Internet Explorer updates" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:22100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:22100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:22200" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn off ActiveX opt-in prompt" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:22200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:22200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:22300" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:22300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:22300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:22400" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:22400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:22400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:22500" version="1" check="all" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.ie:obj:22500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:22500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:22600" version="1" comment="Internet Explorer 9 is installed" check_existence="at_least_one_exists" check="at least one">
      <object object_ref="oval:mil.disa.fso.ie:obj:22600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:22600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Active Content from CD's to Run on User Machine" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:13600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Software to Run or Install Even if the Signature is Invalid" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:13700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Third-Party Browser Extensions" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:13800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Server Certificate Revocation" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:13900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Signature on Downloaded Programs" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Access data sources across domains" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:10200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow cut, copy, or paste operations from the clipboard via script" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:10900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow drag and drop or copy and paste files" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:10300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10400" version="2" deprecated="true" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow installation of desktop items" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:10400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow script-initiated windows without size or position constraints" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow Scriptlets" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Automatic prompting for file downloads" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:9700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download signed ActiveX controls" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:9700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:9700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:9800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download unsigned ActiveX controls" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:9800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:9800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:9900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Initialize and script ActiveX controls not marked as safe" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:9900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:9900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Internet Zone\Java permissions" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:15000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Intranet Zone\Java permissions" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Java permissions" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Local Machine Zone\Java permissions" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down restricted Sites Zone\Java permissions" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:15100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Trusted Sites Zone\Java permissions" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching applications and files in an IFRAME" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:10500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Logon options" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:11000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Loose or un-compiled XAML files" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:15200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10601" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Navigate windows and frames across different domains does not exist" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:10600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel permissions" check_existence="at_least_one_exists" check="all" deprecated="true">
      <object object_ref="oval:mil.disa.fso.ie:obj:10700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First- Run Opt-In" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:15600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn On Protected Mode" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:15800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Use Pop-up Blocker" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:16000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Userdata persistence" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:10800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Web sites in less privileged Web content zones can navigate into this zone" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:16200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Access data sources across domains" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:12000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow active scripting" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:12800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow binary and script behaviors" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:16400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow cut, copy, or paste operations from the clipboard via script" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:12900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow drag and drop or copy and paste files" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:12200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow font downloads" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:11900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow installation of desktop items" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:12300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow META REFRESH" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:12100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow script-initiated windows without size or position constraints" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download signed ActiveX controls" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:11300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download unsigned ActiveX controls" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:11400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Initialize and script ActiveX controls not marked as safe" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:11500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Java permissions" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:13100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching applications and files in an IFRAME" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:12400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Logon options" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:13000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Loose XAML files" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:15300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Navigate windows and frames across different domains" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:12500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components not signed with Authenticode" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:17500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components signed with Authenticode" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:17600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run ActiveX controls and plugins" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:11600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Script ActiveX controls marked safe for scripting" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:11700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Scripting of Java applets" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:17700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12600" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Software channel permissions" check_existence="at_least_one_exists" check="all" deprecated="true">
      <object object_ref="oval:mil.disa.fso.ie:obj:12600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First- Run Opt-In" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:15700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:15900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn On Protected Mode" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:15900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:15900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Use Pop-up Blocker" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:16100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:12700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Userdata persistence" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:12700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:12700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:16300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Web sites in less privileged Web content zones can navigate into this zone" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:16300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:16300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:14100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Sites: Include all network paths (UNCs)" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:14100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:14100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:17900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off Configuring the Update Check Interval (In Days)" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:17900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:17900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13300" version="1" comment="Computer Configuration\Network\Internet Explorer\Disable Changing Automatic Configuration Settings" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:13300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:9600" version="1" comment="Computer Configuration\Network\Internet Explorer\Make Proxy Settings Per-Machine (Rather Then Per-User)" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:9600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:9600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19300" version="1" comment="Computer Configuration\Network\Internet Explorer\Prevent performance of First Run Customize settings" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:19300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:9500" version="1" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Add/Delete Sites" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:9500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:9500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:9400" version="1" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Change Policies" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:9400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:9400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:22700" version="1" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Use Only Machine Settings" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:22700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:22700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:18900" version="1" comment="Computer Configuration\Network\Internet Explorer\Turn Off Crash Detection" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:18900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:18900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:13500" version="1" comment="Computer Configuration\Network\Internet Explorer\Turn off the Security Settings Check feature" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:13500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:13500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19500" version="2" comment="Computer Configuration\Network\Internet Explorer\Include updated Web site lists from Microsoft" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:19500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19600" version="1" comment="Computer Configuration\Network\Internet Explorer\Compatibility View\Include updated Web site lists from Microsoft" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:19600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19700" version="1" comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Configure Delete Browsing History on exit" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:19700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19800" version="1" comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Prevent Deleting Web sites that the User has Visited" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:19800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:19900" version="1" comment="Computer Configuration\Network\Internet Explorer\InPrivate\Turn off InPrivate Browsing" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:19900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:19900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components not signed with Authenticode" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:21200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components signed with Authenticode" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:21300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:21400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow Scriptlets" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:21400" />
      <state state_ref="oval:mil.disa.fso.ie:ste:21400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow scripting of Internet Explorer web browser control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:20000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Include local directory path when uploading files to a server" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:20100" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching programs and unsafe files" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:20200" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Only allow approved domains to use ActiveX controls without prompt" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:20300" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow scripting of Internet Explorer web browser control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:20500" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Include local directory path when uploading files to a server" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:20600" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching programs and unsafe files" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:20700" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Only allow approved domains to use ActiveX controls without prompt" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:20800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:20900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn on Cross-Site Scripting (XSS) Filter" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:20900" />
      <state state_ref="oval:mil.disa.fso.ie:ste:20900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:10000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow font downloads" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:10000" />
      <state state_ref="oval:mil.disa.fso.ie:ste:10000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:tst:11800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow file downloads" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.ie:obj:11800" />
      <state state_ref="oval:mil.disa.fso.ie:ste:11800" />
    </registry_test>
  </tests>
  <objects>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10100" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Java permissions">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string" operation="equals">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10600" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Navigate windows and frames across different domains">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string" operation="equals">1607</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11100" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Java permissions">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1</key>
      <name datatype="string" operation="equals">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11200" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Java permissions">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2</key>
      <name datatype="string" operation="equals">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13200" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Restrictions</key>
      <name datatype="string" operation="equals">NoExtensionManagement</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13400" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Prevent participation in the Customer Experience Improvement Program">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\SQM</key>
      <name datatype="string" operation="equals">DisableCustomerImprovementProgram</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15400" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Enable MIME Sniffing">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string" operation="equals">2100</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15500" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Enable MIME Sniffing">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string" operation="equals">2100</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16500" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Automatic prompting for file downloads">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string" operation="equals">2200</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16600" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING</key>
      <name datatype="string" operation="equals">(Reserved)</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16700" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING</key>
      <name datatype="string" operation="equals">(Reserved)</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16800" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL</key>
      <name datatype="string" operation="equals">explorer.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16900" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL</key>
      <name datatype="string" operation="equals">iexplore.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17000" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION</key>
      <name datatype="string" operation="equals">(Reserved)</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17100" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\ Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD</key>
      <name datatype="string" operation="equals">(Reserved)</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17200" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD</key>
      <name datatype="string" operation="equals">explorer.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17300" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD</key>
      <name datatype="string" operation="equals">iexplore.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17400" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS</key>
      <name datatype="string" operation="equals">(Reserved)</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17800" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools\Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools must be Enabled with a blank or empty selection box">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main</key>
      <name datatype="string" operation="equals">Update_Check_Page</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:18000" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING</key>
      <name datatype="string" operation="equals">explorer.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:18100" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING</key>
      <name datatype="string" operation="equals">iexplore.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:18200" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL</key>
      <name datatype="string" operation="equals">(Reserved)</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:18300" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION</key>
      <name datatype="string" operation="equals">explorer.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:18400" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION</key>
      <name datatype="string" operation="equals">iexplore.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:18500" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS</key>
      <name datatype="string" operation="equals">explorer.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:18600" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS</key>
      <name datatype="string" operation="equals">iexplore.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19100" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING</key>
      <name datatype="string" operation="equals">explorer.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19200" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING</key>
      <name datatype="string" operation="equals">iexplore.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19401" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History\40 entered in Days to keep pages in History">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History</key>
      <name datatype="string" operation="equals">DaysToKeep</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19400" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History\Disable Configuring History must be Enabled">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Control Panel</key>
      <name datatype="string" operation="equals">History</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20400" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn on Cross-Site Scripting (XSS) Filter must be Enabled and Enable selected">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string" operation="equals">1409</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21000" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL</key>
      <name datatype="string" operation="equals">(Reserved)</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21100" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone Allow status bar updates via script must be Enabled and Disable selected">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string" operation="equals">2103</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21500" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone Allow status bar updates via script must be Enabled and Disabled selected">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string" operation="equals">2103</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21600" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL</key>
      <name datatype="string" operation="equals">explorer.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21700" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL</key>
      <name datatype="string" operation="equals">iexplore.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21800" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable add-on performance notifications">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows\CurrentVersion\Policies\Ext</key>
      <name datatype="string" operation="equals">DisableAddonLoadTimePerformanceNotifications</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21900" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable Browser Geolocation">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Geolocation</key>
      <name datatype="string" operation="equals">PolicyDisableGeolocation</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:22000" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn on Suggested Sites">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Suggested Sites</key>
      <name datatype="string" operation="equals">Enabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:22100" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page\Automatically check for Internet Explorer updates">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main</key>
      <name datatype="string" operation="equals">NoUpdateCheck</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:22200" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn off ActiveX opt-in prompt">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows\CurrentVersion\Policies\Ext</key>
      <name datatype="string" operation="equals">NoFirsttimeprompt</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:22300" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND</key>
      <name datatype="string" operation="equals">(Reserved)</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:22400" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND</key>
      <name datatype="string" operation="equals">explorer.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:22500" version="1" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND</key>
      <name datatype="string" operation="equals">iexplore.exe</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:22600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Internet Explorer</key>
      <name datatype="string">Version</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Active Content from CD's to Run on User Machine">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings</key>
      <name datatype="string">LOCALMACHINE_CD_UNLOCK</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Software to Run or Install Even if the Signature is Invalid">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Download</key>
      <name datatype="string">RunInvalidSignatures</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Third-Party Browser Extensions">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Main</key>
      <name datatype="string">Enable Browser Extensions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Server Certificate Revocation">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</key>
      <name datatype="string">CertificateRevocation</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Signature on Downloaded Programs">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Download</key>
      <name datatype="string">CheckExeSignatures</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Access data sources across domains">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1406</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow cut, copy, or paste operations from the clipboard via script">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1407</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow drag and drop or copy and paste files">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1802</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10400" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow installation of desktop items" deprecated="true">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1800</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow script-initiated windows without size or position constraints">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">2102</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow Scriptlets">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1209</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Automatic prompting for file downloads">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">2200</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:9700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download signed ActiveX controls">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1001</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:9800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download unsigned ActiveX controls">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1004</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:9900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Initialize and script ActiveX controls not marked as safe">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1201</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Internet Zone\Java permissions">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3</key>
      <name datatype="string">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Intranet Zone\Java permissions">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1</key>
      <name datatype="string">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Java permissions">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0</key>
      <name datatype="string">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Local Machine Zone\Java permissions">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0</key>
      <name datatype="string">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Restricted Sites Zone\Java permissions">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4</key>
      <name datatype="string">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Trusted Site Zone\Java permissions">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2</key>
      <name datatype="string">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching applications and files in an IFRAME">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1804</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Logon options">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1A00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Loose or un-compiled XAML files">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">2402</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel permissions" deprecated="true">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1E05</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First- Run Opt-In">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1208</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn On Protected Mode">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">2500</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Use Pop-up Blocker">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1809</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Userdata persistence">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1606</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Web sites in less privileged Web content zones can navigate into this zone">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">2101</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Access data sources across domains">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1406</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow active scripting">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1400</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow binary and script behaviors">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">2000</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow cut, copy, or paste operations from the clipboard via script">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1407</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow drag and drop or copy and paste files">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1802</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow font downloads">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1604</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow installation of desktop items">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1800</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow META REFRESH">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1608</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow script-initiated windows without size or position constraints">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">2102</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download signed ActiveX controls">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1001</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download unsigned ActiveX controls">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1004</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Initialize and script ActiveX controls not marked as safe">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1201</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Java permissions">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1C00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching applications and files in an IFRAME">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1804</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Logon options">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1A00</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Loose XAML files">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">2402</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Navigate windows and frames across different domains">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1607</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components not signed with Authenticode">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">2004</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components signed with Authenticode">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">2001</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run ActiveX controls and plugins">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1200</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Script ActiveX controls marked safe for scripting">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1405</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Scripting of Java applets">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1402</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12600" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Software channel permissions" deprecated="true">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1E05</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First- Run Opt-In">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1208</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:15900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn On Protected Mode">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">2500</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Use Pop-up Blocker">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1809</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:12700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Userdata persistence">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1606</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:16300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Web sites in less privileged Web content zones can navigate into this zone">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">2101</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:14100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Sites: Include all network paths (UNCs)">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap</key>
      <name datatype="string">UNCAsIntranet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:17900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off Configuring the Update Check Interval (In Days)">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Main</key>
      <name datatype="string">Update_Check_Interval</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13300" version="1" comment="Computer Configuration\Network\Internet Explorer\Disable Changing Automatic Configuration Settings">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Control Panel</key>
      <name datatype="string">Autoconfig</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:9600" version="1" comment="Computer Configuration\Network\Internet Explorer\Make Proxy Settings Per-Machine (Rather Then Per-User)">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</key>
      <name datatype="string">ProxySettingsPerUser</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19300" version="1" comment="Computer Configuration\Network\Internet Explorer\Prevent performance of First Run Customize settings">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Main</key>
      <name datatype="string">DisableFirstRunCustomize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:9500" version="1" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Add/Delete Sites">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</key>
      <name datatype="string">Security_zones_map_edit</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:9400" version="1" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Change Policies">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</key>
      <name datatype="string">Security_options_edit</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:22700" version="1" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Use Only Machine Settings">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</key>
      <name datatype="string">Security_HKLM_only</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:18900" version="1" comment="Computer Configuration\Network\Internet Explorer\Turn Off Crash Detection">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Restrictions</key>
      <name datatype="string">NoCrashDetection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:13500" version="1" comment="Computer Configuration\Network\Internet Explorer\Turn off the Security Settings Check feature">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Security</key>
      <name datatype="string">DisableSecuritySettingsCheck</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19500" version="2" comment="Computer Configuration\Network\Internet Explorer\Include updated Web site lists from Microsoft">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\PhishingFilter</key>
      <name datatype="string">EnabledV9</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19600" version="1" comment="Computer Configuration\Network\Internet Explorer\Compatibility View\Include updated Web site lists from Microsoft">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\BrowserEmulation</key>
      <name datatype="string">MSCompatibilityMode</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19700" version="1" comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Configure Delete Browsing History on exit">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Privacy</key>
      <name datatype="string">ClearBrowsingHistoryOnExit</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19800" version="1" comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Prevent Deleting Web sites that the User has Visited">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Privacy</key>
      <name datatype="string">CleanHistory</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:19900" version="1" comment="Computer Configuration\Network\Internet Explorer\InPrivate\Turn off InPrivate Browsing">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Privacy</key>
      <name datatype="string">EnableInPrivateBrowsing</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components not signed with Authenticode">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">2004</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components signed with Authenticode">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">2001</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:21400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow Scriptlets">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1209</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow scripting of Internet Explorer web browser control">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1206</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Include local directory path when uploading files to a server">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">160A</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching programs and unsafe files">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1806</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Only allow approved domains to use ActiveX controls without prompt">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">120B</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow scripting of Internet Explorer web browser control">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1206</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Include local directory path when uploading files to a server">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">160A</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching programs and unsafe files">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1806</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Only allow approved domains to use ActiveX controls without prompt">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">120B</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:20900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn on Cross-Site Scripting (XSS) Filter">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1409</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:10000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow font downloads">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</key>
      <name datatype="string">1604</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:obj:11800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow file downloads">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</key>
      <name datatype="string">1803</name>
    </registry_object>
  </objects>
  <states>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10100" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Java permissions">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="string" operation="equals" entity_check="all">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10600" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Navigate windows and frames across different domains">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="string" operation="equals" entity_check="all">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11100" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Java permissions">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="string" operation="equals" entity_check="all">65536</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11200" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Java permissions">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="string" operation="equals" entity_check="all">65536</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13200" version="3" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="string" operation="equals" entity_check="all">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13400" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Prevent participation in the Customer Experience Improvement Program">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="string" operation="equals" entity_check="all">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15400" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Enable MIME Sniffing">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="string" operation="equals" entity_check="all">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15500" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Enable MIME Sniffing">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="string" operation="equals" entity_check="all">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16500" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Automatic prompting for file downloads">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16600" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16700" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16800" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16900" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17000" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17100" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\ Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17200" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17300" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17400" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17800" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools\Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools must be Enabled with a blank or empty selection box">
      <value datatype="string" operation="pattern match" entity_check="all">^\s*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:18000" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="string" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:18100" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="string" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:18200" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:18300" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="string" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:18400" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="string" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:18500" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="string" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:18600" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="string" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19100" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19200" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature\Internet Explorer Processes must be Enabled">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19401" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History\40 entered in Days to keep pages in History">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">40</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19400" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History\Disable Configuring History must be Enabled">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20400" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn on Cross-Site Scripting (XSS) Filter must be Enabled and Enable selected">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21000" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21100" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone Allow status bar updates via script must be Enabled and Disable selected">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21500" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone Allow status bar updates via script must be Enabled and Disabled selected">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21600" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21700" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install\Internet Explorer Processes must be Enabled">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21800" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable add-on performance notifications">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21900" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Disable Browser Geolocation">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:22000" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn on Suggested Sites">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:22100" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page\Automatically check for Internet Explorer updates">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:22200" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Turn off ActiveX opt-in prompt">
      <type datatype="string" operation="equals" entity_check="all">reg_dword</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:22300" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:22400" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:22500" version="2" comment="Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Notification Bar\Internet Explorer Processes">
      <type datatype="string" operation="equals" entity_check="all">reg_sz</type>
      <value datatype="int" operation="equals" entity_check="all">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:22600" version="2" comment="The registry key has a value that matches 9.*">
      <value operation="pattern match">^9\..*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13600" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Active Content from CD's to Run on User Machine">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:13600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Software to Run or Install Even if the Signature is Invalid">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:13700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13800" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Third-Party Browser Extensions">
      <type>reg_sz</type>
      <value datatype="string" var_ref="oval:mil.disa.fso.ie:var:13800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13900" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Server Certificate Revocation">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:13900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14000" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Signature on Downloaded Programs">
      <type>reg_sz</type>
      <value datatype="string" var_ref="oval:mil.disa.fso.ie:var:14000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10200" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Access data sources across domains">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:10200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10900" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow cut, copy, or paste operations from the clipboard via script">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:10900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10300" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow drag and drop or copy and paste files">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:10300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10400" version="3" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow installation of desktop items" deprecated="true">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:10400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14200" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow script-initiated windows without size or position constraints">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:14200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14400" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow Scriptlets">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:14400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14500" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Automatic prompting for file downloads">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:14500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:9700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download signed ActiveX controls">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:9700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:9800" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download unsigned ActiveX controls">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:9800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:9900" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Initialize and script ActiveX controls not marked as safe">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:9900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15000" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Internet Zone\Java permissions">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:15000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14800" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Intranet Zone\Java permissions">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:14800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14600" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Java permissions">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:14600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Local Machine Zone\Java permissions">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:14700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15100" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Restricted Sites Zone\Java permissions">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:15100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14900" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Trusted Sites Zone\Java permissions">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:14900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10500" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching applications and files in an IFRAME">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:10500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11000" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Logon options">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:11000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15200" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Loose or un-compiled XAML files">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:15200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10700" version="3" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel permissions" deprecated="true">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:10700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15600" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First- Run Opt-In">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:15600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15800" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn On Protected Mode">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:15800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16000" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Use Pop-up Blocker">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:16000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10800" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Userdata persistence">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:10800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16200" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Web sites in less privileged Web content zones can navigate into this zone">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:16200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12000" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Access data sources across domains">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12800" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow active scripting">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16400" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow binary and script behaviors">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:16400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12900" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow cut, copy, or paste operations from the clipboard via script">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12200" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow drag and drop or copy and paste files">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11900" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow font downloads">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:11900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12300" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow installation of desktop items">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12100" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow META REFRESH">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14300" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow script-initiated windows without size or position constraints">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:14300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11300" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download signed ActiveX controls">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:11300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11400" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download unsigned ActiveX controls">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:11400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11500" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Initialize and script ActiveX controls not marked as safe">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:11500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13100" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Java permissions">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:13100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12400" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching applications and files in an IFRAME">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13000" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Logon options">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:13000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15300" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Loose or XAML files">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:15300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12500" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Navigate windows and frames across different domains">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17500" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components not signed with Authenticode">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:17500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17600" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components signed with Authenticode">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:17600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11600" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run ActiveX controls and plugins">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:11600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Script ActiveX controls marked safe for scripting">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:11700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Scripting of Java applets">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:17700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12600" version="3" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Software channel permissions" deprecated="true">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First- Run Opt-In">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:15700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:15900" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn On Protected Mode">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:15900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16100" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Use Pop-up Blocker">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:16100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:12700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Userdata persistence">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:12700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:16300" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Web sites in less privileged Web content zones can navigate into this zone">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:16300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:14100" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Sites: Include all network paths (UNCs)">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:14100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:17900" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off Configuring the Update Check Interval (In Days)">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:17900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13300" version="2" comment="Computer Configuration\Network\Internet Explorer\Disable Changing Automatic Configuration Settings">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:13300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:9600" version="2" comment="Computer Configuration\Network\Internet Explorer\Make Proxy Settings Per-Machine (Rather Then Per-User)">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:9600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19300" version="2" comment="Computer Configuration\Network\Internet Explorer\Prevent performance of First Run Customize settings">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:19300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:9500" version="2" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Add/Delete Sites">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:9500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:9400" version="2" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Change Policies">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:9400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:22700" version="2" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Use Only Machine Settings">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:22700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:18900" version="2" comment="Computer Configuration\Network\Internet Explorer\Turn Off Crash Detection">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:18900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:13500" version="2" comment="Computer Configuration\Network\Internet Explorer\Turn off the Security Settings Check feature">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:13500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19500" version="2" comment="Computer Configuration\Network\Internet Explorer\Include updated Web site lists from Microsoft">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:19500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19600" version="2" comment="Computer Configuration\Network\Internet Explorer\Compatibility View\Include updated Web site lists from Microsoft">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:19600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19700" version="2" comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Configure Delete Browsing History on exit">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:19700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19800" version="2" comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Prevent Deleting Web sites that the User has Visited">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:19800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:19900" version="2" comment="Computer Configuration\Network\Internet Explorer\InPrivate\Turn off InPrivate Browsing">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:19900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21200" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components not signed with Authenticode">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:21200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21300" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components signed with Authenticode">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:21300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:21400" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow Scriptlets">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:21400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20000" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow scripting of Internet Explorer web browser control">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:20000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20100" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Include local directory path when uploading files to a server">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:20100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20200" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching programs and unsafe files">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:20200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20300" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Only allow approved domains to use ActiveX controls without prompt">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:20300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20500" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow scripting of Internet Explorer web browser control">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:20500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20600" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Include local directory path when uploading files to a server">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:20600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching programs and unsafe files">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:20700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20800" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Only allow approved domains to use ActiveX controls without prompt">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:20800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:20900" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn on Cross-Site Scripting (XSS) Filter">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:20900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:10000" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow font downloads">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:10000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.ie:ste:11800" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow file downloads">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.ie:var:11800" />
    </registry_state>
  </states>
  <variables>
    <external_variable id="oval:mil.disa.fso.ie:var:13600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Active Content from CD's to Run on User Machine" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:13700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Software to Run or Install Even if the Signature is Invalid" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:13800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Third-Party Browser Extensions" datatype="string" />
    <external_variable id="oval:mil.disa.fso.ie:var:13900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Server Certificate Revocation" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:14000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Signature on Downloaded Programs" datatype="string" />
    <external_variable id="oval:mil.disa.fso.ie:var:10200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Access data sources across domains" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:10900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow cut, copy, or paste operations from the clipboard via script" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:10300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow drag and drop or copy and paste files" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:10400" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow installation of desktop items" datatype="int" deprecated="true" />
    <external_variable id="oval:mil.disa.fso.ie:var:14200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow script-initiated windows without size or position constraints" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:14400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow Scriptlets" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:14500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Automatic prompting for file downloads" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:9700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download signed ActiveX controls" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:9800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download unsigned ActiveX controls" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:9900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Initialize and script ActiveX controls not marked as safe" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:15000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Internet Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:10100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:14800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Intranet Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:14600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:14700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Local Machine Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:15100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Restricted Sites Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:14900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Trusted Sites Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:10500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching applications and files in an IFRAME" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Logon options" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:15200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Loose or un-compiled XAML files" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:10600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Navigate windows and frames across different domains" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:10700" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel permissions" datatype="int" deprecated="true" />
    <external_variable id="oval:mil.disa.fso.ie:var:15600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First- Run Opt-In" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:15800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\TTurn On Protected Mode" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:16000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Use Pop-up Blocker" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:10800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Userdata persistence" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:16200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Web sites in less privileged Web content zones can navigate into this zone" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Access data sources across domains" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow active scripting" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:16400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow binary and script behaviors" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow cut, copy, or paste operations from the clipboard via script" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow drag and drop or copy and paste files" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow font downloads" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow installation of desktop items" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow META REFRESH" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:14300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow script-initiated windows without size or position constraints" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:16500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Automatic prompting for file downloads" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download signed ActiveX controls" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download unsigned ActiveX controls" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Initialize and script ActiveX controls not marked as safe" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:13100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Java permissions" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching applications and files in an IFRAME" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:13000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Logon options" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:15300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Loose XAML files" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Navigate windows and frames across different domains" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:17500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components not signed with Authenticode" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:17600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components signed with Authenticode" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run ActiveX controls and plugins" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Script ActiveX controls marked safe for scripting" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:17700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Scripting of Java applets" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12600" version="2" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Software channel permissions" datatype="int" deprecated="true" />
    <external_variable id="oval:mil.disa.fso.ie:var:15700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First- Run Opt-In" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:15900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn On Protected Mode" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:16100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Use Pop-up Blocker" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:12700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Userdata persistence" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:16300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Web sites in less privileged Web content zones can navigate into this zone" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:14100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Sites: Include all network paths (UNCs)" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:17800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools" datatype="string" />
    <external_variable id="oval:mil.disa.fso.ie:var:17900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off Configuring the Update Check Interval (In Days)" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:13300" version="1" comment="Computer Configuration\Network\Internet Explorer\Disable Changing Automatic Configuration Settings" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:13200" version="1" comment="Computer Configuration\Network\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons is disabled" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:9600" version="1" comment="Computer Configuration\Network\Internet Explorer\Make Proxy Settings Per-Machine (Rather Then Per-User)" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:13400" version="1" comment="Computer Configuration\Network\Internet Explorer\Prevent participation in the Customer Experience Improvement Programs" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:19300" version="1" comment="Computer Configuration\Network\Internet Explorer\Prevent performance of First Run Customize settings" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:9500" version="1" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Add/Delete Sites" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:9400" version="1" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Change Policies" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:22700" version="1" comment="Computer Configuration\Network\Internet Explorer\Security Zones: Use Only Machine Settings" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:18900" version="1" comment="Computer Configuration\Network\Internet Explorer\Turn Off Crash Detection" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:13500" version="1" comment="Computer Configuration\Network\Internet Explorer\Turn off the Security Settings Check feature" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:19500" version="1" comment="Computer Configuration\Network\Internet Explorer\Include updated Web site lists from Microsoft" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:19600" version="1" comment="Computer Configuration\Network\Internet Explorer\Compatibility View\Include updated Web site lists from Microsoft" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:19700" version="1" comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Configure Delete Browsing History on exit" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:19800" version="1" comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Prevent Deleting Web sites that the User has Visited" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:19900" version="1" comment="Computer Configuration\Network\Internet Explorer\InPrivate\Turn off InPrivate Browsing" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:21200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components not signed with Authenticode" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:21300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components signed with Authenticode" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:21400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow Scriptlets" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20000" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow scripting of Internet Explorer web browser control" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20100" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Include local directory path when uploading files to a server" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20200" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching programs and unsafe files" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20300" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Only allow approved domains to use ActiveX controls without prompt" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20400" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn on Cross-Site Scripting (XSS) Filter" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20500" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow scripting of Internet Explorer web browser control" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20600" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Include local directory path when uploading files to a server" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20700" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching programs and unsafe files" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20800" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Only allow approved domains to use ActiveX controls without prompt" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:20900" version="1" comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn on Cross-Site Scripting (XSS) Filter" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:10000" version="1" comment="Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" datatype="int" />
    <external_variable id="oval:mil.disa.fso.ie:var:11800" version="1" comment="Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" datatype="int" />
  </variables>
</oval_definitions>

