<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/windows-definitions-schema.xsd">
  <generator>
    <oval:product_name>repotool</oval:product_name>
    <oval:schema_version>5.8</oval:schema_version>
    <oval:timestamp>2016-12-29T10:08:33</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:mil.disa.fso.windows:def:2908" version="5" class="compliance">
      <metadata>
        <title>Unsupported Service Packs</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1073" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Systems must be at supported service packs (SP) or release levels.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:290800" comment="Verifies the OS Build is equal to or greater than 7601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2909" version="3" class="compliance">
      <metadata>
        <title>Display Shutdown Button</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1075" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10419-0" />
        <description>The shutdown option must not be available from the logon dialog box.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:290900" comment="Verifies 'Shutdown: Allow system to be shutdown without having to log on' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2911" version="2" class="compliance">
      <metadata>
        <title>NTFS Requirement</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1081" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Local volumes must be formatted using NTFS.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291100" comment="Verifies local volumes are formatted using NTFS" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2912" version="3" class="compliance">
      <metadata>
        <title>Legal Notice Display</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1089" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10673-2" />
        <description>The required legal notice must be configured to display before console logon.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291200" comment="Legal Notice is configured with the required text." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291201" comment="Legal Notice is configured with the required text." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2913" version="3" class="compliance">
      <metadata>
        <title>Caching of logon credentials</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1090" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10926-4" />
        <description>Caching of logon credentials must be limited.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291300" comment="Verifies 'Interactive Logon: Number of previous logons to cache (in case domain controller is not available)' is set to '2' logons or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:434200" comment="System is not a member of a domain" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2914" version="2" class="compliance">
      <metadata>
        <title>Restrict Anonymous Network Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1093" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10557-7" />
        <description>Anonymous enumeration of shares must be restricted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291400" comment="Verifies 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2915" version="5" class="compliance">
      <metadata>
        <title>Bad Logon Attempts</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1097" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11046-0" />
        <description>The number of allowed bad logon attempts must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291500" comment="Verifies 'Account lockout threshold' is set to '3' or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291501" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2916" version="6" class="compliance">
      <metadata>
        <title>Bad Logon Counter Reset</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1098" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11059-3" />
        <description>The time before the bad-logon counter is reset must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291600" comment="Verifies 'Reset account lockout counter after' is set to at least '60' minutes" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291501" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2917" version="7" class="compliance">
      <metadata>
        <title>Lockout Duration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1099" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10399-4" />
        <description>Lockout duration must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291700" comment="Verifies 'Account lockout duration' is set to '0'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291501" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2918" version="2" class="compliance">
      <metadata>
        <title>UR: Act as part of the operating system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1102" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10232-7" />
        <description>Unauthorized accounts must not have the Act as part of the operating system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291800" comment="Act as part of the operating system - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2919" version="3" class="compliance">
      <metadata>
        <title>Maximum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1104" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10562-7" />
        <description>Maximum password age must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291900" comment="Verifies 'Maximum Password Age' is set to '60' days or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:291901" comment="Verifies 'Maximum Password Age' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2920" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1105" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10760-7" />
        <description>Minimum password age does not meet minimum requirements.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3188" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2921" version="3" class="compliance">
      <metadata>
        <title>Password Uniqueness</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1107" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10809-2" />
        <description>Password uniqueness must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292100" comment="Verifies 'Enforce password history' is set to '24' passwords or more" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2922" version="4" class="compliance">
      <metadata>
        <title>Disable Guest Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9989-5" />
        <description>The built-in guest account must be disabled.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292200" comment="Verifies 'Accounts: Guest account status' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292201" comment="Verifies built-in guest account does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2923" version="3" class="compliance">
      <metadata>
        <title>Rename Built-in Guest Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1114" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10747-4" />
        <description>The built-in guest account must be renamed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292300" comment="Verifies 'Accounts: Rename guest account' is set to a value other than 'Guest'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292201" comment="Verifies built-in guest account does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2924" version="4" class="compliance">
      <metadata>
        <title>Rename Built-in Administrator Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1115" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10976-9" />
        <description>The built-in administrator account must be renamed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292400" comment="Verifies 'Accounts: Rename administrator account' is set to a value other than 'Administrator'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2925" version="1" class="compliance">
      <metadata>
        <title>Forcibly Disconnect when Logon Hours Expire</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1136" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10983-5" />
        <description>Users are not forcibly disconnected when logon hours expire.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3194" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2926" version="1" class="compliance">
      <metadata>
        <title>Unencrypted Password is Sent to SMB Server.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1141" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10838-1" />
        <description>Unencrypted password is sent to 3rd party SMB Server.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3198" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2927" version="3" class="compliance">
      <metadata>
        <title>Disable Automatic Logon</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1145" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10745-8" />
        <description>Automatic logons must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292700" comment="Verifes 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292701" comment="Verifies the automatic logon password registry value (DefaultPassword) does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2928" version="3" class="compliance">
      <metadata>
        <title>Microsoft Strong Password Filtering</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1150" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10901-7" />
        <description>The built-in Microsoft password complexity filter must be enabled.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292800" comment="Verifies 'Password must meet complexity requirements' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2929" version="2" class="compliance">
      <metadata>
        <title>Secure Print Driver Installation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1151" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9999-4" />
        <description>The print driver installation privilege must be restricted to administrators.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:292900" comment="Verifies 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2930" version="1" class="compliance">
      <metadata>
        <title>LanMan Authentication Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1153" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10984-3" />
        <description>The Send download LanMan compatible password option is not set to Send NTLMv2 response only\refuse LM and NTLM.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3206" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2931" version="1" class="compliance">
      <metadata>
        <title>Ctrl+Alt+Del Security Attention Sequence</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1154" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10810-0" />
        <description>Ctrl+Alt+Del security attention sequence is Disabled.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3210" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2932" version="2" class="compliance">
      <metadata>
        <title>UR: Deny access to this computer from the network - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1155" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10733-4" />
        <description>The Deny access to this computer from the network user right on domain controllers must be configured to prevent unauthenticated access.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:293200" comment="Deny access to this computer from the network - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2933" version="4" class="compliance">
      <metadata>
        <title>Smart Card Removal Option</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1157" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10573-4" />
        <description>The Smart Card removal option must be configured to Force Logoff or Lock Workstation.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:293300" comment="Verifies 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:293301" comment="Verifies 'Interactive logon: Smart card removal behavior' is set to 'Force Logoff'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2936" version="1" class="compliance">
      <metadata>
        <title>SMB Server Packet Signing (if client agrees)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1162" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10978-5" />
        <description>The Windows SMB server is not enabled to perform SMB packet signing when possible.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3220" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2937" version="1" class="compliance">
      <metadata>
        <title>Encryption of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1163" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10875-3" />
        <description>Outgoing secure channel traffic is not encrypted when possible.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3224" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3228" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2938" version="1" class="compliance">
      <metadata>
        <title>Signing of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1164" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10871-2" />
        <description>Outgoing secure channel traffic is not signed when possible.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3224" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3232" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2939" version="1" class="compliance">
      <metadata>
        <title>Computer Account Password Reset</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1165" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10775-5" />
        <description>The computer account password is prevented from being reset.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3236" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2940" version="1" class="compliance">
      <metadata>
        <title>SMB Client Packet Signing (if server agrees)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1166" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10974-4" />
        <description>The Windows SMB client is not enabled to perform SMB packet signing when possible.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3240" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2941" version="1" class="compliance">
      <metadata>
        <title>Format and Eject Removable Media</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1171" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10637-7" />
        <description>Ejection of removable NTFS media is not restricted to Administrators.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3244" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2942" version="1" class="compliance">
      <metadata>
        <title>Password Expiration Warning</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1172" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10930-6" />
        <description>Users are not warned in advance that their passwords will expire.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3248" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2943" version="1" class="compliance">
      <metadata>
        <title>Global System Objects Permission Strength</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1173" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11010-6" />
        <description>The default permissions of Global system objects are not increased.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3252" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2944" version="1" class="compliance">
      <metadata>
        <title>Idle Time Before Suspending a Session.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="1174" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10362-2" />
        <description>Amount of idle time required before suspending a session is improperly set.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3256" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2945" version="3" class="compliance">
      <metadata>
        <title>Reversible Password Encryption</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2372" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10905-8" />
        <description>Reversible password encryption must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294500" comment="Verifies 'Store password using reversible encryption' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2946" version="1" class="compliance">
      <metadata>
        <title>Disable Media Autoplay</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2374" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11126-0" />
        <description>The system is configured to autoplay removable media.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3260" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2948" version="5" class="compliance">
      <metadata>
        <title>Remotely Accessible Registry Paths</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3339" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10949-6" />
        <description>Unauthorized registry paths must not be remotely accessible.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294800" comment="Verifies 'Network access: Remotely accessible registry paths' is configured with no entries" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294801" comment="Verifies 'Network access: Remotely accessible registry paths' is configured to contain authorized registry paths" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294802" comment="Verifies 'Network access: Remotely accessible registry paths' is not configured" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2949" version="5" class="compliance">
      <metadata>
        <title>Anonymous Access to Network Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3340" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10821-7" />
        <description>Unauthorized shares must not be accessed anonymously.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294900" comment="Verifies 'Network access: Shares that can be accessed anonymously' is not configured" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:294901" comment="Verifies 'Network access: Shares that can be accessed anonymously' is blank" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2950" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Solicit Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3343" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11723-4" />
        <description>Solicited Remote Assistance is allowed.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3264" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2951" version="1" class="compliance">
      <metadata>
        <title>Limit Blank Passwords</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3344" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9992-9" />
        <description>The use of local accounts with blank passwords is not restricted to console logons only.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3268" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2952" version="1" class="compliance">
      <metadata>
        <title>Undock Without Logging On</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3372" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10883-7" />
        <description>The system can be removed from the docking station without logging on first.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3272" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2953" version="4" class="compliance">
      <metadata>
        <title>Maximum Machine Account Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3373" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10903-3" />
        <description>The maximum age for machine account passwords must be set to requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:295300" comment="Verifies 'Domain member: Maximum machine account password age' is set to '30' days or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:295301" comment="Verifies 'Domain member: Maximum machine account password age' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2954" version="1" class="compliance">
      <metadata>
        <title>Strong Session Key</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3374" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10541-1" />
        <description>The system is not configured to require a strong session key.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3280" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2955" version="1" class="compliance">
      <metadata>
        <title>Storage of Passwords and Credentials</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3376" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10292-1" />
        <description>The system is configured to permit storage of credentials or .NET Passports.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3284" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2956" version="3" class="compliance">
      <metadata>
        <title>Everyone Anonymous Rights</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3377" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10297-0" />
        <description>The system must not be configured to give anonymous users Everyone rights.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:295600" comment="Verifies 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2957" version="1" class="compliance">
      <metadata>
        <title>Sharing and Security Model for Local Accounts</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3378" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10825-8" />
        <description>The system is not configured to use the Classic security model.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3288" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2958" version="1" class="compliance">
      <metadata>
        <title>LAN Manager Hash Value Stored</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3379" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10830-8" />
        <description>The system is configured to store the LAN Manager hash of the password in the SAM.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3292" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2959" version="3" class="compliance">
      <metadata>
        <title>Force Logoff When Logon Hours Expire</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3380" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10588-2" />
        <description>The system must be configured to force users to log off when their allowed logon hours expire.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:295900" comment="Verifies 'Network security: Force logoff when logon hours expire' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2960" version="1" class="compliance">
      <metadata>
        <title>LDAP Client Signing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3381" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10614-6" />
        <description>The system is not configured to recommended LDAP client signing requirements.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3296" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2961" version="1" class="compliance">
      <metadata>
        <title>Session Security for NTLM SSP Based Clients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3382" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10035-4" />
        <description>The system is not configured to meet the minimum requirement for session security for NTLM SSP based Clients.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2962" version="1" class="compliance">
      <metadata>
        <title>FIPS Compliant Algorithms</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3383" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10789-6" />
        <description>The system is not configured to use FIPS compliant Algorithms for Encryption, Hashing, and Signing.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3304" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2963" version="1" class="compliance">
      <metadata>
        <title>Case Insensitivity for Non-Windows</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3385" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10986-8" />
        <description>The system is configured to allow case insensitivity.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3308" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2964" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - Session Limit</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3449" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12016-2" />
        <description>Remote Desktop Services must limit users to one remote session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:296400" comment="Verifies 'Restrict Remote Desktop Services users to a Single Remote Desktop Services Session' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2965" version="4" class="compliance">
      <metadata>
        <title>TS/RDS - Password Prompting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3453" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11299-5" />
        <description>Remote Desktop Services must always prompt a client for passwords upon connection.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:296500" comment="Verifies 'Always prompt for password upon connection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2966" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Set Encryption Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3454" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11677-2" />
        <description>Terminal Services is not configured with the client connection encryption set to the required level.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3312" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2967" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Do Not Use Temp Folders</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3455" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10669-0" />
        <description>Terminal Services is configured to use a common temporary folder for all sessions.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3316" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2968" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Delete Temp Folders</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3456" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12046-9" />
        <description>Terminal Services is not configured to delete temporary folders.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3320" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2971" version="3" class="compliance">
      <metadata>
        <title>Group Policy - Do Not Turn off Background Refresh</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3469" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-14437-8" />
        <description>Group Policies must be refreshed in the background if the user is logged on.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297100" comment="Verifies 'Turn Off Background Refresh of Group Policy' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297101" comment="Verifies 'DisableBkGndGroupPolicy' registry value is set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2972" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Offer Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3470" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11625-1" />
        <description>The system is configured to allow unsolicited remote assistance offers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3335" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2975" version="3" class="compliance">
      <metadata>
        <title>Safe DLL Search Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3479" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10772-2" />
        <description>The system must be configured to use Safe DLL Search Mode.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297500" comment="Verifies 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2976" version="1" class="compliance">
      <metadata>
        <title>Media Player - Disable Automatic Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3480" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11298-7" />
        <description>Media Player is configured to allow automatic checking for updates.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3346" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2977" version="2" class="compliance">
      <metadata>
        <title>Session Security for NTLM SSP Based Servers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10040-4" />
        <description>The system is not configured to meet the minimum requirement for session security for NTLM SSP based Servers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3350" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2978" version="3" class="compliance">
      <metadata>
        <title>Audit Log Warning Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4108" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11011-4" />
        <description>The system must generate an audit event when the audit log reaches a percentage of full threshold.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297800" comment="Verifies 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 90 percent or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2979" version="3" class="compliance">
      <metadata>
        <title>Disable IP Source Routing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4110" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10732-6" />
        <description>The system must be configured to prevent IP source routing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:297900" comment="Verifies 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2980" version="3" class="compliance">
      <metadata>
        <title>Disable ICMP Redirect</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4111" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10518-9" />
        <description>The system must be configured to prevent ICMP redirects from overriding OSPF generated routes.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298000" comment="Verifies 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2981" version="3" class="compliance">
      <metadata>
        <title>Disable Router Discovery</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4112" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10768-0" />
        <description>The system must be configured to disable the Internet Router Discovery Protocol (IRDP).</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298100" comment="Verifies 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2982" version="3" class="compliance">
      <metadata>
        <title>TCP Connection Keep-Alive Time</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10381-2" />
        <description>The system must be configured to limit how often keep-alive packets are sent.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298200" comment="Verifies 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to '300000 or 5 minutes (recommended)' or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2983" version="3" class="compliance">
      <metadata>
        <title>Name-Release Attacks</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4116" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10653-4" />
        <description>The system must be configured to ignore NetBIOS name release requests except from WINS servers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298300" comment="Verifies 'MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2984" version="3" class="compliance">
      <metadata>
        <title>TCP Data Retransmissions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4438" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10941-3" />
        <description>The system must limit how many times unacknowledged TCP data is retransmitted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298400" comment="Verifies 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2985" version="3" class="compliance">
      <metadata>
        <title>Screen Saver Grace Period</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4442" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10019-8" />
        <description>The system must be configured to have password protection take effect within a limited time frame when the screen saver becomes active.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298500" comment="Verifies 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 5 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2986" version="5" class="compliance">
      <metadata>
        <title>Remotely Accessible Registry Paths and Sub-Paths</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4443" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10935-5" />
        <description>Unauthorized remotely accessible registry paths and sub-paths must not be configured.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298600" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is configured to contain authorized registry paths" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298601" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is not configured" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298602" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is configured but contains no entries" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2987" version="1" class="compliance">
      <metadata>
        <title>Strong Key Protection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4444" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11035-3" />
        <description>Users are not required to enter a password to access private keys.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3354" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2988" version="4" class="compliance">
      <metadata>
        <title>Optional Subsystems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4445" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10913-2" />
        <description>Optional Subsystems must not be permitted to operate on the system.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:298800" comment="Verifies 'System Settings: Optional Subsystems' is blank" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2990" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - Secure RPC Connection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4447" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11368-8" />
        <description>The Remote Desktop Session Host must require secure RPC communications.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:299000" comment="Verifies 'Require secure RPC communication' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2991" version="2" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4448" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12754-8" />
        <description>Group Policy objects are not reprocessed if they have not changed.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3366" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2992" version="3" class="compliance">
      <metadata>
        <title>Encrypting and Signing of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6831" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10871-2" />
        <description>Outgoing secure channel traffic must be encrypted or signed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:299200" comment="Verifies 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2993" version="1" class="compliance">
      <metadata>
        <title>SMB Client Packet Signing (Always)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6832" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10970-2" />
        <description>The Windows Server SMB client is not enabled to always perform SMB packet signing.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3370" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2994" version="1" class="compliance">
      <metadata>
        <title>SMB Server Packet Signing (Always)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6833" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10992-6" />
        <description>The Windows Server SMB server is not enabled to always perform SMB packet signing.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3374" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2995" version="1" class="compliance">
      <metadata>
        <title>Anonymous Access to Named Pipes and Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6834" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10940-5" />
        <description>Named Pipes and Shares can be accessed anonymously.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3378" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2996" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Length</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6836" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10372-1" />
        <description>For systems utilizing a logon ID as the individual identifier, passwords are not at a minimum of 14-characters.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3382" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:2999" version="1" class="compliance">
      <metadata>
        <title>Display of Last User Name</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11806" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10788-8" />
        <description>The system is configured to allow the display of the last user name on the logon screen.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3384" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3000" version="1" class="compliance">
      <metadata>
        <title>Audit Access to Global System Objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14228" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10487-7" />
        <description>Audit Access to Global System Objects is not turned off.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3388" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3001" version="1" class="compliance">
      <metadata>
        <title>Audit Backup and Restore Privileges</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14229" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10619-5" />
        <description>Audit of Backup and Restore Privileges is not turned off.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3392" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3002" version="1" class="compliance">
      <metadata>
        <title>Audit Policy Subcategory Setting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14230" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10112-1" />
        <description>Audit policy using subcategories is enabled.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3396" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3003" version="3" class="compliance">
      <metadata>
        <title>IPSec Exemptions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14232" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10018-0" />
        <description>IPSec Exemptions must be limited.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300300" comment="Verifies 'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic' is set to 'Only ISAKMP is exempt (recommended for Windows Server 2003)'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3004" version="1" class="compliance">
      <metadata>
        <title>UAC - Admin Approval Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14234" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11028-8" />
        <description>User Account Control - Built In Admin Approval Mode</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3005" version="3" class="compliance">
      <metadata>
        <title>UAC - Admin Elevation Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14235" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11023-9" />
        <description>User Account Control must, at a minimum, prompt administrators for consent on the secure desktop.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300500" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for credentials on the secure desktop'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300501" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300502" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for credentials'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300503" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3006" version="3" class="compliance">
      <metadata>
        <title>UAC - User Elevation Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14236" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10807-6" />
        <description>User Account Control must automatically deny standard user requests for elevation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:300600" comment="Verifies 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3007" version="1" class="compliance">
      <metadata>
        <title>UAC - Application Installations</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14237" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10794-6" />
        <description>User Account Control - Detect Application Installations</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3404" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3008" version="1" class="compliance">
      <metadata>
        <title>UAC - UIAccess Application Elevation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14239" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10570-0" />
        <description>User Account Control - Elevate UIAccess applications that are in secure locations</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3408" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3009" version="1" class="compliance">
      <metadata>
        <title>UAC - All Admin Approval Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14240" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10684-9" />
        <description>User Account Control - Run all admins in Admin Approval Mode</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3412" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3010" version="1" class="compliance">
      <metadata>
        <title>UAC - Secure Desktop Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14241" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10109-7" />
        <description>User Account Control - Switch to secure desktop</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3416" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3011" version="1" class="compliance">
      <metadata>
        <title>UAC - Non UAC Compliant Application Virtualization</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14242" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10865-4" />
        <description>User Account Control - Non UAC Compliant Application Virtualization</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3420" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3012" version="1" class="compliance">
      <metadata>
        <title>Enumerate Administrator Accounts on Elevation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14243" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11450-4" />
        <description>Require username and password to elevate a running application.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3424" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3013" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Prevent Password Saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14247" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11905-7" />
        <description>Terminal Services / Remote Desktop Service - Prevent password saving in the Remote Desktop Client</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3428" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3014" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Drive Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14249" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11709-3" />
        <description>Terminal Services / Remote Desktop Services - Local drives prevented from sharing with Terminal Servers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3432" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3019" version="1" class="compliance">
      <metadata>
        <title>Internet Download / Online Ordering</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14256" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11136-9" />
        <description>Web Publishing and online ordering wizards prevented from downloading list of providers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3448" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3022" version="1" class="compliance">
      <metadata>
        <title>Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14259" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11360-5" />
        <description>Prevent printing over HTTP.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3460" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3023" version="1" class="compliance">
      <metadata>
        <title>HTTP Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14260" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11563-4" />
        <description>Computer prevented from downloading print driver packages over HTTP.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3464" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3024" version="1" class="compliance">
      <metadata>
        <title>Windows Update Device Drive Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="14261" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10357-2" />
        <description>Windows is prevented from using Windows Update to search for drivers.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3468" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3026" version="1" class="compliance">
      <metadata>
        <title>Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11604-6" />
        <description>Windows Peer to Peer Networking</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3472" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3027" version="1" class="compliance">
      <metadata>
        <title>Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15667" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12074-1" />
        <description>Prohibit Network Bridge in Windows</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3476" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3029" version="3" class="compliance">
      <metadata>
        <title>Event Viewer Events.asp Links</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15672" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10693-0" />
        <description>Event Viewer Events.asp links must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:302900" comment="Verifies 'Turn off Event Viewer “Events.asp' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3031" version="1" class="compliance">
      <metadata>
        <title>Internet File Association Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15674" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10697-1" />
        <description>Disable Internet File Association Service</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3488" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3033" version="1" class="compliance">
      <metadata>
        <title>Order Prints Online</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15676" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11243-3" />
        <description>Order Prints Online</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3496" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3035" version="1" class="compliance">
      <metadata>
        <title>RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15682" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RSS Attachment Downloads</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3504" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3036" version="2" class="compliance">
      <metadata>
        <title>Windows Explorer - Shell Protocol Protected Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15683" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11530-3" />
        <description>Windows Explorer - Shell Protocol Protected Mode</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3508" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3037" version="2" class="compliance">
      <metadata>
        <title>Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15684" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10343-2" />
        <description>Windows Installer - IE Security Prompt</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3512" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3038" version="2" class="compliance">
      <metadata>
        <title>Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15685" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10906-6" />
        <description>Windows Installer - User Control</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3516" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3039" version="2" class="compliance">
      <metadata>
        <title>Windows Installer - Vendor Signed Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15686" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11468-6" />
        <description>Windows Installer - Vendor Signed Updates</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3520" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3040" version="3" class="compliance">
      <metadata>
        <title>Media Player - First Use Dialog Boxes</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15687" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11596-4" />
        <description>Users must not be presented with Privacy and Installation options on first use of Windows Media Player.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304000" comment="Verifies 'Do Not Show First Use Dialog Boxes' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3041" version="2" class="compliance">
      <metadata>
        <title>Network - Mapper I/O Driver</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15696" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10484-4" />
        <description>Network - Mapper I/O Driver</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3528" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3042" version="2" class="compliance">
      <metadata>
        <title>Network - Responder Driver</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15697" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11304-3" />
        <description>Network - Responder Driver</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3541" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3043" version="2" class="compliance">
      <metadata>
        <title>Network - WCN Wireless Configuration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15698" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11242-5" />
        <description>Network - Windows Connect Now Wireless Configuration</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3554" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3044" version="2" class="compliance">
      <metadata>
        <title>Network - Windows Connect Now Wizards</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15699" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11155-9" />
        <description>Network - Windows Connect Now Wizards</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3570" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3045" version="4" class="compliance">
      <metadata>
        <title>Device Install - PnP Interface Remote Access</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15700" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11248-2" />
        <description>Remote access to the Plug and Play interface must be disabled for device installation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304500" comment="Verifies 'Allow remote access to the Plug and Play interface' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3046" version="4" class="compliance">
      <metadata>
        <title>Device Install - Drivers System Restore Point</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15701" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10546-0" />
        <description>A system restore point must be created when a new device driver is installed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304600" comment="Verifies 'Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3047" version="4" class="compliance">
      <metadata>
        <title>Device Install - Generic Driver Error Report</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15702" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12274-7" />
        <description>An Error Report must not be sent when a generic device driver is installed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304700" comment="Verifies 'Do not send a Windows error report when a generic driver is installed on a device' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3048" version="2" class="compliance">
      <metadata>
        <title>Driver Install - Device Driver Search Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15703" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11319-1" />
        <description>Driver Install - Device Driver Search Prompt</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3574" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3049" version="4" class="compliance">
      <metadata>
        <title>Handwriting Recognition Error Reporting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15704" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11030-4" />
        <description>Errors in handwriting recognition on Tablet PCs must not be reported to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:304900" comment="Verifies 'Turn off handwriting recognition error reporting' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3050" version="4" class="compliance">
      <metadata>
        <title>Power Mgmt - Password Wake on Battery</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15705" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12088-1" />
        <description>Users must be prompted for a password on resume from sleep on battery. Applicable to Server 2008 R2 if the system is configured to sleep.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:305000" comment="Verifies 'Require a Password When a Computer Wakes (On Battery)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3051" version="4" class="compliance">
      <metadata>
        <title>Power Mgmt - Password Wake When Plugged In</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15706" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11651-7" />
        <description>Users must be prompted for a password on resume from sleep when plugged in. Applicable to Server 2008 R2 if the system is configured to sleep.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:305100" comment="Verifies 'Require a Password When a Computer Wakes (Plugged In)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3052" version="2" class="compliance">
      <metadata>
        <title>Remote Assistance - Session Logging</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15707" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11263-1" />
        <description>Remote Assistance - Session Logging</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3578" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3053" version="4" class="compliance">
      <metadata>
        <title>Game Explorer Information Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15709" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11739-0" />
        <description>Game explorer information must not be downloaded from Windows Metadata Services.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:305300" comment="Verifies ''Turn off downloading of game information' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3054" version="2" class="compliance">
      <metadata>
        <title>Defender - SpyNet Reporting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15713" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11638-4" />
        <description>Defender - SpyNet Reporting</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3582" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3058" version="2" class="compliance">
      <metadata>
        <title>Windows Explorer - Heap Termination</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15718" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10981-9" />
        <description>Windows Explorer - Heap Termination</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3594" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3060" version="3" class="compliance">
      <metadata>
        <title>Media DRM - Internet Access</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15722" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11052-8" />
        <description>Windows Media Digital Rights Management (DRM) must be prevented from accessing the Internet.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306000" comment="Verifies 'Prevent Windows Media DRM Internet Access' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3061" version="4" class="compliance">
      <metadata>
        <title>Software Certificate Installation Files</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15823" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Software certificate installation files must be removed from a system.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306100" comment="Software certificate installation files (*.p12 *.pfx) are not present on the system" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3062" version="3" class="compliance">
      <metadata>
        <title>UAC - UIAccess Secure Desktop</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15991" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10534-6" />
        <description>UIAccess applications must not be allowed to prompt for elevation without using the secure desktop.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306200" comment="Verifies 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3064" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - COM Port Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15997" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10600-5" />
        <description>Users must be prevented from mapping local COM ports and redirecting data from the Remote Desktop Session Host to local COM ports.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306400" comment="Verifies 'Do not allow COM port redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3065" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - LPT Port Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15998" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11623-6" />
        <description>Users must be prevented from mapping local LPT ports and redirecting data from the Remote Desktop Session Host to local LPT ports.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306500" comment="Verifies 'Do not allow LPT port redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3066" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - PNP Device Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15999" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11128-6" />
        <description>Users must be prevented from redirecting Plug and Play devices to the Remote Desktop Session Host.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306600" comment="Verifies 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3067" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - Smart Card Device Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="16000" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11517-0" />
        <description>The system must be configured to ensure smart card devices can be redirected to the Remote Desktop session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306700" comment="Verifies 'Do not allow smart card device redirection' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3068" version="3" class="compliance">
      <metadata>
        <title>TS/RDS - Printer Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="16001" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10977-7" />
        <description>The system must be configured to allow only the default client printer to be redirected in the Remote Desktop session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:306800" comment="Verifies 'Redirect only the default client printer' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3070" version="1" class="compliance">
      <metadata>
        <title>UAC - Application Elevations</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="16008" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10922-3" />
        <description>UAC - Application Elevations</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3609" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3071" version="1" class="compliance">
      <metadata>
        <title>Windows Customer Experience Improvement Program</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="16020" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11354-8" />
        <description>Windows Customer Experience Improvement Program is disabled.</description>
      </metadata>
      <criteria operator="OR">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3613" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3072" version="3" class="compliance">
      <metadata>
        <title>UR: Debug Programs</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="18010" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10915-7" />
        <description>Unauthorized accounts must not have the Debug programs user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307200" comment="Debug Programs - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3073" version="3" class="compliance">
      <metadata>
        <title>SPN Target Name Validation Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21950" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10617-9" />
        <description>The service principal name (SPN) target name validation level must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307300" comment="Verifies 'Microsoft network server: Server SPN target name validation level' is set to 'Off'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3074" version="3" class="compliance">
      <metadata>
        <title>Computer Identity Authentication for NTLM</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21951" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10817-5" />
        <description>Services using Local System that use negotiate when reverting to NTLM authentication must use the computer identity vs. authenticating anonymously.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307400" comment="Verifies 'Network Security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3075" version="3" class="compliance">
      <metadata>
        <title>NTLM NULL Session Fallback</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21952" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10812-6" />
        <description>NTLM must be prevented from falling back to a Null session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307500" comment="Verifies 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3076" version="3" class="compliance">
      <metadata>
        <title>PKU2U Online Identities Authentication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21953" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10839-9" />
        <description>PKU2U authentication using online identities must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307600" comment="Verifies 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3077" version="3" class="compliance">
      <metadata>
        <title>Kerberos Encryption Types</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21954" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10843-1" />
        <description>Kerberos encryption types must be configured to prevent the use of DES encryption suites.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307700" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'RC4_HMAC_MD5', 'AES128_HMAC_SHA1', 'AES256_HMAC_SHA1', 'Future encryption types'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3078" version="3" class="compliance">
      <metadata>
        <title>IPv6 Source Routing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21955" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10888-6" />
        <description>IPv6 source routing must be configured to the highest protection level.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307800" comment="Verifies 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3079" version="3" class="compliance">
      <metadata>
        <title>IPv6 TCP Data Retransmissions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21956" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10804-3" />
        <description>IPv6 TCP data retransmissions must be configured to prevent resources from becoming exhausted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:307900" comment="Verifies 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3080" version="4" class="compliance">
      <metadata>
        <title>Elevate when setting a network’s location</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21960" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11610-3" />
        <description>Domain users must be required to elevate when setting a network’s location.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308000" comment="Verifies 'Require domain users to elevate when setting a network's location' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3081" version="4" class="compliance">
      <metadata>
        <title>Direct Access - Route Through Internal Network</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21961" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11300-1" />
        <description>All Direct Access traffic must be routed through the internal network.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308100" comment="Verifies 'Route all traffic through the internal network' is set to 'Enabled: Enabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3082" version="4" class="compliance">
      <metadata>
        <title>Windows Update Point and Print Driver Search</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21963" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11976-8" />
        <description>Windows Update must be prevented from searching for point and print drivers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308200" comment="Verifies 'Extend Point and Print connection to search Windows Update' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3083" version="4" class="compliance">
      <metadata>
        <title>Prevent device metadata retrieval from Internet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21964" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11589-9" />
        <description>Device metadata retrieval from the Internet must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308300" comment="Verifies 'Prevent device metadata retrieval from internet' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3084" version="4" class="compliance">
      <metadata>
        <title>Prevent Windows Update for device driver search</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21965" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11787-9" />
        <description>Device driver searches using Windows Update must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308400" comment="Verifies 'Specify search order for device driver source locations' is set to 'Enabled: Do not search Windows Update'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3085" version="4" class="compliance">
      <metadata>
        <title>MSDT Interactive Communication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21967" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10855-5" />
        <description>Microsoft Support Diagnostic Tool (MSDT) interactive communication with Microsoft must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308500" comment="Verifies 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3086" version="4" class="compliance">
      <metadata>
        <title>Windows Online Troubleshooting Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21969" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11161-7" />
        <description>Access to Windows Online Troubleshooting Service (WOTS) must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308600" comment="Verifies 'Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3087" version="4" class="compliance">
      <metadata>
        <title>Disable PerfTrack</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21970" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11889-3" />
        <description>Responsiveness events must be prevented from being aggregated and sent to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308700" comment="Verifies 'Enable/Disable PerfTrack' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3088" version="4" class="compliance">
      <metadata>
        <title>Application Compatibility Program Inventory</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21971" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11043-7" />
        <description>The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308800" comment="Verifies 'Turn off Program Inventory' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3089" version="4" class="compliance">
      <metadata>
        <title>Autoplay for non-volume devices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21973" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11375-3" />
        <description>Autoplay must be turned off for non-volume devices.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:308900" comment="Verifies 'Turn off Autoplay for non-volume devices' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3090" version="4" class="compliance">
      <metadata>
        <title>Turn Off Game Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21974" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11807-5" />
        <description>Downloading of game update information must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309000" comment="Verifies 'Turn off game updates' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3091" version="4" class="compliance">
      <metadata>
        <title>Prevent Joining Homegroup</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21975" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10691-4" />
        <description>The system must be prevented from joining a homegroup.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309100" comment="Verifies 'Prevent the computer from joining a homegroup' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3092" version="4" class="compliance">
      <metadata>
        <title>Windows Anytime Upgrade</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21978" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10544-5" />
        <description>Windows Anytime Upgrade must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309200" comment="Verifies 'Prevent Windows Anytime Upgrade from running' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3093" version="4" class="compliance">
      <metadata>
        <title>Explorer Data Execution Prevention</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="21980" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-12161-6" />
        <description>Explorer Data Execution Prevention must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309300" comment="Verifies 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3094" version="4" class="compliance">
      <metadata>
        <title>Default Autorun Behavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="22692" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11431-4" />
        <description>The default autorun behavior must be configured to prevent autorun commands.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309400" comment="Verifies 'Default behavior for AutoRun' is set to 'Enabled:Do not execute any autorun commands'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3095" version="3" class="compliance">
      <metadata>
        <title>Restrict Anonymous SAM Enumeration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26283" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10027-1" />
        <description>Anonymous enumeration of SAM accounts must not be allowed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309500" comment="Verifies 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3096" version="2" class="compliance">
      <metadata>
        <title>Legal Banner Dialog Box Title</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26359" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10010-7" />
        <description>The Windows dialog box title for the legal banner must be configured.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309600" comment="Legal Notice Caption - DoD Notice and Consent Banner" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:309601" comment="Legal Notice Caption - US Department of Defense Warning Statement" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3100" version="2" class="compliance">
      <metadata>
        <title>UR: Allow log on locally</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26472" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10853-0" />
        <description>Unauthorized accounts must not have the Allow log on locally user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310000" comment="Allow log on locally - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3101" version="2" class="compliance">
      <metadata>
        <title>UR: Allow log on through Remote Desktop Services</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26473" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10858-9" />
        <description>Unauthorized accounts must not have the Allow log on through Remote Desktop Services user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310100" comment="Allow log on through Remote Desktop Services - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3102" version="2" class="compliance">
      <metadata>
        <title>UR: Back up files and directories</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26474" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10880-3" />
        <description>Unauthorized accounts must not have the Back up files and directories user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310200" comment="Back up files and directories - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3103" version="2" class="compliance">
      <metadata>
        <title>UR: Bypass traverse checking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26475" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10369-7" />
        <description>Unauthorized accounts must not have the Bypass traverse checking user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310300" comment="Bypass traverse checking - Administrators, Authenticated Users, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3104" version="2" class="compliance">
      <metadata>
        <title>UR: Change the system time</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26476" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10122-0" />
        <description>Unauthorized accounts must not have the Change the system time user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310400" comment="Change the system time - Administrators, Local Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3105" version="2" class="compliance">
      <metadata>
        <title>UR: Change the time zone</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26477" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10897-7" />
        <description>Unauthorized accounts must not have the Change the time zone user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310500" comment="Change the time zone - Administrators, Local Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3106" version="2" class="compliance">
      <metadata>
        <title>UR: Create a pagefile</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26478" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9937-4" />
        <description>Unauthorized accounts must not have the Create a pagefile user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310600" comment="Create a pagefile - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3107" version="2" class="compliance">
      <metadata>
        <title>UR: Create a token object</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26479" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10770-6" />
        <description>Unauthorized accounts must not have the Create a token object user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310700" comment="Create a token object - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3108" version="2" class="compliance">
      <metadata>
        <title>UR: Create global objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26480" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10792-0" />
        <description>Unauthorized accounts must not have the Create global objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310800" comment="Create global objects - Administrators, Service, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3109" version="2" class="compliance">
      <metadata>
        <title>UR: Create permanent shared objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26481" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10796-1" />
        <description>Unauthorized accounts must not have the Create permanent shared objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:310900" comment="Create permanent shared objects - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3110" version="3" class="compliance">
      <metadata>
        <title>UR: Create symbolic links</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26482" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10911-6" />
        <description>Unauthorized accounts must not have the Create symbolic links user right.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311000" comment="Create symbolic links - Administrators" />
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:311002" comment="Create symbolic links - VMs and Administrators" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:311001" comment="Hyper-V installed" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3111" version="3" class="compliance">
      <!--This check for the Deny log on as a batch will return an Unknown with Policy Auditor 5.3 due a case sensitivity issue with user right name as defined in the schema - sedenyremoteInteractivelogonright.-->
      <metadata>
        <title>UR: Deny log on as a batch job - Domain Controllers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26483" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10596-5" />
        <description>The Deny log on as a batch job user right on domain controllers must be configured to prevent unauthenticated access.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311100" comment="Deny log on as a batch job - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3112" version="3" class="compliance">
      <metadata>
        <title>UR: Deny log on as a service - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26484" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10226-9" />
        <description>The Deny log on as a service user right on domain controllers must be configured to include no accounts or groups.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311200" comment="Deny log on as a service - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3113" version="3" class="compliance">
      <metadata>
        <title>UR: Deny log on locally - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26485" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10750-8" />
        <description>The Deny log on locally user right on domain controllers must be configured to prevent unauthenticated access.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311300" comment="Deny log on locally - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3114" version="3" class="compliance">
      <!--This check for the Deny log on through Remote Desktop Services will return an Unknown with Policy Auditor 5.3 due a case sensitivity issue with user right name as defined in the schema - sedenybatchLogonright.-->
      <metadata>
        <title>UR: Deny log on through Remote Desktop Services - Domain Controllers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26486" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10878-7" />
        <description>The Deny log on through Remote Desktop Services user right on domain controllers must be configured to prevent unauthenticated access.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311400" comment="Deny log on through Remote Desktop Services - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3115" version="2" class="compliance">
      <metadata>
        <title>UR: Enable computer and user accounts to be trusted for delegation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26487" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10618-7" />
        <description>Unauthorized accounts must not have the Enable computer and user accounts to be trusted for delegation user right on domain controllers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311500" comment="Enable computer and user accounts to be trusted for delegation - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3116" version="2" class="compliance">
      <metadata>
        <title>UR: Force shutdown from a remote system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26488" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10785-4" />
        <description>Unauthorized accounts must not have the Force shutdown from a remote system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311600" comment="Force shutdown from a remote system - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3117" version="2" class="compliance">
      <metadata>
        <title>UR: Generate security audits</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26489" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10274-9" />
        <description>Unauthorized accounts must not have the Generate security audits user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311700" comment="Generate security audits - Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3118" version="2" class="compliance">
      <metadata>
        <title>UR: Impersonate a client after authentication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26490" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9946-5" />
        <description>Unauthorized accounts must not have the Impersonate a client after authentication user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:311800" comment="Impersonate a client after authentication - Administrators, Service, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3120" version="2" class="compliance">
      <metadata>
        <title>UR: Increase scheduling priority</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26492" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9961-4" />
        <description>Unauthorized accounts must not have the Increase scheduling priority user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312000" comment="Increase scheduling priority - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3121" version="2" class="compliance">
      <metadata>
        <title>UR: Load and unload device drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26493" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10202-0" />
        <description>Unauthorized accounts must not have the Load and unload device drivers user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312100" comment="Load and unload device drivers - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3122" version="2" class="compliance">
      <metadata>
        <title>UR: Lock pages in memory</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26494" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10955-3" />
        <description>Unauthorized accounts must not have the Lock pages in memory user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312200" comment="Lock pages in memory - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3125" version="2" class="compliance">
      <metadata>
        <title>UR: Modify an object label</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26497" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10567-6" />
        <description>Unauthorized accounts must not have the Modify an object label user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312500" comment="Modify an object label - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3126" version="2" class="compliance">
      <metadata>
        <title>UR: Modify firmware environment values</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26498" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10659-1" />
        <description>Unauthorized accounts must not have the Modify firmware environment values user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312600" comment="Modify firmware environment values - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3127" version="2" class="compliance">
      <metadata>
        <title>UR: Perform volume maintenance tasks</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26499" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-9984-6" />
        <description>Unauthorized accounts must not have the Perform volume maintenance tasks user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312700" comment="Perform volume maintenance tasks - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3128" version="2" class="compliance">
      <metadata>
        <title>UR: Profile single process</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26500" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10458-8" />
        <description>Unauthorized accounts must not have the Profile single process user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312800" comment="Profile single process - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3129" version="2" class="compliance">
      <metadata>
        <title>UR: Profile system performance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26501" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10193-1" />
        <description>Unauthorized accounts must not have the Profile system performance user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:312900" comment="Profile system performance - Administrators, NT Service\WdiServiceHost" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3130" version="2" class="compliance">
      <metadata>
        <title>UR: Remove computer from docking station</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26502" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10969-4" />
        <description>Unauthorized accounts must not have the Remove computer from docking station user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313000" comment="Remove computer from docking station - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3131" version="2" class="compliance">
      <metadata>
        <title>UR: Replace a process level token</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26503" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10599-9" />
        <description>Unauthorized accounts must not have the Replace a process level token user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313100" comment="Replace a process level token - Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3132" version="2" class="compliance">
      <metadata>
        <title>UR: Restore files and directories</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10805-0" />
        <description>Unauthorized accounts must not have the Restore files and directories user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313200" comment="Restore files and directories - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3133" version="2" class="compliance">
      <metadata>
        <title>UR: Shut down the system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26505" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10439-8" />
        <description>Unauthorized accounts must not have the Shut down the system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313300" comment="Shut down the system - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3134" version="2" class="compliance">
      <metadata>
        <title>UR: Take ownership of files or other objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26506" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10954-6" />
        <description>Unauthorized accounts must not have the Take ownership of files or other objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313400" comment="Take ownership of files or other objects - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3135" version="2" class="compliance">
      <metadata>
        <title>Audit - Credential Validation - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26529" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Credential Validation successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Credential Validation - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313500" comment="Audit - Credential Validation - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313501" comment="Audit - Credential Validation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3136" version="2" class="compliance">
      <metadata>
        <title>Audit - Credential Validation - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26530" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Credential Validation failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Credential Validation - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313600" comment="Audit - Credential Validation - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313501" comment="Audit - Credential Validation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3137" version="2" class="compliance">
      <metadata>
        <title>Audit - Computer Account Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26531" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Computer Account Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Computer Account Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313700" comment="Audit - Computer Account Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313701" comment="Audit - Computer Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3138" version="2" class="compliance">
      <metadata>
        <title>Audit - Computer Account Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26532" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Computer Account Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Computer Account Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313800" comment="Audit - Computer Account Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313701" comment="Audit - Computer Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3139" version="3" class="compliance">
      <metadata>
        <title>Audit - Other Account Management Events - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26533" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Other Account Management Events successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Other Account Management Events - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313900" comment="Audit - Other Account Management Events - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313901" comment="Audit - Other Account Management Events - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3140" version="3" class="compliance">
      <metadata>
        <title>Audit - Other Account Management Events - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26534" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Other Account Management Events failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Other Account Management Events - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314000" comment="Audit - Other Account Management Events - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:313901" comment="Audit - Other Account Management Events - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3141" version="2" class="compliance">
      <metadata>
        <title>Audit - Security Group Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26535" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Security Group Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security Group Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314100" comment="Audit - Security Group Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314101" comment="Audit - Security Group Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3142" version="2" class="compliance">
      <metadata>
        <title>Audit - Security Group Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26536" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Security Group Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security Group Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314200" comment="Audit - Security Group Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314101" comment="Audit - Security Group Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3143" version="2" class="compliance">
      <metadata>
        <title>Audit - User Account Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26537" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - User Account Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - User Account Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314300" comment="Audit - User Account Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314301" comment="Audit - User Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3144" version="2" class="compliance">
      <metadata>
        <title>Audit - User Account Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26538" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - User Account Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - User Account Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314400" comment="Audit - User Account Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314301" comment="Audit - User Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3145" version="2" class="compliance">
      <metadata>
        <title>Audit - Process Creation - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26539" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Detailed Tracking - Process Creation successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Process Creation - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314500" comment="Audit - Process Creation - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314501" comment="Audit - Process Creation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3146" version="2" class="compliance">
      <metadata>
        <title>Audit - Logoff - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26540" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logoff successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logoff - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314600" comment="Audit - Logoff - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314601" comment="Audit - Logoff - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3147" version="2" class="compliance">
      <metadata>
        <title>Audit - Logon - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26541" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logon successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logon - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314700" comment="Audit - Logon - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314701" comment="Audit - Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3148" version="2" class="compliance">
      <metadata>
        <title>Audit - Logon - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26542" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logon failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logon - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314800" comment="Audit - Logon - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314701" comment="Audit - Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3149" version="2" class="compliance">
      <metadata>
        <title>Audit - Special Logon - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26543" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Special Logon successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Special Logon - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314900" comment="Audit - Special Logon - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:314901" comment="Audit - Special Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3152" version="2" class="compliance">
      <metadata>
        <title>Audit - Audit Policy Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26546" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Audit Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315200" comment="Audit - Audit Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315201" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3153" version="2" class="compliance">
      <metadata>
        <title>Audit - Audit Policy Change - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26547" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Audit Policy Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315300" comment="Audit - Audit Policy Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315201" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3154" version="2" class="compliance">
      <metadata>
        <title>Audit - Authentication Policy Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26548" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Authentication Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Authentication Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315400" comment="Audit - Authentication Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315401" comment="Audit - Authentication Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3155" version="2" class="compliance">
      <metadata>
        <title>Audit - Sensitive Privilege Use - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26549" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Privilege Use - Sensitive Privilege Use successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Sensitive Privilege Use - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315500" comment="Audit - Sensitive Privilege Use - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315501" comment="Audit - Sensitive Privilege Use - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3156" version="3" class="compliance">
      <metadata>
        <title>Audit - Sensitive Privilege Use - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26550" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Privilege Use - Sensitive Privilege Use failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Sensitive Privilege Use - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315600" comment="Audit - Sensitive Privilege Use - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315501" comment="Audit - Sensitive Privilege Use - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3157" version="2" class="compliance">
      <metadata>
        <title>Audit - IPSec Driver - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26551" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - IPsec Driver successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - IPSec Driver - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315700" comment="Audit - IPSec Driver - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315701" comment="Audit - IPSec Driver - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3158" version="2" class="compliance">
      <metadata>
        <title>Audit - IPSec Driver - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26552" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - IPsec Driver failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - IPSec Driver - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315800" comment="Audit - IPSec Driver - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315701" comment="Audit - IPSec Driver - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3159" version="2" class="compliance">
      <metadata>
        <title>Audit - Security State Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26553" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security State Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security State Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315900" comment="Audit - Security State Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315901" comment="Audit - Security State Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3160" version="2" class="compliance">
      <metadata>
        <title>Audit - Security State Change - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26554" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security State Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security State Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316000" comment="Audit - Security State Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:315901" comment="Audit - Security State Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3161" version="2" class="compliance">
      <metadata>
        <title>Audit - Security System Extension - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26555" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security System Extension successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security System Extension - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316100" comment="Audit - Security System Extension - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316101" comment="Audit - Security System Extension - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3162" version="2" class="compliance">
      <metadata>
        <title>Audit - Security System Extension - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26556" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security System Extension failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security System Extension - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316200" comment="Audit - Security System Extension - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316101" comment="Audit - Security System Extension - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3163" version="2" class="compliance">
      <metadata>
        <title>Audit - System Integrity - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26557" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - System Integrity successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - System Integrity - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316300" comment="Audit - System Integrity - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316301" comment="Audit - System Integrity - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3164" version="2" class="compliance">
      <metadata>
        <title>Audit - System Integrity - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26558" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - System Integrity failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - System Integrity - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316400" comment="Audit - System Integrity - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316301" comment="Audit - System Integrity - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3165" version="4" class="compliance">
      <metadata>
        <title>6to4 State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26575" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11356-3" />
        <description>The 6to4 IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316500" comment="Verifies 'Set 6to4 State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3166" version="4" class="compliance">
      <metadata>
        <title>IP-HTTPS State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26576" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10832-4" />
        <description>The IP-HTTPS IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316600" comment="Verifies 'IP-HTTPS State' is set to 'Enabled: Disabled State'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316601" comment="Verifies 'IP-HTTPS URL:' is set to 'about:blank'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3167" version="4" class="compliance">
      <metadata>
        <title>ISATAP State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26577" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11141-9" />
        <description>The ISATAP IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316700" comment="Verifies 'ISATAP State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3168" version="4" class="compliance">
      <metadata>
        <title>Teredo State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26578" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11865-3" />
        <description>The Teredo IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316800" comment="Verifies 'Teredo State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3169" version="4" class="compliance">
      <metadata>
        <title>Maximum Log Size - Application</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26579" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11143-5" />
        <description>The Application event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:316900" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3170" version="4" class="compliance">
      <metadata>
        <title>Maximum Log Size - Security</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26580" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11033-8" />
        <description>The Security event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:317000" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:196608'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3171" version="4" class="compliance">
      <metadata>
        <title>Maximum Log Size - Setup</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26581" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11717-6" />
        <description>The Setup event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:317100" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3172" version="4" class="compliance">
      <metadata>
        <title>Maximum Log Size - System</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26582" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11174-0" />
        <description>The System event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:317200" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3173" version="3" class="compliance">
      <metadata>
        <title>Device Install Software Request Error Report</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="28504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11336-5" />
        <description>Windows must be prevented from sending an error report when a device driver requests additional software during installation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:317300" comment="Verifies 'Prevent Windows from sending an error report when a device driver requests additional software during installation' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3188" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5286" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Minimum Password Age</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3189" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3189" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Age !&lt; 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6028" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Minimum Password Age !&lt; 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:318900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3194" version="1" class="compliance">
      <metadata>
        <title>EnableForcedLogoff</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5064" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>EnableForcedLogoff</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3195" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3196" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3197" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3195" version="1" class="compliance">
      <metadata>
        <title>VC - EnableForcedLogoff == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5605" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - EnableForcedLogoff == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3196" version="1" class="compliance">
      <metadata>
        <title>VE - EnableForcedLogoff Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5606" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - EnableForcedLogoff Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3197" version="1" class="compliance">
      <metadata>
        <title>TM - EnableForcedLogoff is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5607" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - EnableForcedLogoff is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3198" version="1" class="compliance">
      <metadata>
        <title>EnablePlainTextPassword</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5095" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>EnablePlainTextPassword</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3199" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3200" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3199" version="1" class="compliance">
      <metadata>
        <title>VC - EnablePlainTextPassword == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5709" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - EnablePlainTextPassword == 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:319901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3200" version="1" class="compliance">
      <metadata>
        <title>VE - EnablePlainTextPassword Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5710" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - EnablePlainTextPassword Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3201" version="1" class="compliance">
      <metadata>
        <title>TM - EnablePlainTextPassword is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5711" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - EnablePlainTextPassword is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3206" version="1" class="compliance">
      <metadata>
        <title>LMCompatibilityLevel</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5068" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>LMCompatibilityLevel</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3207" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3208" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3209" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3207" version="1" class="compliance">
      <metadata>
        <title>VC - LMCompatibilityLevel = 5</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5617" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - LMCompatibilityLevel = 5</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3208" version="1" class="compliance">
      <metadata>
        <title>VE - LMCompatibilityLevel Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5618" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - LMCompatibilityLevel Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3209" version="1" class="compliance">
      <metadata>
        <title>TM - LMCompatibilityLevel is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5619" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - LMCompatibilityLevel is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:320901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3210" version="1" class="compliance">
      <metadata>
        <title>SAS: Ctrl+Alt+Del</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5300" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>SAS: Ctrl+Alt+Del</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3211" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3211" version="1" class="compliance">
      <metadata>
        <title>SAS: Ctrl+Alt+Del</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>SAS: Ctrl+Alt+Del</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:321100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3220" version="1" class="compliance">
      <metadata>
        <title>EnableSecuritySignature</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5067" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>EnableSecuritySignature</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3221" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3222" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3223" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3221" version="1" class="compliance">
      <metadata>
        <title>VC - EnableSecuritySignature == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5614" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - EnableSecuritySignature == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3222" version="1" class="compliance">
      <metadata>
        <title>VE - EnableSecuritySignature Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5615" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - EnableSecuritySignature Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3223" version="1" class="compliance">
      <metadata>
        <title>TM - EnableSecuritySignature is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5616" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - EnableSecuritySignature is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3224" version="1" class="compliance">
      <metadata>
        <title>RequireSignOrSeal</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5223" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RequireSignOrSeal</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3225" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3226" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3227" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3225" version="1" class="compliance">
      <metadata>
        <title>VC - RequireSignOrSeal == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5921" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - RequireSignOrSeal == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3226" version="1" class="compliance">
      <metadata>
        <title>VE - RequireSignOrSeal Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5922" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - RequireSignOrSeal Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3227" version="1" class="compliance">
      <metadata>
        <title>TM - RequireSignOrSeal is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5923" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - RequireSignOrSeal is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3228" version="1" class="compliance">
      <metadata>
        <title>SealSecureChannel</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5235" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>SealSecureChannel</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3229" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3230" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3231" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3229" version="1" class="compliance">
      <metadata>
        <title>VC - SealSecureChannel == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5925" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - SealSecureChannel == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:322901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3230" version="1" class="compliance">
      <metadata>
        <title>VE - SealSecureChannel Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5926" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - SealSecureChannel Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3231" version="1" class="compliance">
      <metadata>
        <title>TM - SealSecureChannel is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5927" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - SealSecureChannel is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3232" version="1" class="compliance">
      <metadata>
        <title>SignSecureChannel</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5236" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>SignSecureChannel</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3233" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3234" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3235" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3233" version="1" class="compliance">
      <metadata>
        <title>VC - SignSecureChannel == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5928" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - SignSecureChannel == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3234" version="1" class="compliance">
      <metadata>
        <title>VE - SignSecureChannel Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5929" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - SignSecureChannel Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3235" version="1" class="compliance">
      <metadata>
        <title>TM - SignSecureChannel is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5930" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - SignSecureChannel is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3236" version="1" class="compliance">
      <metadata>
        <title>DisablePasswordChange == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5034" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DisablePasswordChange == 0</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3237" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3238" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3239" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3237" version="1" class="compliance">
      <metadata>
        <title>VC - DisablePasswordChange == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5524" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - DisablePasswordChange == 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3238" version="1" class="compliance">
      <metadata>
        <title>VE - DisablePasswordChange</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5525" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - DisablePasswordChange</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3239" version="1" class="compliance">
      <metadata>
        <title>TM - DisablePasswordChange</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5526" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - DisablePasswordChange</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:323901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3240" version="1" class="compliance">
      <metadata>
        <title>EnableSecuritySignature</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5066" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>EnableSecuritySignature</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3241" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3242" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3243" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3241" version="1" class="compliance">
      <metadata>
        <title>VC - EnableSecuritySignature == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5611" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - EnableSecuritySignature == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3242" version="1" class="compliance">
      <metadata>
        <title>VE - EnableSecuritySignature Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5612" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - EnableSecuritySignature Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3243" version="1" class="compliance">
      <metadata>
        <title>TM - EnableSecuritySignature is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5613" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - EnableSecuritySignature is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3244" version="1" class="compliance">
      <metadata>
        <title>AllocateDASD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5061" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>AllocateDASD</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3245" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3246" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3247" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3245" version="1" class="compliance">
      <metadata>
        <title>VC - AllocateDASD == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5596" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - AllocateDASD == 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3246" version="1" class="compliance">
      <metadata>
        <title>VE - AllocateDASD Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5598" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - AllocateDASD Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3247" version="1" class="compliance">
      <metadata>
        <title>TM - AllocateDASD is REG_SZ</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5600" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - AllocateDASD is REG_SZ</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3248" version="1" class="compliance">
      <metadata>
        <title>PasswordExpiryWarning</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5040" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>PasswordExpiryWarning</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3249" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3250" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3251" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3249" version="1" class="compliance">
      <metadata>
        <title>VC - PasswordExpiryWarning == 14</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5534" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - PasswordExpiryWarning == 14</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:324901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3250" version="1" class="compliance">
      <metadata>
        <title>TM - PasswordExpiryWarning == 14</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5535" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - PasswordExpiryWarning == 14</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3251" version="1" class="compliance">
      <metadata>
        <title>VE - PasswordExpiryWarning == 14</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5536" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - PasswordExpiryWarning == 14</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3252" version="1" class="compliance">
      <metadata>
        <title>ProtectionMode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5098" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>ProtectionMode</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3253" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3254" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3255" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3253" version="1" class="compliance">
      <metadata>
        <title>VC - ProtectionMode == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5718" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - ProtectionMode == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3254" version="1" class="compliance">
      <metadata>
        <title>VE - ProtectionMode Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5719" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - ProtectionMode Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3255" version="1" class="compliance">
      <metadata>
        <title>TM - ProtectionMode is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5720" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - ProtectionMode is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3256" version="1" class="compliance">
      <metadata>
        <title>AutoDisconnect</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5063" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>AutoDisconnect</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3257" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3258" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3259" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3257" version="1" class="compliance">
      <metadata>
        <title>VC - AutoDisconnect &lt;= 15</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5602" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - AutoDisconnect &lt;= 15</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3258" version="1" class="compliance">
      <metadata>
        <title>VE - AutoDisconnect Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5603" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - AutoDisconnect Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3259" version="1" class="compliance">
      <metadata>
        <title>TM - AutoDisconnect is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5604" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - AutoDisconnect is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:325901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3260" version="1" class="compliance">
      <metadata>
        <title>NoDriveTypeAutoRun</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5079" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NoDriveTypeAutoRun</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3261" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3262" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3263" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3261" version="1" class="compliance">
      <metadata>
        <title>VC - NoDriveTypeAutoRun == 255</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5644" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - NoDriveTypeAutoRun == 255</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3262" version="1" class="compliance">
      <metadata>
        <title>VE - NoDriveTypeAutoRun Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5645" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - NoDriveTypeAutoRun Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3263" version="1" class="compliance">
      <metadata>
        <title>TM - NoDriveTypeAutoRun is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5646" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - NoDriveTypeAutoRun is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3264" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Solicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5231" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Remote Assistance - Solicited Remote Assistance</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3265" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3266" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3267" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3265" version="1" class="compliance">
      <metadata>
        <title>Solicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5804" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Solicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3266" version="1" class="compliance">
      <metadata>
        <title>Solicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5805" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Solicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3267" version="1" class="compliance">
      <metadata>
        <title>Solicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5806" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Solicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3268" version="1" class="compliance">
      <metadata>
        <title>Limit Blank Passwords</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5086" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Limit Blank Passwords</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3269" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3270" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3271" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3269" version="1" class="compliance">
      <metadata>
        <title>V0003344 VE LimitBlankPasswordUse</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5671" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003344 VE LimitBlankPasswordUse</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:326900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3270" version="1" class="compliance">
      <metadata>
        <title>V0003344 TM LimitBlankPasswordUse</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5672" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003344 TM LimitBlankPasswordUse</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3271" version="1" class="compliance">
      <metadata>
        <title>V0003344 VC LimitBlankPasswordUse</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5673" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003344 VC LimitBlankPasswordUse</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3272" version="2" class="compliance">
      <metadata>
        <title>Undock Without Logging On</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5087" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Undock Without Logging On</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3273" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3274" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3275" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3273" version="1" class="compliance">
      <metadata>
        <title>TM Undockwithoutlogon (DWORD)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5676" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM Undockwithoutlogon (DWORD)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3274" version="1" class="compliance">
      <metadata>
        <title>VE Undockwithoutlogon (DWORD)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5681" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE Undockwithoutlogon (DWORD)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3275" version="1" class="compliance">
      <metadata>
        <title>VC Undockwithoutlogon = 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5682" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC Undockwithoutlogon = 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:327501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3280" version="1" class="compliance">
      <metadata>
        <title>RequireStrongKey</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5094" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RequireStrongKey</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3281" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3282" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3283" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3281" version="1" class="compliance">
      <metadata>
        <title>VC - RequireStrongKey == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5706" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - RequireStrongKey == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3282" version="1" class="compliance">
      <metadata>
        <title>VE - RequireStrongKey Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5707" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - RequireStrongKey Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3283" version="1" class="compliance">
      <metadata>
        <title>TM - RequireStrongKey is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5708" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - RequireStrongKey is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3284" version="1" class="compliance">
      <metadata>
        <title>DisableDomainCreds</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5046" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DisableDomainCreds</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3285" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3286" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3287" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3285" version="1" class="compliance">
      <metadata>
        <title>V0003376 VC - DisableDomainCreds == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5551" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003376 VC - DisableDomainCreds == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3286" version="1" class="compliance">
      <metadata>
        <title>V0003376 VE - DisableDomainCreds</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5552" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003376 VE - DisableDomainCreds</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3287" version="1" class="compliance">
      <metadata>
        <title>V0003376 TM - DisableDomainCreds</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5553" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003376 TM - DisableDomainCreds</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3288" version="1" class="compliance">
      <metadata>
        <title>ForceGuest</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5048" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>ForceGuest</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3289" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3290" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3291" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3289" version="1" class="compliance">
      <metadata>
        <title>V0003378 VC - ForceGuest == 0</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5557" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003378 VC - ForceGuest == 0</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:328901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3290" version="1" class="compliance">
      <metadata>
        <title>V0003378 VE - ForceGuest</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5558" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003378 VE - ForceGuest</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3291" version="1" class="compliance">
      <metadata>
        <title>V0003378 TM - ForceGuest</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5559" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003378 TM - ForceGuest</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3292" version="1" class="compliance">
      <metadata>
        <title>NoLMHash</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5049" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NoLMHash</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3293" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3294" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3295" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3293" version="1" class="compliance">
      <metadata>
        <title>V0003379 VC - NoLMHash == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5560" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003379 VC - NoLMHash == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3294" version="1" class="compliance">
      <metadata>
        <title>V0003379 VE - NoLMHash</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5561" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003379 VE - NoLMHash</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3295" version="1" class="compliance">
      <metadata>
        <title>V0003379 TM - NoLMHash</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5562" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003379 TM - NoLMHash</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3296" version="1" class="compliance">
      <metadata>
        <title>LdapClientIntegrity</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5050" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>LdapClientIntegrity</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3297" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3298" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3299" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3297" version="1" class="compliance">
      <metadata>
        <title>V0003381 VE - LdapClientIntegrity</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5563" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003381 VE - LdapClientIntegrity</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3298" version="1" class="compliance">
      <metadata>
        <title>V0003381 VC - LdapClientIntegrity &gt;= 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5564" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003381 VC - LdapClientIntegrity &gt;= 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3299" version="1" class="compliance">
      <metadata>
        <title>V0003381 TM - LdapClientIntegrity</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5565" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003381 TM - LdapClientIntegrity</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:329901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3300" version="1" class="compliance">
      <metadata>
        <title>NTLMMinClientSec</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5051" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NTLMMinClientSec</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3302" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3303" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3301" version="1" class="compliance">
      <metadata>
        <title>V0003382 VC - NTLMMinClientSec = 537395200</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23290" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003382 VC - NTLMMinClientSec = 537395200</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3302" version="1" class="compliance">
      <metadata>
        <title>V0003382 VE - NTLMMinClientSec Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5567" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003382 VE - NTLMMinClientSec Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3303" version="1" class="compliance">
      <metadata>
        <title>V0003382 TM - NTLMMinClientSec is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5568" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003382 TM - NTLMMinClientSec is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3304" version="1" class="compliance">
      <metadata>
        <title>FIPSAlgorithmPolicy</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5055" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>FIPSAlgorithmPolicy</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3305" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3306" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3307" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3305" version="1" class="compliance">
      <metadata>
        <title>V0003383 W6 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24275" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003383 W6 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3306" version="1" class="compliance">
      <metadata>
        <title>V0003383 W6 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24276" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003383 W6 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3307" version="1" class="compliance">
      <metadata>
        <title>V0003383 W6 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24277" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003383 W6 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3308" version="1" class="compliance">
      <metadata>
        <title>ObCaseInsensitive</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5057" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>ObCaseInsensitive</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3309" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3310" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3311" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3309" version="1" class="compliance">
      <metadata>
        <title>V0003385 VC - ObCaseInsensitive == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5582" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003385 VC - ObCaseInsensitive == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:330901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3310" version="1" class="compliance">
      <metadata>
        <title>V0003385 VE - ObCaseInsensitive Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5583" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003385 VE - ObCaseInsensitive Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3311" version="1" class="compliance">
      <metadata>
        <title>V0003385 TM - ObCaseInsensitive is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5584" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003385 TM - ObCaseInsensitive is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3312" version="1" class="compliance">
      <metadata>
        <title>MinEncryptionLevel</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5238" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>MinEncryptionLevel</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3313" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3314" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3315" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3313" version="1" class="compliance">
      <metadata>
        <title>V0003454 VC - MinEncryptionLevel == 3</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5934" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003454 VC - MinEncryptionLevel == 3</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3314" version="1" class="compliance">
      <metadata>
        <title>V0003454 VE - MinEncryptionLevel Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5935" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003454 VE - MinEncryptionLevel Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3315" version="1" class="compliance">
      <metadata>
        <title>V0003454 TM - MinEncryptionLevel is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5936" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003454 TM - MinEncryptionLevel is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3316" version="1" class="compliance">
      <metadata>
        <title>PerSessionTempDir</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5115" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>PerSessionTempDir</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3317" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3318" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3319" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3317" version="1" class="compliance">
      <metadata>
        <title>V0003455 VC - PerSessionTempDir == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5783" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003455 VC - PerSessionTempDir == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3318" version="1" class="compliance">
      <metadata>
        <title>V0003455 VE - PerSessionTempDir Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5784" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003455 VE - PerSessionTempDir Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3319" version="1" class="compliance">
      <metadata>
        <title>V0003455 TM - PerSessionTempDir is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5785" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003455 TM - PerSessionTempDir is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:331901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3320" version="1" class="compliance">
      <metadata>
        <title>DeleteTempDirsOnExit</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5116" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DeleteTempDirsOnExit</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3321" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3322" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3323" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3321" version="1" class="compliance">
      <metadata>
        <title>V0003456 VC - DeleteTempDirsOnExit == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5789" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003456 VC - DeleteTempDirsOnExit == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3322" version="1" class="compliance">
      <metadata>
        <title>V0003456 VE - DeleteTempDirsOnExit Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5790" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003456 VE - DeleteTempDirsOnExit Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3323" version="1" class="compliance">
      <metadata>
        <title>V0003456 TM - DeleteTempDirsOnExit is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5791" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003456 TM - DeleteTempDirsOnExit is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:332301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3335" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Unsolicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5232" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Remote Assistance - Unsolicited Remote Assistance</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3336" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3337" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3338" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3336" version="1" class="compliance">
      <metadata>
        <title>V0003470 Unsolicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5807" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003470 Unsolicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3337" version="1" class="compliance">
      <metadata>
        <title>V0003470 Unsolicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5808" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003470 Unsolicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3338" version="1" class="compliance">
      <metadata>
        <title>V0003470 Unsolicited Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5809" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003470 Unsolicited Remote Assistance</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:333801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3346" version="1" class="compliance">
      <metadata>
        <title>Media Player - Disabling Media Player for XP autom</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5224" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Media Player - Disabling Media Player for XP autom</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3347" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3348" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3349" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3347" version="1" class="compliance">
      <metadata>
        <title>V000348 Disable Media Player</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5733" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000348 Disable Media Player</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3348" version="1" class="compliance">
      <metadata>
        <title>V000348 Disable Media Player</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5735" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000348 Disable Media Player</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3349" version="1" class="compliance">
      <metadata>
        <title>V000348 Disable Media Player</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5738" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000348 Disable Media Player</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:334901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3350" version="1" class="compliance">
      <metadata>
        <title>NTLMMinServerSec</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5052" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NTLMMinServerSec</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3352" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3353" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3351" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3351" version="1" class="compliance">
      <metadata>
        <title>V0003666 VC - NTLMMinServerSec = 537395200</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23291" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003666 VC - NTLMMinServerSec = 537395200</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3352" version="1" class="compliance">
      <metadata>
        <title>V0003666 VE - NTLMMinServerSec Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5571" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003666 VE - NTLMMinServerSec Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3353" version="1" class="compliance">
      <metadata>
        <title>V0003666 TM - NTLMMinServerSec is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5572" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0003666 TM - NTLMMinServerSec is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3354" version="1" class="compliance">
      <metadata>
        <title>ForceKeyProtection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5054" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>ForceKeyProtection</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3355" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3356" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3357" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3355" version="1" class="compliance">
      <metadata>
        <title>V000444 VC - ForceKeyProtection == 2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5573" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000444 VC - ForceKeyProtection == 2</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3356" version="1" class="compliance">
      <metadata>
        <title>V000444 VE - ForceKeyProtection Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5574" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000444 VE - ForceKeyProtection Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3357" version="1" class="compliance">
      <metadata>
        <title>V000444 TM - ForceKeyProtection Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5575" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V000444 TM - ForceKeyProtection Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:335701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3366" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5559" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Group Policy - Registry Policy Processing</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3367" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3368" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3369" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3367" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6966" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Group Policy - Registry Policy Processing</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3368" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6967" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Group Policy - Registry Policy Processing</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3369" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6968" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Group Policy - Registry Policy Processing</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:336901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3370" version="1" class="compliance">
      <metadata>
        <title>RequireSecuritySignature (Client)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5075" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RequireSecuritySignature (Client)</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3371" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3372" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3373" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3371" version="1" class="compliance">
      <metadata>
        <title>VC - RequireSecuritySignature == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5637" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - RequireSecuritySignature == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3372" version="1" class="compliance">
      <metadata>
        <title>VE - RequireSecuritySignature Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5638" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - RequireSecuritySignature Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3373" version="1" class="compliance">
      <metadata>
        <title>TM - RequireSecuritySignature is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5639" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - RequireSecuritySignature is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3374" version="1" class="compliance">
      <metadata>
        <title>RequireSecuritySignature (Server)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5078" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>RequireSecuritySignature (Server)</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3375" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3376" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3377" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3375" version="1" class="compliance">
      <metadata>
        <title>VC - RequireSecuritySignature == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5641" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - RequireSecuritySignature == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3376" version="1" class="compliance">
      <metadata>
        <title>VE - RequireSecuritySignature Exists</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5642" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - RequireSecuritySignature Exists</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3377" version="1" class="compliance">
      <metadata>
        <title>TM - RequireSecuritySignature is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="5643" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - RequireSecuritySignature is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3378" version="1" class="compliance">
      <metadata>
        <title>restrictnullsessaccess</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="9445" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>restrictnullsessaccess</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3379" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3380" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3381" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3379" version="1" class="compliance">
      <metadata>
        <title>V0006834 VE restrictnullsessaccess</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="12250" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0006834 VE restrictnullsessaccess</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:337900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3380" version="1" class="compliance">
      <metadata>
        <title>V0006834 TM restrictnullsessaccess</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="12251" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0006834 TM restrictnullsessaccess</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3381" version="1" class="compliance">
      <metadata>
        <title>V0006834 VC restrictnullsessaccess</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="12252" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0006834 VC restrictnullsessaccess</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3382" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Length</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6812" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Minimum Password Length</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3383" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3383" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Length</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="8214" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Minimum Password Length</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3384" version="1" class="compliance">
      <metadata>
        <title>DontDisplayLastUserName ==1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="6815" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DontDisplayLastUserName ==1</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3385" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3386" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3387" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3385" version="1" class="compliance">
      <metadata>
        <title>VC - DontDisplayLastUserName == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="8256" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VC - DontDisplayLastUserName == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3386" version="1" class="compliance">
      <metadata>
        <title>VE - DontDisplayLastUserName == 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="8257" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>VE - DontDisplayLastUserName == 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3387" version="1" class="compliance">
      <metadata>
        <title>TM - DontDisplayLastUserName is REG_DWORD</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="8258" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>TM - DontDisplayLastUserName is REG_DWORD</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3388" version="1" class="compliance">
      <metadata>
        <title>V0014228</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11474" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014228</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3389" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3390" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3391" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3389" version="1" class="compliance">
      <metadata>
        <title>V0014228 Audit the access of global system objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15362" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014228 Audit the access of global system objects</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:338901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3390" version="1" class="compliance">
      <metadata>
        <title>V0014228 Audit the access of global system objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15363" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014228 Audit the access of global system objects</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3391" version="1" class="compliance">
      <metadata>
        <title>V0014228 Audit the access of global system objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15364" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014228 Audit the access of global system objects</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3392" version="1" class="compliance">
      <metadata>
        <title>V0014229 -  Audit Backup and Restore Privileges</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11567" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014229 -  Audit Backup and Restore Privileges</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3393" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3394" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3395" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3393" version="1" class="compliance">
      <metadata>
        <title>V0014229 (Value Compare)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15715" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014229 (Value Compare)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3394" version="1" class="compliance">
      <metadata>
        <title>V0014229 (Value Exist)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15716" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014229 (Value Exist)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3395" version="1" class="compliance">
      <metadata>
        <title>V0014229 (Type Match)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15717" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014229 (Type Match)</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3396" version="1" class="compliance">
      <metadata>
        <title>V0014230</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15680" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014230</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3397" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3398" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3399" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3397" version="1" class="compliance">
      <metadata>
        <title>V0014230 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24108" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014230 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3398" version="1" class="compliance">
      <metadata>
        <title>V0014230 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24109" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014230 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3399" version="1" class="compliance">
      <metadata>
        <title>V0014230 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24110" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014230 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:339901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3400" version="1" class="compliance">
      <metadata>
        <title>V0014234</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15511" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014234</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3401" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3402" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3403" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3401" version="1" class="compliance">
      <metadata>
        <title>V0014234 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23921" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014234 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3402" version="1" class="compliance">
      <metadata>
        <title>V0014234 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23922" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014234 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3403" version="1" class="compliance">
      <metadata>
        <title>V0014234 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23923" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014234 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3404" version="1" class="compliance">
      <metadata>
        <title>V0014237</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15514" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014237</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3405" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3406" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3407" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3405" version="1" class="compliance">
      <metadata>
        <title>V0014237 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23930" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014237 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3406" version="1" class="compliance">
      <metadata>
        <title>V0014237 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23931" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014237 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3407" version="1" class="compliance">
      <metadata>
        <title>V0014237 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23932" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014237 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3408" version="1" class="compliance">
      <metadata>
        <title>V0014239</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15515" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014239</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3409" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3410" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3411" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3409" version="1" class="compliance">
      <metadata>
        <title>V0014239 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23933" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014239 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:340901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3410" version="1" class="compliance">
      <metadata>
        <title>V0014239 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23934" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014239 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3411" version="1" class="compliance">
      <metadata>
        <title>V0014239 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23935" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014239 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3412" version="1" class="compliance">
      <metadata>
        <title>V0014240</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15516" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014240</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3413" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3414" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3415" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3413" version="1" class="compliance">
      <metadata>
        <title>V0014240 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23936" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014240 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3414" version="1" class="compliance">
      <metadata>
        <title>V0014240 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23937" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014240 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3415" version="1" class="compliance">
      <metadata>
        <title>V0014240 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23938" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014240 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3416" version="1" class="compliance">
      <metadata>
        <title>V0014241</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15517" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014241</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3417" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3418" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3419" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3417" version="1" class="compliance">
      <metadata>
        <title>V0014241 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23939" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014241 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3418" version="1" class="compliance">
      <metadata>
        <title>V0014241 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23940" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014241 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3419" version="1" class="compliance">
      <metadata>
        <title>V0014241 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23941" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014241 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:341901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3420" version="1" class="compliance">
      <metadata>
        <title>V0014242</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15518" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014242</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3421" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3422" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3423" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3421" version="1" class="compliance">
      <metadata>
        <title>V0014242 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23942" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014242 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3422" version="1" class="compliance">
      <metadata>
        <title>V0014242 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23943" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014242 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3423" version="1" class="compliance">
      <metadata>
        <title>V0014242 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23944" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014242 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3424" version="1" class="compliance">
      <metadata>
        <title>V0014243</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15681" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014243</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3425" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3426" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3427" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3425" version="1" class="compliance">
      <metadata>
        <title>V0014243 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24111" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014243 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3426" version="1" class="compliance">
      <metadata>
        <title>V0014243 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24112" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014243 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3427" version="1" class="compliance">
      <metadata>
        <title>V0014243 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014243 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3428" version="1" class="compliance">
      <metadata>
        <title>DisablePasswordSaving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11530" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DisablePasswordSaving</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3429" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3430" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3431" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3429" version="1" class="compliance">
      <metadata>
        <title>V0014247 - Prevent password saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15541" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014247 - Prevent password saving</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:342901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3430" version="1" class="compliance">
      <metadata>
        <title>V0014247 - Prevent password saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15542" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014247 - Prevent password saving</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3431" version="1" class="compliance">
      <metadata>
        <title>V0014247 - Prevent password saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15543" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014247 - Prevent password saving</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3432" version="1" class="compliance">
      <metadata>
        <title>V0014249</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15836" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014249</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3433" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3434" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3435" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3433" version="1" class="compliance">
      <metadata>
        <title>V0014249 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24719" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014249 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3434" version="1" class="compliance">
      <metadata>
        <title>V0014249 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24720" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014249 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3435" version="1" class="compliance">
      <metadata>
        <title>V0014249 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24721" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014249 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:343501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3448" version="1" class="compliance">
      <metadata>
        <title>NoWebServices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11533" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NoWebServices</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3449" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3450" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3451" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3449" version="1" class="compliance">
      <metadata>
        <title>V0014256 - NoWebServices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15552" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014256 - NoWebServices</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:344900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:344901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3450" version="1" class="compliance">
      <metadata>
        <title>V0014256  - NoWebServices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15553" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014256  - NoWebServices</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:345000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3451" version="1" class="compliance">
      <metadata>
        <title>V0014256 - NoWebServices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15554" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014256 - NoWebServices</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:345100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:345101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3460" version="1" class="compliance">
      <metadata>
        <title>V0014259</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11549" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014259</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3461" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3462" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3463" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3461" version="1" class="compliance">
      <metadata>
        <title>V0014259 Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15606" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014259 Printing Over HTTP</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3462" version="1" class="compliance">
      <metadata>
        <title>V0014259 Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15607" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014259 Printing Over HTTP</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3463" version="1" class="compliance">
      <metadata>
        <title>V0014259 Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15608" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014259 Printing Over HTTP</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3464" version="1" class="compliance">
      <metadata>
        <title>V0014260</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11571" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014260</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3465" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3466" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3467" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3465" version="1" class="compliance">
      <metadata>
        <title>V0014260   HTTP - Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15724" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014260   HTTP - Printer Drivers</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3466" version="1" class="compliance">
      <metadata>
        <title>V0014260   HTTP - Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15725" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014260   HTTP - Printer Drivers</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3467" version="1" class="compliance">
      <metadata>
        <title>V0014260   HTTP - Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15726" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014260   HTTP - Printer Drivers</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3468" version="1" class="compliance">
      <metadata>
        <title>V0014261</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11573" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014261</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3469" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3470" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3471" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3469" version="1" class="compliance">
      <metadata>
        <title>V0014261   Windows Update Device Driver Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15732" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014261   Windows Update Device Driver Searching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:346901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3470" version="1" class="compliance">
      <metadata>
        <title>V0014261   Windows Update Device Driver Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15733" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014261   Windows Update Device Driver Searching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3471" version="1" class="compliance">
      <metadata>
        <title>V0014261   Windows Update Device Driver Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15734" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0014261   Windows Update Device Driver Searching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3472" version="1" class="compliance">
      <metadata>
        <title>V0015666</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11551" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015666</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3473" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3474" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3475" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3473" version="1" class="compliance">
      <metadata>
        <title>V0015666  Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15612" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015666  Windows Peer to Peer Networking</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3474" version="1" class="compliance">
      <metadata>
        <title>V0015666  Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15613" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015666  Windows Peer to Peer Networking</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347400" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347401" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3475" version="1" class="compliance">
      <metadata>
        <title>V0015666  Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15614" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015666  Windows Peer to Peer Networking</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3476" version="1" class="compliance">
      <metadata>
        <title>V0015667</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11574" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015667</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3477" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3478" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3479" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3477" version="1" class="compliance">
      <metadata>
        <title>V0015667   Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15735" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015667   Prohibit Network Bridge</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3478" version="1" class="compliance">
      <metadata>
        <title>V0015667   Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15736" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015667   Prohibit Network Bridge</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3479" version="1" class="compliance">
      <metadata>
        <title>V0015667   Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15737" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015667   Prohibit Network Bridge</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:347900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3488" version="1" class="compliance">
      <metadata>
        <title>NoInternetOpenWith</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11540" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>NoInternetOpenWith</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3489" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3490" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3491" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3489" version="1" class="compliance">
      <metadata>
        <title>V0015674 - NoInternetOpenWith</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15569" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015674 - NoInternetOpenWith</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:348900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:348901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3490" version="1" class="compliance">
      <metadata>
        <title>V0015674 - NoInternetOpenWith</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15570" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015674 - NoInternetOpenWith</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3491" version="1" class="compliance">
      <metadata>
        <title>V0015674 - NoInternetOpenWith</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15571" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015674 - NoInternetOpenWith</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3496" version="1" class="compliance">
      <metadata>
        <title>V0015676</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11577" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015676</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3497" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3498" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3499" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3497" version="1" class="compliance">
      <metadata>
        <title>V0015676  Order Prints Online</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15744" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015676  Order Prints Online</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3498" version="1" class="compliance">
      <metadata>
        <title>V0015676  Order Prints Online</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15745" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015676  Order Prints Online</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3499" version="1" class="compliance">
      <metadata>
        <title>V0015676  Order Prints Online</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15746" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015676  Order Prints Online</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:349900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3504" version="1" class="compliance">
      <metadata>
        <title>V0015682</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11579" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015682</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3505" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3506" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3507" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3505" version="1" class="compliance">
      <metadata>
        <title>V0015682  RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15750" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015682  RSS Attachment Downloads</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3506" version="1" class="compliance">
      <metadata>
        <title>V0015682  RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15751" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015682  RSS Attachment Downloads</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3507" version="1" class="compliance">
      <metadata>
        <title>V0015682  RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15752" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015682  RSS Attachment Downloads</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3508" version="1" class="compliance">
      <metadata>
        <title>PreXPSP2ShellProtocolBehavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11544" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>PreXPSP2ShellProtocolBehavior</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3509" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3510" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3511" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3509" version="1" class="compliance">
      <metadata>
        <title>V0015683 - PreXPSP2ShellProtocolBehavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15584" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015683 - PreXPSP2ShellProtocolBehavior</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:350901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3510" version="1" class="compliance">
      <metadata>
        <title>V0015683 - PreXPSP2ShellProtocolBehavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15585" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015683 - PreXPSP2ShellProtocolBehavior</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3511" version="1" class="compliance">
      <metadata>
        <title>V0015683 - PreXPSP2ShellProtocolBehavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15586" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015683 - PreXPSP2ShellProtocolBehavior</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3512" version="1" class="compliance">
      <metadata>
        <title>V0015684</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11557" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015684</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3513" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3514" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3515" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3513" version="2" class="compliance">
      <metadata>
        <title>V0015684   Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15633" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015684   Windows Installer - IE Security Prompt</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3514" version="2" class="compliance">
      <metadata>
        <title>V0015684   Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15634" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015684   Windows Installer - IE Security Prompt</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3515" version="2" class="compliance">
      <metadata>
        <title>V0015684   Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15635" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015684   Windows Installer - IE Security Prompt</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3516" version="1" class="compliance">
      <metadata>
        <title>V0015685</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11580" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015685</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3517" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3518" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3519" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3517" version="2" class="compliance">
      <metadata>
        <title>V0015685  Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15753" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015685  Windows Installer - User Control</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3518" version="2" class="compliance">
      <metadata>
        <title>V0015685  Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15754" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015685  Windows Installer - User Control</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3519" version="2" class="compliance">
      <metadata>
        <title>V0015685  Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15755" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015685  Windows Installer - User Control</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:351900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3520" version="1" class="compliance">
      <metadata>
        <title>DisableLUAPatching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="11545" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>DisableLUAPatching</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3521" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3522" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3523" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3521" version="1" class="compliance">
      <metadata>
        <title>V0015686 - DisableLUAPatching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15587" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015686 - DisableLUAPatching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3522" version="1" class="compliance">
      <metadata>
        <title>V0015686 - DisableLUAPatching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15588" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015686 - DisableLUAPatching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3523" version="1" class="compliance">
      <metadata>
        <title>V0015686 - DisableLUAPatching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15589" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015686 - DisableLUAPatching</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3528" version="1" class="compliance">
      <metadata>
        <title>V0015696</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15827" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3529" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3530" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3531" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3532" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3533" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3534" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3535" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3536" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3537" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3538" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3539" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3540" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3529" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Compare AllowLLTDIOOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24492" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Compare AllowLLTDIOOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:352901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3530" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Compare AllowLLTDIOOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24493" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Compare AllowLLTDIOOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3531" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Compare EnableLLTDIO</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24494" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Compare EnableLLTDIO</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3532" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Compare ProhibitLLTDIOOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24495" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Compare ProhibitLLTDIOOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3533" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Exist AllowLLTDIOOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24496" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Exist AllowLLTDIOOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3534" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Exist AllowLLTDIOOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24497" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Exist AllowLLTDIOOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3535" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Exist EnableLLTDIO</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24498" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Exist EnableLLTDIO</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3536" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Exist ProhibitLLTDIOOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24499" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Exist ProhibitLLTDIOOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3537" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Type AllowLLTDIOOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24500" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Type AllowLLTDIOOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3538" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Type AllowLLTDIOOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24501" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Type AllowLLTDIOOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3539" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Type EnableLLTDIO</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24502" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Type EnableLLTDIO</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:353901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3540" version="1" class="compliance">
      <metadata>
        <title>V0015696 Value Type ProhibitLLTDIOOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24503" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015696 Value Type ProhibitLLTDIOOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3541" version="1" class="compliance">
      <metadata>
        <title>V0015697</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15828" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3542" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3543" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3544" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3545" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3546" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3547" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3548" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3549" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3550" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3551" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3552" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3553" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3542" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Compare AllowRspndrOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Compare AllowRspndrOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3543" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Compare AllowRspndrOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24505" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Compare AllowRspndrOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3544" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Compare EnableRspndr</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24506" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Compare EnableRspndr</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354400" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354401" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3545" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Compare ProhibitRspndrOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24507" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Compare ProhibitRspndrOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3546" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Exist AllowRspndrOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24508" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Exist AllowRspndrOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3547" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Exist AllowRspndrOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24509" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Exist AllowRspndrOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354700" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3548" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Exist EnableRspndr</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24510" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Exist EnableRspndr</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354800" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3549" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Exist ProhibitRspndrOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24511" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Exist ProhibitRspndrOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:354900" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3550" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Type AllowRspndrOndomain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24512" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Type AllowRspndrOndomain</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3551" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Type AllowRspndrOnPublicNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24513" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Type AllowRspndrOnPublicNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3552" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Type EnableRspndr</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24514" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Type EnableRspndr</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3553" version="1" class="compliance">
      <metadata>
        <title>V0015697 Value Type ProhibitRspndrOnPrivateNet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24515" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015697 Value Type ProhibitRspndrOnPrivateNet</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3554" version="1" class="compliance">
      <metadata>
        <title>V0015698</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15829" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3555" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3556" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3557" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3558" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3559" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3560" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3561" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3562" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3563" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3564" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3565" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3566" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3567" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3568" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3569" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3555" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare DisableFlashConfigRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24516" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare DisableFlashConfigRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3556" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare DisableInBand802DOT11Regist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24517" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare DisableInBand802DOT11Regist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3557" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare DisableUPnPRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24518" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare DisableUPnPRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3558" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare DisableWPDRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24519" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare DisableWPDRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3559" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Compare EnableRegistrars</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24520" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Compare EnableRegistrars</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:355901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3560" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist DisableFlashConfigRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24521" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist DisableFlashConfigRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3561" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist DisableInBand802DOT11Registra</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24522" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist DisableInBand802DOT11Registra</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3562" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist DisableUPnPRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24523" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist DisableUPnPRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3563" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist DisableWPDRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24524" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist DisableWPDRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356300" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3564" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Exist EnableRegistrars</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24525" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Exist EnableRegistrars</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356400" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3565" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type DisableFlashConfigRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24526" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type DisableFlashConfigRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3566" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type DisableInBand802DOT11Registrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24527" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type DisableInBand802DOT11Registrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3567" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type DisableUPnPRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24528" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type DisableUPnPRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3568" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type DisableWPDRegistrar</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24529" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type DisableWPDRegistrar</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356800" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356801" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3569" version="1" class="compliance">
      <metadata>
        <title>V0015698 Value Type EnableRegistrars</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24530" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015698 Value Type EnableRegistrars</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:356901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3570" version="1" class="compliance">
      <metadata>
        <title>V0015699</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15830" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015699</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3571" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3572" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3573" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3571" version="1" class="compliance">
      <metadata>
        <title>V0015699 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24531" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015699 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3572" version="1" class="compliance">
      <metadata>
        <title>V0015699 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24532" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015699 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3573" version="1" class="compliance">
      <metadata>
        <title>V0015699 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24533" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015699 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3574" version="1" class="compliance">
      <metadata>
        <title>V0015703</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15686" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015703</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3575" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3576" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3577" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3575" version="1" class="compliance">
      <metadata>
        <title>V0015703 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24126" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015703 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3576" version="1" class="compliance">
      <metadata>
        <title>V0015703 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24127" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015703 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3577" version="1" class="compliance">
      <metadata>
        <title>V0015703 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24128" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015703 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3578" version="1" class="compliance">
      <metadata>
        <title>V0015707</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15837" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015707</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3579" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3580" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3581" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3579" version="1" class="compliance">
      <metadata>
        <title>V0015707 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24722" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015707 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357900" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:357901" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3580" version="1" class="compliance">
      <metadata>
        <title>V0015707 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24723" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015707 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358000" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3581" version="1" class="compliance">
      <metadata>
        <title>V0015707 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24724" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015707 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358100" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358101" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3582" version="1" class="compliance">
      <metadata>
        <title>V0015713</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15775" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015713</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3583" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3584" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3585" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3583" version="1" class="compliance">
      <metadata>
        <title>V0015713 Value Compare 1</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24238" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015713 Value Compare 1</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358300" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358301" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3584" version="1" class="compliance">
      <metadata>
        <title>V0015713 Value Compare 2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24239" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015713 Value Compare 2</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358400" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358401" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3585" version="1" class="compliance">
      <metadata>
        <title>V0015713 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24240" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015713 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:358501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3594" version="1" class="compliance">
      <metadata>
        <title>V0015718</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15780" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015718</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3595" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3596" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3597" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3595" version="1" class="compliance">
      <metadata>
        <title>V0015718 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24253" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015718 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359500" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359501" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3596" version="1" class="compliance">
      <metadata>
        <title>V0015718 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24254" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015718 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359600" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3597" version="1" class="compliance">
      <metadata>
        <title>V0015718 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24255" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0015718 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359700" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:359701" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3609" version="1" class="compliance">
      <metadata>
        <title>V0017374/V0016008</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15519" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0017374/V0016008</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3610" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3611" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3612" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3610" version="1" class="compliance">
      <metadata>
        <title>V0017374/V0016008 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23945" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0017374/V0016008 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361000" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361001" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3611" version="1" class="compliance">
      <metadata>
        <title>V0017374/V0016008 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23946" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0017374/V0016008 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361100" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3612" version="1" class="compliance">
      <metadata>
        <title>V0017374/V0016008 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="23947" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0017374/V0016008 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361200" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361201" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3613" version="1" class="compliance">
      <metadata>
        <title>V0016020</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="15819" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0016020</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3614" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3615" />
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:3616" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3614" version="1" class="compliance">
      <metadata>
        <title>V0016020 Value Compare</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24350" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0016020 Value Compare</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361400" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361401" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3615" version="1" class="compliance">
      <metadata>
        <title>V0016020 Value Exist</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24351" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0016020 Value Exist</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361500" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3616" version="1" class="compliance">
      <metadata>
        <title>V0016020 Value Type</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="24352" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>V0016020 Value Type</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361600" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:361601" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3893" version="3" class="compliance">
      <metadata>
        <title>Task Scheduling - Server Operators</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2373" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10683-1" />
        <description>The Server Operators group must have the ability to schedule jobs by means of the AT command disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389300" comment="Verifies 'Domain Controller: Allow server operators to schedule tasks' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3894" version="3" class="compliance">
      <metadata>
        <title>Kerberos - User Logon Restrictions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2376" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Kerberos user logon restrictions must be enforced.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389400" comment="Kerberos Policy - Enforce user logon restrictions - Enabled, PA test = -1" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389401" comment="Kerberos Policy - Enforce user logon restrictions - Enabled, Other tools test = 1" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3895" version="3" class="compliance">
      <metadata>
        <title>Kerberos - Service Ticket Lifetime</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2377" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Kerberos Policy - Maximum lifetime for service ticket must be 600 or less, but not equal 0</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389501" comment="Kerberos Policy - Maximum lifetime for service ticket - Ticket expires" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389500" comment="Kerberos Policy - Maximum lifetime for service ticket - 600 minutes or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3896" version="3" class="compliance">
      <metadata>
        <title>Kerberos - User Ticket Lifetime</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2378" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Kerberos user ticket lifetime must be limited to 10 hours or less.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389601" comment="Kerberos Policy - Maximum lifetime for user ticket - Ticket expires" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389600" comment="Kerberos Policy - Maximum lifetime for user ticket - 10 hours or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3897" version="3" class="compliance">
      <metadata>
        <title>Kerberos - User Ticket Renewal</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2379" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Kerberos policy user ticket renewal maximum lifetime must be limited to 7 days or less.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389700" comment="Kerberos Policy - Maximum lifetime for user ticket renewal - 7 days or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3898" version="3" class="compliance">
      <metadata>
        <title>Kerberos - Computer Clock Sync</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="2380" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The computer clock synchronization tolerance must be limited to 5 minutes or less.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389800" comment="Kerberos Policy - Maximum tolerance for computer clock synchronization - 5 minutes or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3899" version="3" class="compliance">
      <metadata>
        <title>LDAP Signing Requirements</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4407" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10423-2" />
        <description>Domain controllers must require LDAP access signing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:389900" comment="Verifies 'Domain Controller: LDAP Server signing requirements' is set to 'Require signing'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3900" version="3" class="compliance">
      <metadata>
        <title>Computer Account Password Change</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="4408" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10802-7" />
        <description>Domain controllers must be configured to allow reset of machine account passwords.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:390000" comment="Verifies 'Domain Controller: Refuse machine account password changes' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3918" version="2" class="compliance">
      <metadata>
        <title>UR: Access this computer from the network - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26470" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10086-7" />
        <description>Unauthorized accounts must not have the Access this computer from the network user right on domain controllers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:391800" comment="Access this computer from the network - Administrators, Authenticated Users, Enterprise Domain Controllers" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3919" version="2" class="compliance">
      <metadata>
        <title>UR: Add workstations to domain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="30016" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10862-1" />
        <description>Unauthorized accounts must not have the Add workstations to domain user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:391900" comment="Add workstations to domain - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3923" version="2" class="compliance">
      <metadata>
        <title>Audit - Directory Service Access - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="33663" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10668-2" />
        <description>The system must be configured to audit DS Access - Directory Service Access successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Directory Service Access - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:392300" comment="Audit - Directory Service Access - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:392301" comment="Audit - Directory Service Access - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3924" version="2" class="compliance">
      <metadata>
        <title>Audit - Directory Service Access - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="33664" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10686-4" />
        <description>The system must be configured to audit DS Access - Directory Service Access failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Directory Service Access - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:392400" comment="Audit - Directory Service Access - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:392301" comment="Audit - Directory Service Access - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3925" version="2" class="compliance">
      <metadata>
        <title>Audit - Directory Service Changes - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="33665" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10800-1" />
        <description>The system must be configured to audit DS Access - Directory Service Changes successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Directory Service Changes - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:392500" comment="Audit - Directory Service Changes - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:392501" comment="Audit - Directory Service Changes - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3926" version="2" class="compliance">
      <metadata>
        <title>Audit - Directory Service Changes - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="33666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-11065-0" />
        <description>The system must be configured to audit DS Access - Directory Service Changes failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Directory Service Changes - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:392600" comment="Audit - Directory Service Changes - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:392501" comment="Audit - Directory Service Changes - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:3927" version="3" class="compliance">
      <metadata>
        <title>Anonymous Access to Named Pipes - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="3338" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-10944-7" />
        <description>Named pipes that can be accessed anonymously must be configured with limited values on domain controllers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:392700" comment="Verifies 'Network access: Named Pipes that can be accessed anonymously' contains no values other than NETLOGON, SAMR, or LSARPC" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4731" version="3" class="compliance">
      <metadata>
        <title>Fax Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26600" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25383-1" />
        <description>The Fax service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473100" comment="Verifies the Fax service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473101" comment="Verifies the Fax service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4732" version="2" class="compliance">
      <metadata>
        <title>Microsoft FTP Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26602" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23863-4" />
        <description>The Microsoft FTP service must not be installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473200" comment="Verifies the Microsoft FTP service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473201" comment="Verifies the Microsoft FTP service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4737" version="3" class="compliance">
      <metadata>
        <title>UR: Manage auditing and security log</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>Unauthorized accounts must not have the Manage auditing and security log user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473700" comment="Manage auditing and security log - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4792" version="1" class="compliance">
      <metadata>
        <title>Always Install with Elevated Privileges Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="34974" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="CCE" ref_url="http://cce.mitre.org" ref_id="CCE-12401-6" />
        <description>The Windows Installer Always install with elevated privileges must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:479200" comment="Verifies 'Always install with elevated privileges' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4834" version="3" class="compliance">
      <metadata>
        <title>WINPK-000001 DoD Root Certificate. Win2008R2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="32272" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The DoD Root Certificate must be installed into the Trusted Root Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4874" comment="The External CA Root Certificate must be installed into the Trusted Root Store." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4835" version="3" class="compliance">
      <metadata>
        <title>WINPK-000003 DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate. Windows 2008R2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="32274" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4876" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4836" version="3" class="compliance">
      <metadata>
        <title>The US DoD CCEB Interoperability Root CA cross-certificates must be installed in the Untrusted Certificates Store. Win2008R2</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="40237" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4877" comment="US DoD CCEB Interoperability cross-certs must be installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4874" version="4" class="compliance">
      <metadata>
        <title>WINPK-000001 DoD Root Certificate</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The DoD Root Certificate must be installed into the Trusted Root Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487400" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487401" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487402" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487403" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487404" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487405" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487406" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487407" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487408" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487409" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487410" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487411" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4876" version="5" class="compliance">
      <metadata>
        <title>WINPK-000003 DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487600" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487601" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487602" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487603" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487604" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487605" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487606" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487607" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487608" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487609" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487610" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487611" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4877" version="336" class="compliance">
      <metadata>
        <title>WINPK-000004</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487704" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487705" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487706" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487707" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4981" version="2" class="compliance">
      <metadata>
        <title>Active Directory data files must have proper access control permissions.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>Active Directory data files must have proper access control permissions.</description>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Database log files path permissions OK" operator="OR">
          <criteria comment="Checks for SCC" operator="AND">
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498100" comment="Database log files: NT Authority\SYSTEM has full control" />
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498101" comment="Database log files: BUILTIN\Administrators has full control" />
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498102" comment="Database log files: No other permissions" />
          </criteria>
          <criteria comment="Checks for ACAS and McAfee ePO and Policy Auditor" operator="AND">
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498106" comment="Database log files: NT Authority\SYSTEM has full control" />
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498107" comment="Database log files: BUILTIN\Administrators has full control" />
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498108" comment="Database log files: No other permissions" />
          </criteria>
        </criteria>
        <criteria comment="DSA Database file permissions OK" operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:498103" comment="DSA Database file: NT Authority\SYSTEM has full control" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:498104" comment="DSA Database file: BUILTIN\Administrators has full control" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:498105" comment="DSA Database file: No other permissions" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:5146" version="2" class="compliance">
      <metadata>
        <title>The Peer Networking Identity Manager service must be disabled if installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="DISA" ref_id="26604" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514600" comment="The Peer Networking Identity Manager, if installed, must be disabled." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514601" comment="If the Peer Networking Identity Manager is uninstalled, it does not apply." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:5147" version="1" class="compliance">
      <metadata>
        <title>The Simple TCP/IP Services service must be disabled if installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <description>Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514700" comment="Simple TCP/IP Services, if installed, must be disabled." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514701" comment="If the Simple TCP/IP Services is uninstalled, it does not apply." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:5148" version="2" class="compliance">
      <metadata>
        <title>The Telnet service must be disabled if installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <reference source="DISA" ref_id="26606" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authentication or encryption.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514800" comment="The Telnet service, if installed, must be disabled." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:514801" comment="If the Telnet service is uninstalled, it does not apply." />
      </criteria>
    </definition>
  </definitions>
  <tests>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:290800" version="5" comment="The OS Build is equal to or greater than 7601" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:290800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:290800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:290900" version="3" comment="'Shutdown: Allow system to be shutdown without having to log on' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:290900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291100" version="2" check="all" comment="Local volumes are formatted using NTFS">
      <object object_ref="oval:mil.disa.fso.windows:obj:291100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291100" />
    </wmi_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291200" version="1" comment="Legal Notice is configured with the required text." check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291201" version="1" comment="Legal Notice is configured with the required text." check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291201" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291300" version="1" comment="'Interactive Logon: Number of previous logons to cache (in case domain controller is not available)' is set to '2' logons or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291400" version="1" comment="'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291500" version="4" comment="'Account lockout threshold' is set to '3' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291500" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291501" version="7" comment="'Account lockout threshold' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291501" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291600" version="6" comment="'Reset account lockout counter after' is set to at least '60' minutes" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291600" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291700" version="7" comment="'Account lockout duration' is set to '0'" check_existence="at_least_one_exists" state_operator="OR" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291701" />
    </lockoutpolicy_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291800" version="2" check="all" comment="Act as part of the operating system - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291800" />
    </accesstoken_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291900" version="3" comment="'Maximum Password Age' is set to '60' days or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291900" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:291901" version="3" comment="'Maximum Password Age' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:291901" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292100" version="3" comment="'Enforce password history' is set to '24' passwords or more" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292100" />
    </passwordpolicy_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292200" version="3" comment="'Accounts: Guest account status' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292201" />
    </user_test>
    <sid_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292201" version="2" comment="The built-in guest account does not exist" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292201" />
    </sid_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292300" version="3" comment="'Accounts: Rename guest account' is set to a value other than 'Guest'" check_existence="at_least_one_exists" check="none satisfy">
      <object object_ref="oval:mil.disa.fso.windows:obj:292200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292300" />
    </user_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292400" version="3" comment="'Accounts: Rename administrator account' is set to a value other than 'Administrator'" check_existence="at_least_one_exists" check="none satisfy">
      <object object_ref="oval:mil.disa.fso.windows:obj:292400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292401" />
    </user_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292700" version="3" comment="MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292701" version="3" comment="The automatic logon password registry value (DefaultPassword) does not exist" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292701" />
    </registry_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292800" version="3" comment="'Password must meet complexity requirements' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:292800" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:292900" version="1" comment="'Devices: Prevent users from installing printer drivers' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:292900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:293200" version="2" check="all" comment="Deny access to this computer from the network - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:293200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:293200" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:293300" version="4" comment="'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:293300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:293300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:293301" version="3" comment="'Interactive logon: Smart card removal behavior' is set to 'Force Logoff'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:293300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:293301" />
    </registry_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294500" version="3" comment="'Store password using reversible encryption' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294500" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294800" version="4" comment="'Network access: Remotely accessible registry paths' is configured to contain no entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294801" version="4" comment="'Network access: Remotely accessible registry paths' is configured to contain authorized registry paths" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294801" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294802" version="3" comment="'Network access: Remotely accessible registry paths' is is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294900" version="4" comment="'Network access: Shares that can be accessed anonymously' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:294901" version="4" comment="'Network access: Shares that can be accessed anonymously' is blank" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:295300" version="3" check="all" comment="'Domain member: Maximum machine account password age' is set to '30' days or less">
      <object object_ref="oval:mil.disa.fso.windows:obj:295300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:295300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:295301" version="3" check="all" comment="'Domain member: Maximum machine account password age' is not set to '0'">
      <object object_ref="oval:mil.disa.fso.windows:obj:295300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:295301" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:295600" version="3" comment="'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:295600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:295900" version="3" comment="'Network security: Force logoff when logon hours expire' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:291500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:295900" />
    </lockoutpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:296400" version="3" comment="'Restrict Remote Desktop Services users to a Single Remote Desktop Services Session' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:296400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:296500" version="3" comment="'Always prompt for password upon connection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:296500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297100" version="2" comment="'Turn Off Background Refresh of Group Policy' is set to 'Disabled'" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297101" version="1" comment="'DisableBkGndGroupPolicy' registry value is set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297500" version="3" comment="'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297800" version="3" comment="'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 90 percent or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:297800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:297900" version="3" comment="'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:297900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298000" version="3" comment="'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298100" version="3" comment="'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298200" version="3" comment="'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to '300000 or 5 minutes (recommended)' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298300" version="3" comment="'MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298400" version="3" comment="'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298500" version="3" comment="'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 5 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298600" version="4" comment="'Network access: Remotely accessible registry paths and sub paths' is configured and contains authorized entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298601" version="3" comment="'Network access: Remotely accessible registry paths and sub paths' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298602" version="3" comment="'Network access: Remotely accessible registry paths and sub paths' is configured but contains no entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:298600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:298800" version="4" check="all" comment="'System Settings: Optional Subsystems' is blank" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:298800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:294700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:299000" version="3" comment="'Require secure RPC communication' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:299000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:299200" version="3" comment="'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:299200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300300" version="3" comment="'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic' is set to 'Only ISAKMP is exempt (recommended for Windows Server 2003)'" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300500" version="3" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for credentials on the secure desktop'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300501" version="3" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300502" version="3" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for credentials'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300503" version="3" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:300503" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:300600" version="3" comment="'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:300600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:302900" version="3" comment="'Turn off Event Viewer “Events.asp' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:302900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304000" version="1" comment="'Do Not Show First Use Dialog Boxes' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304500" version="3" comment="'Allow remote access to the Plug and Play interface' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304600" version="3" comment="'Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304700" version="3" comment="'Do not send a Windows error report when a generic driver is installed on a device' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:304900" version="3" comment="'Turn off handwriting recognition error reporting' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:304900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:305000" version="3" comment="'Require a Password When a Computer Wakes (On Battery)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:305000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:305100" version="3" comment="'Require a Password When a Computer Wakes (Plugged In)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:305100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:305300" version="3" comment="'Turn off downloading of game information' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:305300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306000" version="1" comment="'Prevent Windows Media DRM Internet Access' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306100" version="3" comment="Software certificate installation files (*.p12 *.pfx) are not present on the system" check="none exist" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:306100" />
    </file_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306200" version="3" comment="'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306400" version="3" comment="'Do not allow COM port redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306500" version="3" comment="'Do not allow LPT port redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306600" version="3" comment="'Do not allow supported Plug and Play device redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306700" version="3" comment="'Do not allow smart card device redirection' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:306800" version="3" comment="'Redirect only the default client printer' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:306800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307200" version="3" check="all" comment="Debug Programs - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:307200" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307300" version="3" comment="'Microsoft network server: Server SPN target name validation level' is set to 'Off'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307400" version="3" comment="'Network Security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307500" version="3" comment="'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307600" version="3" comment="'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307700" version="3" comment="'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'RC4_HMAC_MD5', 'AES128_HMAC_SHA1', 'AES256_HMAC_SHA1', 'Future encryption types'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:307700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307800" version="3" comment="'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:307900" version="3" comment="'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:307900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:298400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308000" version="3" comment="'Require domain users to elevate when setting a network's location' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308100" version="3" comment="'Route all traffic through the internal network' is set to 'Enabled: Enabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:308100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308200" version="3" comment="'Extend Point and Print connection to search Windows Update' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308300" version="3" comment="'Prevent device metadata retrieval from internet' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308400" version="3" comment="'Specify search order for device driver source locations' is set to 'Enabled: Do not search Windows Update'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308500" version="3" comment="'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308600" version="3" comment="'Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308700" version="3" comment="'Enable/Disable PerfTrack' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308800" version="3" comment="'Turn off Program Inventory' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:308900" version="3" comment="'Turn off Autoplay for non-volume devices' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:308900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309000" version="3" comment="'Turn off game updates' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309100" version="3" comment="'Prevent the computer from joining a homegroup' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309200" version="3" comment="'Prevent Windows Anytime Upgrade from running' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309300" version="3" comment="'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309400" version="3" comment="'Default behavior for AutoRun' is set to 'Enabled:Do not execute any autorun commands'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309500" version="3" comment="'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309600" version="1" comment="Legal Notice Caption - DoD Notice and Consent Banner" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:309600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:309601" version="1" comment="Legal Notice Caption - US Department of Defense Warning Statement" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:309600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:309601" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310000" version="2" check="all" comment="Allow log on locally - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310100" version="2" check="all" comment="Allow log on through Remote Desktop Services - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310200" version="2" check="all" comment="Back up files and directories - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310300" version="2" check="all" comment="Bypass traverse checking - Administrators, Authenticated Users, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310400" version="2" check="all" comment="Change the system time - Administrators, Local Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310500" version="2" check="all" comment="Change the time zone - Administrators, Local Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310600" version="2" check="all" comment="Create a pagefile - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310700" version="2" check="all" comment="Create a token object - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310800" version="2" check="all" comment="Create global objects - Administrators, Service, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:310900" version="2" check="all" comment="Create permanent shared objects - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:310900" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311000" version="3" check="all" comment="Create symbolic links - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311000" />
    </accesstoken_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311001" version="2" check="all" comment="verify hyper-v role installed" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:311001" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311001" />
    </wmi_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311002" version="3" check="all" comment="Create symbolic links - VMs/admins">
      <object object_ref="oval:mil.disa.fso.windows:obj:311002" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311100" version="1" check="all" comment="Deny log on as a batch job - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:293200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311200" version="2" check="all" comment="Deny log on as a service - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311300" version="2" check="all" comment="Deny log on locally - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:293200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311400" version="1" comment="Deny log on through Remote Desktop Services - Guests" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:293200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311400" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311500" version="2" check="all" comment="Enable computer and user accounts to be trusted for delegation - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311600" version="2" check="all" comment="Force shutdown from a remote system - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311700" version="2" check="all" comment="Generate security audits - Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:311700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:311800" version="2" check="all" comment="Impersonate a client after authentication - Administrators, Service, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:310800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:311800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312000" version="2" check="all" comment="Increase scheduling priority - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312100" version="2" check="all" comment="Load and unload device drivers - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312200" version="2" check="all" comment="Lock pages in memory - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312500" version="2" check="all" comment="Modify an object label - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:309800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312600" version="2" check="all" comment="Modify firmware environment values - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312700" version="2" check="all" comment="Perform volume maintenance tasks - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312800" version="2" check="all" comment="Profile single process - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:312900" version="2" check="all" comment="Profile system performance - Administrators, NT Service\WdiServiceHost">
      <object object_ref="oval:mil.disa.fso.windows:obj:312900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:312900" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313000" version="2" check="all" comment="Remove computer from docking station - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313100" version="2" check="all" comment="Replace a process level token - Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:311700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313200" version="2" check="all" comment="Restore files and directories - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313300" version="3" check="all" comment="Shut down the system - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313400" version="2" check="all" comment="Take ownership of files or other objects - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313400" />
    </accesstoken_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313500" version="1" check="all" comment="Audit - Credential Validation - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313501" version="1" check="all" comment="Audit - Credential Validation - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313600" version="1" check="all" comment="Audit - Credential Validation - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313700" version="1" check="all" comment="Audit - Computer Account Management - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313701" version="1" check="all" comment="Audit - Computer Account Management - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313701" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313800" version="1" check="all" comment="Audit - Computer Account Management - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313900" version="2" check="all" comment="Audit - Other Account Management Events - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:313901" version="2" check="all" comment="Audit - Other Account Management Events - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:313901" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314000" version="2" check="all" comment="Audit - Other Account Management Events - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314000" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314100" version="1" check="all" comment="Audit - Security Group Management - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314101" version="1" check="all" comment="Audit - Security Group Management - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314101" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314200" version="1" check="all" comment="Audit - Security Group Management - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314300" version="1" check="all" comment="Audit - User Account Management - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314301" version="1" check="all" comment="Audit - User Account Management - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314301" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314400" version="1" check="all" comment="Audit - User Account Management - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314500" version="1" check="all" comment="Audit - Process Creation - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314501" version="1" check="all" comment="Audit - Process Creation - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314600" version="1" check="all" comment="Audit - Logoff - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314601" version="1" check="all" comment="Audit - Logoff - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314601" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314700" version="1" check="all" comment="Audit - Logon - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314701" version="1" check="all" comment="Audit - Logon - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314701" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314800" version="1" check="all" comment="Audit - Logon - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314900" version="1" check="all" comment="Audit - Special Logon - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:314901" version="1" check="all" comment="Audit - Special Logon - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:314901" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315200" version="1" check="all" comment="Audit - Audit Policy Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315201" version="1" check="all" comment="Audit - Audit Policy Change - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315201" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315300" version="1" check="all" comment="Audit - Audit Policy Change - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315400" version="1" check="all" comment="Audit - Authentication Policy Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315401" version="1" check="all" comment="Audit - Authentication Policy Change - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315401" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315500" version="1" check="all" comment="Audit - Sensitive Privilege Use - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315501" version="1" check="all" comment="Audit - Sensitive Privilege Use - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315600" version="1" check="all" comment="Audit - Sensitive Privilege Use - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315700" version="1" check="all" comment="Audit - IPSec Driver - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315701" version="1" check="all" comment="Audit - IPSec Driver - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315701" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315800" version="1" check="all" comment="Audit - IPSec Driver - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315900" version="1" check="all" comment="Audit - Security State Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:315901" version="1" check="all" comment="Audit - Security State Change - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:315901" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316000" version="1" check="all" comment="Audit - Security State Change - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316000" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316100" version="1" check="all" comment="Audit - Security System Extension - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316101" version="1" check="all" comment="Audit - Security System Extension - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316101" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316200" version="1" check="all" comment="Audit - Security System Extension - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316300" version="1" check="all" comment="Audit - System Integrity - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316301" version="1" check="all" comment="Audit - System Integrity - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316301" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316400" version="1" check="all" comment="Audit - System Integrity - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316400" />
    </auditeventpolicysubcategories_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316500" version="3" comment="'Set 6to4 State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316600" version="3" comment="'IP-HTTPS State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316601" version="3" comment="'IPHTTPS URL:' is set to 'about:blank'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316601" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316601" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316700" version="4" comment="'ISATAP State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316800" version="3" comment="'Teredo State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:316900" version="3" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:316900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:317000" version="3" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:196608'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:317000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:317000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:317100" version="3" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:317100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:317200" version="3" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:317200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:316900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:317300" version="3" comment="'Prevent Windows from sending an error report when a device driver requests additional software during installation' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:317300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:296400" />
    </registry_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:318900" version="2" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318900" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:319500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:319901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:320700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:320901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:320700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:321100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:321100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:322901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:322900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:323300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:323901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:323700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:317800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:324900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:324901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:324900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:325300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:325700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:325901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:325700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:326100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326500" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:326900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:326900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:327501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:327300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:328901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:328900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:329300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:329800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:329901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:329700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:330901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:330900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:331300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:331300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:331901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:331700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:332301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:332100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:333801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:333600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:334901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:334700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:330100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:335100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:335500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:335701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:335500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:336901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:336700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:337900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:337900" />
    </registry_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338300" version="2" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:291900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:338300" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:338500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:338901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:338900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:339300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:339500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:339300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:339901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:339700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:340901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:340900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:341300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:341901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:341700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:342901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:342900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:343501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:343300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:344900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:344901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:345000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:345100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:345101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:344900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:346901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:346900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347300" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347400" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347401" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:347300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:347900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:347700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:348900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:348901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:348900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:349900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:349700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:350500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:350901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:350900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:351300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:351900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:351700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:352100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:352901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353300" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353500" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:352900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:353901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:353200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354400" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354401" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354700" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354800" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:354900" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:354500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:355901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356300" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356400" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356800" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356801" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:356901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:355900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357200" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357900" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:357901" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358000" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358100" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358101" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:357900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358300" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:358300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358301" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358400" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:358400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358401" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:358501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:358300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359500" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359501" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359600" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359700" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:359701" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:359500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361000" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361001" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361100" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361200" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361201" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:361000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361400" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:319900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361401" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361500" version="1" check="at least one" comment="Default comment, please change" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361600" version="1" check="all" comment="Default comment, please change">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:318100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:361601" version="1" check="none exist" comment="Default comment, please change" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:361400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389300" version="2" comment="'Domain Controller: Allow server operators to schedule tasks' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:389300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389400" version="2" check="all" comment="Kerberos user logon restrictions must be enforced, PA test = -1" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:389400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:389400" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389401" version="1" check="all" comment="Kerberos user logon restrictions must be enforced, Other tools test = 1" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:389400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:389401" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389500" version="2" check="all" comment="Kerberos Policy - Maximum lifetime for service ticket - 600 minutes or less" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:389500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:389500" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389501" version="2" check="all" comment="Kerberos Policy - Maximum lifetime for service ticket - Ticket expires" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:389500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:389501" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389600" version="2" check="all" comment="Kerberos Policy - Maximum lifetime for user ticket - 10 hours or less" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:389600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:389600" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389601" version="2" check="all" comment="Kerberos Policy - Maximum lifetime for user ticket - Ticket expires" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:389600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:389601" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389700" version="2" check="all" comment="Kerberos Policy - Maximum lifetime for user ticket renewal - 7 days or less" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:389700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:389700" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389800" version="2" check="all" comment="Kerberos Policy - Maximum tolerance for computer clock synchronization - 5 minutes or less" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:389800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:389800" />
    </wmi_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:389900" version="2" comment="'Domain Controller: LDAP Server signing requirements' is set to 'Require signing'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:389900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:430800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:390000" version="2" comment="'Domain Controller: Refuse machine account password changes' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:390000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:391800" version="2" check="all" comment="Access this computer from the network - Administrators, Authenticated Users, Enterprise Domain Controllers">
      <object object_ref="oval:mil.disa.fso.windows:obj:391800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:309800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:391900" version="2" check="all" comment="Add workstations to domain - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:310000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:391900" />
    </accesstoken_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:392300" version="1" check="all" comment="Audit - Directory Service Access - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:392300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:392301" version="1" check="all" comment="Audit - Directory Service Access - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:392301" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:392400" version="1" check="all" comment="Audit - Directory Service Access - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:392400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:392500" version="1" check="all" comment="Audit - Directory Service Changes - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:392500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:392501" version="1" check="all" comment="Audit - Directory Service Changes - Success and Failure" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:392501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:392600" version="1" check="all" comment="Audit - Directory Service Changes - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:313500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:392600" />
    </auditeventpolicysubcategories_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:392700" version="3" comment="'Network access: Named Pipes that can be accessed anonymously' contains no values other than NETLOGON, SAMR, or LSARPC" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:294700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:392700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:434200" version="2" check="all" comment="System is not a member of a domain">
      <object object_ref="oval:mil.disa.fso.windows:obj:434200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:434200" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473100" version="1" comment="The Fax service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473101" version="1" comment="The Fax service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473200" version="1" comment="The Microsoft FTP service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473201" version="1" comment="The Microsoft FTP service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473200" />
    </wmi_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473700" version="2" check_existence="any_exist" check="all" comment="Manage auditing and security log - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473700" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:479200" version="1" comment="'Always install with elevated privileges' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:479200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:306200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487400" version="3" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487401" version="3" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487401" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487402" version="3" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487402" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487403" version="3" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -8C" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487403" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487404" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487404" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487405" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487405" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487406" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487406" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487407" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -D7" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487407" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487408" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487408" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487409" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487409" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487410" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487410" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487411" version="1" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store. -B8" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487411" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487600" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487601" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487601" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487602" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487602" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487603" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487603" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487604" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487604" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487605" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487605" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487606" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487606" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487607" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487607" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487608" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487608" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487609" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487609" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487610" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487610" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487611" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487611" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487704" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487704" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487705" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487705" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487706" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487706" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487707" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487707" />
    </registry_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498100" version="1" comment="Database log files: NT Authority\SYSTEM has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498102" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498101" version="1" comment="Database log files: BUILTIN\Administrators has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498103" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498102" version="1" comment="Database log files: No other permissions" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498104" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498103" version="1" comment="DSA Database file: NT Authority\SYSTEM has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498105" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498104" version="1" comment="DSA Database file: BUILTIN\Administrators has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498106" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498105" version="2" comment="DSA Database file: No other permissions" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498107" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498106" version="1" comment="Database log files: NT Authority\SYSTEM has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498108" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498107" version="1" comment="Database log files: BUILTIN\Administrators has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498109" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498108" version="1" comment="Database log files: No other permissions" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498110" />
    </fileeffectiverights53_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514600" version="1" comment="The Peer Networking Identity Manager, if installed, must be disabled." check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:514600" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514601" version="1" comment="If the Peer Networking Identity Manager is uninstalled, it does not apply." check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514600" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514700" version="1" comment="Simple TCP/IP Services, if installed, must be disabled." check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:514700" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514701" version="1" comment="If Simple TCP/IP Services is uninstalled, it does not apply." check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514700" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514800" version="1" comment="The Telnet service, if installed, must be disabled." check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:514800" />
    </wmi57_test>
    <wmi57_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:514801" version="1" comment="If the Telnet service is uninstalled, it does not apply." check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:514800" />
    </wmi57_test>
  </tests>
  <objects>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:290800" version="3">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion</key>
      <name datatype="string">CurrentBuildNumber</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:290900" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string" operation="equals">shutdownwithoutlogon</name>
    </registry_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291100" version="1" comment="All 'Local Disk' File systems">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT filesystem FROM win32_logicaldisk WHERE drivetype=3</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LegalNoticeText</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">CachedLogonsCount</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">RestrictAnonymous</name>
    </registry_object>
    <lockoutpolicy_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291500" version="7" comment="lockout policy" />
    <passwordpolicy_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:291900" version="2" />
    <user_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292200" version="2" comment="Built-in Guest account">
      <user var_ref="oval:mil.disa.fso.windows:var:292200" datatype="string" var_check="all" />
    </user_object>
    <sid_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292201" version="3" comment="Built-in Guest SID">
      <trustee_name operation="pattern match" datatype="string">.*</trustee_name>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.fso.windows:ste:292200</filter>
    </sid_object>
    <user_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292400" version="1" comment="Built-in Administrator account">
      <user var_ref="oval:mil.disa.fso.windows:var:292400" datatype="string" var_check="all" />
    </user_object>
    <sid_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292401" version="2" comment="Built-in Administrator SID">
      <trustee_name operation="pattern match" datatype="string">.*</trustee_name>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.fso.windows:ste:292400</filter>
    </sid_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">AutoAdminLogon</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292701" version="3">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">DefaultPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:292900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers</key>
      <name datatype="string">AddPrinterDrivers</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:293200" version="3" comment="Guests">
      <security_principle datatype="string" operation="equals">Guests</security_principle>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:293300" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string" operation="equals">SCRemoveOption</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:294700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">NullSessionPipes</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:294800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths</key>
      <name datatype="string">Machine</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:294900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">NullSessionShares</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:295300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">MaximumPasswordAge</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:295600" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string" operation="equals">everyoneincludesanonymous</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:296400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fSingleSessionPerUser</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:296500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fPromptForPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:297100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\system</key>
      <name datatype="string">DisableBkGndGroupPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:297500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Session Manager</key>
      <name datatype="string">SafeDllSearchMode</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:297800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Eventlog\Security</key>
      <name datatype="string">WarningLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:297900" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string" operation="equals">DisableIPSourceRouting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">EnableICMPRedirect</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">PerformRouterDiscovery</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">keepalivetime</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netbt\Parameters</key>
      <name datatype="string">NoNameReleaseOnDemand</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298400" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SYSTEM\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string" operation="equals">TcpMaxDataRetransmissions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">ScreenSaverGracePeriod</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths</key>
      <name datatype="string">Machine</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:298800" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems</key>
      <name datatype="string" operation="equals">Optional</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:299000" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string" operation="equals">fEncryptRPCTraffic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:299200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireSignOrSeal</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:300300" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SYSTEM\CurrentControlSet\Services\ipsec</key>
      <name datatype="string">nodefaultexempt</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:300500" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ConsentPromptBehaviorAdmin</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:300600" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ConsentPromptBehaviorUser</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:302900" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\EventViewer</key>
      <name datatype="string">MicrosoftEventVwrDisableLinks</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WindowsMediaPlayer</key>
      <name datatype="string">GroupPrivacyAcceptance</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">AllowRemoteRPC</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSystemRestore</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSendGenericDriverNotFoundToWER</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:304900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\HandwritingErrorReports</key>
      <name datatype="string">PreventHandwritingErrorReports</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:305000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51</key>
      <name datatype="string">DCSettingIndex</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:305100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51</key>
      <name datatype="string">ACSettingIndex</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:305300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\GameUX</key>
      <name datatype="string">DownloadGameInfo</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WMDRM</key>
      <name datatype="string">DisableOnline</name>
    </registry_object>
    <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306100" version="4" comment="Local Volumes *.p12 *.pfx">
      <behaviors recurse_direction="down" max_depth="-1" />
      <path datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:306100" var_check="at least one" />
      <filename datatype="string" operation="pattern match">^.*\.([Pp]12|[Pp][Ff][Xx])$</filename>
    </file_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306102" version="1" comment="All 'Local Disk' Volumes">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT name FROM win32_logicaldisk WHERE drivetype=3</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableUIADesktopToggle</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306400" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableCcm</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306500" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableLPT</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306600" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisablePNPRedir</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306700" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fEnableSmartCard</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:306800" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">RedirectOnlyDefaultClientPrinter</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">SmbServerNameHardeningLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\LSA</key>
      <name datatype="string">UseMachineId</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\LSA\MSV1_0</key>
      <name datatype="string">allownullsessionfallback</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\LSA\pku2u</key>
      <name datatype="string">AllowOnlineID</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters</key>
      <name datatype="string">SupportedEncryptionTypes</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters</key>
      <name datatype="string">DisableIpSourceRouting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:307900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters</key>
      <name datatype="string">TcpMaxDataRetransmissions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Network Connections</key>
      <name datatype="string">NC_StdDomainUserSetLocation</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">Force_Tunneling</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DoNotInstallCompatibleDriverFromWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Device Metadata</key>
      <name datatype="string">PreventDeviceMetadataFromNetwork</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">SearchOrderConfig</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy</key>
      <name datatype="string">DisableQueryRemoteServer</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy</key>
      <name datatype="string">EnableQueryRemoteServer</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}</key>
      <name datatype="string">ScenarioExecutionEnabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\AppCompat</key>
      <name datatype="string">DisableInventory</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:308900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoAutoplayfornonVolume</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\GameUX</key>
      <name datatype="string">GameUpdateOptions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Homegroup</key>
      <name datatype="string">DisableHomeGroup</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\WAU</key>
      <name datatype="string">Disabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoDataExecutionPrevention</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoAutorun</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">RestrictAnonymousSAM</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LegalNoticeCaption</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:309800" version="2" comment="All security principles">
      <security_principle datatype="string" operation="pattern match">.*</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:310000" version="3" comment="Filter for Administrators only">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:310300" version="2" comment="Filter for Administrators, Authenticated Users, Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:309802</filter>
        <filter>oval:mil.disa.fso.windows:ste:309901</filter>
        <filter>oval:mil.disa.fso.windows:ste:309902</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:310400" version="2" comment="Filter for Administrators and Local Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:309901</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:310800" version="2" comment="Filter for Administrators, Service, Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:310801</filter>
        <filter>oval:mil.disa.fso.windows:ste:309901</filter>
        <filter>oval:mil.disa.fso.windows:ste:309902</filter>
      </set>
    </accesstoken_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:311001" version="2" comment="verify hyper-v role installed">
      <namespace datatype="string" operation="equals">root\cimv2</namespace>
      <wql datatype="string" operation="equals">SELECT name FROM Win32_ServerFeature WHERE ID = 20</wql>
    </wmi_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:311002" version="3" comment="Filter for VMs and administrator">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:311002</filter>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:311700" version="2" comment="Filter for Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309901</filter>
        <filter>oval:mil.disa.fso.windows:ste:309902</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:312900" version="2" comment="Filter for Administrators and NT Service\WdiServiceHost">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:312901</filter>
      </set>
    </accesstoken_object>
    <auditeventpolicysubcategories_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:313500" version="2" />
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">6to4_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface</key>
      <name datatype="string">IPHTTPS_ClientState</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316601" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface</key>
      <name datatype="string">IPHTTPS_ClientUrl</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">ISATAP_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">Teredo_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:316900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Application</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:317000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Security</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:317100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:317200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\System</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:317300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSendRequestAdditionalSoftwareToWER</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:319500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">EnableForcedLogoff</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:319900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManWorkstation\Parameters</key>
      <name datatype="string">EnablePlainTextPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:320700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">LMCompatibilityLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:321100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">DisableCAD</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:322100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">EnableSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:322500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireSignOrSeal</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:322900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">SealSecureChannel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:323300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">SignSecureChannel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:323700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\NetLogon\Parameters</key>
      <name datatype="string">DisablePasswordChange</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:324100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanWorkstation\Parameters</key>
      <name datatype="string">EnableSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:324500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\WinLogon</key>
      <name datatype="string">AllocateDASD</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:324900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\WinLogon</key>
      <name datatype="string">PasswordExpiryWarning</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:325300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Session Manager</key>
      <name datatype="string">ProtectionMode</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:325700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">AutoDisconnect</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:326100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoDriveTypeAutoRun</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:326500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fAllowToGetHelp</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:326900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">LimitBlankPasswordUse</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:327300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">Undockwithoutlogon</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:328100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireStrongKey</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:328500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">DisableDomainCreds</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:328900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">ForceGuest</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:329300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">NoLMHash</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:329700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LDAP</key>
      <name datatype="string">LdapClientIntegrity</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:330100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">NTLMMinClientSec</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:330500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy</key>
      <name datatype="string">Enabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:330900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Session Manager\Kernel</key>
      <name datatype="string">ObCaseInsensitive</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:331300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">MinEncryptionLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:331700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">PerSessionTempDir</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:332100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">DeleteTempDirsOnExit</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:333600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fAllowUnsolicited</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:334700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WindowsMediaPlayer</key>
      <name datatype="string">DisableAutoupdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:335100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">NTLMMinServerSec</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:335500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Cryptography</key>
      <name datatype="string">ForceKeyProtection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:336700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</key>
      <name datatype="string">NoGPOListChanges</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:337100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManWorkstation\Parameters</key>
      <name datatype="string">RequireSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:337500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">RequireSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:337900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\lanmanserver\parameters</key>
      <name datatype="string">restrictnullsessaccess</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:338500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">software\microsoft\windows\currentversion\policies\system</key>
      <name datatype="string">dontdisplaylastusername</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:338900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">AuditBaseObjects</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:339300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">fullprivilegeauditing</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:339700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">SCENoApplyLegacyAuditPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:340100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">FilterAdministratorToken</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:340500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableInstallerDetection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:340900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableSecureUIAPaths</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:341300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableLUA</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:341700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">PromptOnSecureDesktop</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:342100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableVirtualization</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:342500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\CredUI</key>
      <name datatype="string">EnumerateAdministrators</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:342900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">DisablePasswordSaving</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:343300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableCdm</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:344900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoWebServices</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:346100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DisableHTTPPrinting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:346500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DisableWebPnPDownload</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:346900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">DontSearchWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:347300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Peernet</key>
      <name datatype="string">Disabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:347700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Network Connections</key>
      <name datatype="string">NC_AllowNetBridge_NLA</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:348900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoInternetOpenWith</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:349700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoOnlinePrintsWizard</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:350500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Internet Explorer\Feeds</key>
      <name datatype="string">DisableEnclosureDownload</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:350900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">PreXPSP2ShellProtocolBehavior</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:351300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string">SafeForScripting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:351700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string">EnableUserControl</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:352100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string">DisableLUAPatching</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:352900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowLLTDIOOndomain</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:353000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowLLTDIOOnPublicNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:353100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">EnableLLTDIO</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:353200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">ProhibitLLTDIOOnPrivateNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:354200" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowRspndrOndomain</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:354300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowRspndrOnPublicNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:354400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">EnableRspndr</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:354500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">ProhibitRspndrOnPrivateNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableFlashConfigRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableInBand802DOT11Registrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355700" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableUPnPRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355800" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableWPDRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:355900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">EnableRegistrars</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:357100" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\UI</key>
      <name datatype="string">DisableWcnUi</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:357500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">DontPromptForWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:357900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">LoggingEnabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:358300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows Defender\Spynet</key>
      <name datatype="string">SpyNetReporting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:359500" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoHeapTerminationOnCorruption</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:361000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ValidateAdminCodeSignatures</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:361400" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\SQMClient\Windows</key>
      <name datatype="string">CEIPEnable</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:389300" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\LSA</key>
      <name datatype="string">SubmitControl</name>
    </registry_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:389400" version="1" comment="Kerberos Policy - Enforce user logon restrictions">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingBoolean WHERE KeyName='TicketValidateClient'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:389500" version="1" comment="Kerberos Policy - Maximum lifetime for service ticket must be 600 or less">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingNumeric WHERE KeyName='MaxServiceAge'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:389600" version="1" comment="Kerberos Policy - Maximum lifetime for user ticket must be 10 days or less">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingNumeric WHERE KeyName='MaxTicketAge'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:389700" version="1" comment="Kerberos Policy - Maximum lifetime for user ticket renewal must be 7 days or less">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingNumeric WHERE KeyName='MaxRenewAge'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:389800" version="1" comment="Kerberos Policy - Maximum tolerance for computer clock synchronization must be 5 minutes or less">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingNumeric WHERE KeyName='MaxClockSkew'</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:389900" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\NTDS\Parameters</key>
      <name datatype="string">LDAPServerIntegrity</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:390000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RefusePasswordChange</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:391800" version="2" comment="Filter for Administrators, Authenticated Users and Enterprise Domain Controllers">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:309800</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:309801</filter>
        <filter>oval:mil.disa.fso.windows:ste:309802</filter>
        <filter>oval:mil.disa.fso.windows:ste:391800</filter>
      </set>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:434200" version="1" comment="Registry path to determine domain membership.">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\TCPIP\Parameters</key>
      <name datatype="string">Domain</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461700" version="2" comment="All security principles">
      <security_principle datatype="string" operation="pattern match">.*</security_principle>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463300" version="2" comment="Filter for Administrators">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
      </set>
    </accesstoken_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473100" version="1" comment="Fax Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='Fax'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473200" version="1" comment="Microsoft FTP Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='ftpsvc'</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:479200" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string" operation="equals">AlwaysInstallElevated</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487400" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487401" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487402" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487403" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487404" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487405" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487406" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487407" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487408" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487409" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487410" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487411" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487600" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487601" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487602" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487603" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487604" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487605" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487606" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487607" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487608" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487609" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487610" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487611" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487704" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487705" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487706" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487707" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498100" version="3" comment="Database log files path">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\NTDS\Parameters</key>
      <name datatype="string" operation="equals">Database log files path</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498101" version="3" comment="DSA Database file">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\NTDS\Parameters</key>
      <name datatype="string" operation="equals">DSA Database file</name>
    </registry_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498102" version="2" comment="Database log files - SYSTEM permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" operation="case insensitive equals" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid>S-1-5-18</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498103" version="2" comment="Database log files - Administrators permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" operation="case insensitive equals" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid>S-1-5-32-544</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498104" version="2" comment="Database log files - Other permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" operation="case insensitive equals" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid operation="pattern match" datatype="string">.*</trustee_sid>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498100</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498101</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498103</filter>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498105" version="2" comment="DSA Database file - SYSTEM permissions">
      <filepath var_ref="oval:mil.disa.fso.windows:var:498101" var_check="all" datatype="string" />
      <trustee_sid>S-1-5-18</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498106" version="2" comment="DSA Database file - Administrators permissions">
      <filepath var_ref="oval:mil.disa.fso.windows:var:498101" var_check="all" datatype="string" />
      <trustee_sid>S-1-5-32-544</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498107" version="1" comment="DSA Database file - Other permissions">
      <filepath var_ref="oval:mil.disa.fso.windows:var:498101" var_check="all" datatype="string" />
      <trustee_sid operation="pattern match" datatype="string">.*</trustee_sid>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498100</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498101</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498103</filter>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498108" version="1" comment="Database log files - SYSTEM permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid>S-1-5-18</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498109" version="1" comment="Database log files - Administrators permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid>S-1-5-32-544</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498110" version="1" comment="Database log files - Other permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid operation="pattern match" datatype="string">.*</trustee_sid>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498100</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498101</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498103</filter>
    </fileeffectiverights53_object>
    <wmi57_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514600" version="2" comment="Peer Networking Identity Manager">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='p2pimsvc'</wql>
    </wmi57_object>
    <wmi57_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514700" version="2" comment="Simple TCP/IP Services">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='simptcp'</wql>
    </wmi57_object>
    <wmi57_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:514800" version="2" comment="Telnet service">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='TlntSvr'</wql>
    </wmi57_object>
  </objects>
  <states>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:290800" version="3" comment="Reg_Sz type and value equals 7601 or greater">
      <type>reg_sz</type>
      <value datatype="int" operation="greater than or equal">7601</value>
    </registry_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291100" version="1" comment="NTFS">
      <result>NTFS</result>
    </wmi_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291200" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^[[:space:]]*You[[:space:]]+are[[:space:]]+accessing[[:space:]]+a[[:space:]]+U\.S\.[[:space:]]+Government[[:space:]]+\(USG\)[[:space:]]+Information[[:space:]]+System[[:space:]]+\(IS\)[[:space:]]+that[[:space:]]+is[[:space:]]+provided[[:space:]]+for[[:space:]]+USG[-—]authorized[[:space:]]+use[[:space:]]+only\.[[:space:]]+By[[:space:]]+using[[:space:]]+this[[:space:]]+IS[[:space:]]+\(which[[:space:]]+includes[[:space:]]+any[[:space:]]+device[[:space:]]+attached[[:space:]]+to[[:space:]]+this[[:space:]]+IS\),[[:space:]]+you[[:space:]]+consent[[:space:]]+to[[:space:]]+the[[:space:]]+following[[:space:]]+conditions:[[:space:]]+-The[[:space:]]+USG[[:space:]]+routinely[[:space:]]+intercepts[[:space:]]+and[[:space:]]+monitors[[:space:]]+communications[[:space:]]+on[[:space:]]+this[[:space:]]+IS[[:space:]]+for[[:space:]]+purposes[[:space:]]+including,[[:space:]]+but[[:space:]]+not[[:space:]]+limited[[:space:]]+to,[[:space:]]+penetration[[:space:]]+testing,[[:space:]]+COMSEC[[:space:]]+monitoring,[[:space:]]+network[[:space:]]+operations[[:space:]]+and[[:space:]]+defense,[[:space:]]+personnel[[:space:]]+misconduct[[:space:]]+\(PM\),[[:space:]]+law[[:space:]]+enforcement[[:space:]]+\(LE\),[[:space:]]+and[[:space:]]+counterintelligence[[:space:]]+\(CI\)[[:space:]]+investigations\.[[:space:]]+-At[[:space:]]+any[[:space:]]+time,[[:space:]]+the[[:space:]]+USG[[:space:]]+may[[:space:]]+inspect[[:space:]]+and[[:space:]]+seize[[:space:]]+data[[:space:]]+stored[[:space:]]+on[[:space:]]+this[[:space:]]+IS\.[[:space:]]+-Communications[[:space:]]+using,[[:space:]]+or[[:space:]]+data[[:space:]]+stored[[:space:]]+on,[[:space:]]+this[[:space:]]+IS[[:space:]]+are[[:space:]]+not[[:space:]]+private,[[:space:]]+are[[:space:]]+subject[[:space:]]+to[[:space:]]+routine[[:space:]]+monitoring,[[:space:]]+interception,[[:space:]]+and[[:space:]]+search,[[:space:]]+and[[:space:]]+may[[:space:]]+be[[:space:]]+disclosed[[:space:]]+or[[:space:]]+used[[:space:]]+for[[:space:]]+any[[:space:]]+USG-authorized[[:space:]]+purpose\.[[:space:]]+[-—]This[[:space:]]+IS[[:space:]]+includes[[:space:]]+security[[:space:]]+measures[[:space:]]+\(e\.g\.,[[:space:]]+authentication[[:space:]]+and[[:space:]]+access[[:space:]]+controls\)[[:space:]]+to[[:space:]]+protect[[:space:]]+USG[[:space:]]+interests[—-]+not[[:space:]]+for[[:space:]]+your[[:space:]]+personal[[:space:]]+benefit[[:space:]]+or[[:space:]]+privacy\.[[:space:]]+[—-]Notwithstanding[[:space:]]+the[[:space:]]+above,[[:space:]]+using[[:space:]]+this[[:space:]]+IS[[:space:]]+does[[:space:]]+not[[:space:]]+constitute[[:space:]]+consent[[:space:]]+to[[:space:]]+PM,[[:space:]]+LE[[:space:]]+or[[:space:]]+CI[[:space:]]+investigative[[:space:]]+searching[[:space:]]+or[[:space:]]+monitoring[[:space:]]+of[[:space:]]+the[[:space:]]+content[[:space:]]+of[[:space:]]+privileged[[:space:]]+communications,[[:space:]]+or work product,[[:space:]]+related[[:space:]]+to[[:space:]]+personal[[:space:]]+representation[[:space:]]+or[[:space:]]+services[[:space:]]+by[[:space:]]+attorneys,[[:space:]]+psychotherapists,[[:space:]]+or[[:space:]]+clergy,[[:space:]]+and[[:space:]]+their[[:space:]]+assistants\.[[:space:]]+Such[[:space:]]+communications[[:space:]]+and[[:space:]]+work[[:space:]]+product[[:space:]]+are[[:space:]]+private[[:space:]]+and[[:space:]]+confidential\.[[:space:]]+See[[:space:]]+User[[:space:]]+Agreement[[:space:]]+for[[:space:]]+details\.[[:space:]]*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291201" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^\s*You\s+are\s+accessing\s+a\s+U\.S\.\s+Government\s+\(USG\)\s+Information\s+System\s+\(IS\)\s+that\s+is\s+provided\s+for\s+USG[-—]authorized\s+use\s+only\.\s+By\s+using\s+this\s+IS\s+\(which\s+includes\s+any\s+device\s+attached\s+to\s+this\s+IS\),\s+you\s+consent\s+to\s+the\s+following\s+conditions:\s+-The\s+USG\s+routinely\s+intercepts\s+and\s+monitors\s+communications\s+on\s+this\s+IS\s+for\s+purposes\s+including,\s+but\s+not\s+limited\s+to,\s+penetration\s+testing,\s+COMSEC\s+monitoring,\s+network\s+operations\s+and\s+defense,\s+personnel\s+misconduct\s+\(PM\),\s+law\s+enforcement\s+\(LE\),\s+and\s+counterintelligence\s+\(CI\)\s+investigations\.\s+-At\s+any\s+time,\s+the\s+USG\s+may\s+inspect\s+and\s+seize\s+data\s+stored\s+on\s+this\s+IS\.\s+-Communications\s+using,\s+or\s+data\s+stored\s+on,\s+this\s+IS\s+are\s+not\s+private,\s+are\s+subject\s+to\s+routine\s+monitoring,\s+interception,\s+and\s+search,\s+and\s+may\s+be\s+disclosed\s+or\s+used\s+for\s+any\s+USG-authorized\s+purpose\.\s+[-—]This\s+IS\s+includes\s+security\s+measures\s+\(e\.g\.,\s+authentication\s+and\s+access\s+controls\)\s+to\s+protect\s+USG\s+interests[—-]+not\s+for\s+your\s+personal\s+benefit\s+or\s+privacy\.\s+[—-]Notwithstanding\s+the\s+above,\s+using\s+this\s+IS\s+does\s+not\s+constitute\s+consent\s+to\s+PM,\s+LE\s+or\s+CI\s+investigative\s+searching\s+or\s+monitoring\s+of\s+the\s+content\s+of\s+privileged\s+communications,\s+or work product,\s+related\s+to\s+personal\s+representation\s+or\s+services\s+by\s+attorneys,\s+psychotherapists,\s+or\s+clergy,\s+and\s+their\s+assistants\.\s+Such\s+communications\s+and\s+work\s+product\s+are\s+private\s+and\s+confidential\.\s+See\s+User\s+Agreement\s+for\s+details\.\s*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291300" version="1" comment="Reg_SZ type and value equals 2 or less">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal">2</value>
    </registry_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291500" version="2">
      <lockout_threshold datatype="int" operation="less than or equal">3</lockout_threshold>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291501" version="7" comment="lockout threshold is not 0">
      <lockout_threshold datatype="int" operation="not equal">0</lockout_threshold>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291600" version="6" comment="Ensure lockout counter is greater than or equal to 60 minutes">
      <lockout_observation_window datatype="int" operation="greater than or equal">3600</lockout_observation_window>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291700" version="7" comment="lockout duration is forever">
      <lockout_duration datatype="int" operation="less than or equal" entity_check="all">0</lockout_duration>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291701" version="2" comment="lockout duration is forever,option2">
      <lockout_duration datatype="int" operation="equals" entity_check="all">4294967295</lockout_duration>
    </lockoutpolicy_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291800" version="1" comment="Act as part of the operating system">
      <setcbprivilege datatype="boolean" operation="equals">0</setcbprivilege>
    </accesstoken_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291900" version="1" comment="Checks for maximum password age setting of greater than 60">
      <max_passwd_age datatype="int" operation="less than or equal">5184000</max_passwd_age>
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:291901" version="1" comment="Checks for Never Expires criteria">
      <max_passwd_age datatype="int" operation="not equal">-1</max_passwd_age>
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292100" version="1">
      <password_hist_len datatype="int" operation="greater than or equal">24</password_hist_len>
    </passwordpolicy_state>
    <sid_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292200" version="4" comment="Built-in Guest SID">
      <trustee_sid operation="pattern match">^S-1-5-[0-9-]+-501$</trustee_sid>
    </sid_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292201" version="2" comment="Account is disabled">
      <enabled datatype="boolean">false</enabled>
    </user_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292300" version="2" comment="Account name is Guest">
      <user datatype="string" operation="pattern match">^.*\\[Gg]uest$|^[Gg]uest$</user>
    </user_state>
    <sid_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292400" version="4" comment="Built-in Administrator SID">
      <trustee_sid operation="pattern match">^S-1-5-[0-9-]+-500$</trustee_sid>
    </sid_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292401" version="2" comment="Account name is Administrator">
      <user datatype="string" operation="pattern match">^.*\\[Aa]dministrator$|^[Aa]dministrator$</user>
    </user_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292700" version="2" comment="Reg_Sz type and value equals 0">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:292800" version="1">
      <password_complexity datatype="boolean" operation="equals">1</password_complexity>
    </passwordpolicy_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:293200" version="3" comment="Deny access from the network">
      <sedenynetworklogonright datatype="boolean" operation="equals">1</sedenynetworklogonright>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:293300" version="3" comment="Reg_Sz type and value equals 1">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:293301" version="2" comment="Reg_Sz type and value equals 2">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:294500" version="1">
      <reversible_encryption datatype="boolean" operation="equals">0</reversible_encryption>
    </passwordpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:294700" version="4" comment="Reg_Multi_Sz type and blank value">
      <type>reg_multi_sz</type>
      <value datatype="string" operation="pattern match" entity_check="none satisfy">.+</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:294801" version="2">
      <value operation="pattern match" entity_check="all">^((System\\CurrentControlSet\\Control\\ProductOptions)|(System\\CurrentControlSet\\Control\\Server Applications)|(Software\\Microsoft\\Windows NT\\CurrentVersion))$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:295300" version="2" comment="Reg_Dword type and value equals 30 or less">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">30</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:295301" version="2" comment="Reg_Dword type and value does not equal 0">
      <type>reg_dword</type>
      <value datatype="int" operation="not equal">0</value>
    </registry_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:295900" version="1" comment="Checks for a value of 0">
      <force_logoff datatype="int" operation="equals">0</force_logoff>
    </lockoutpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:296400" version="2" comment="Reg_Dword type and value equals 1">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:297800" version="2" comment="Reg_Dword type and value equals 90 or less">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">90</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:298200" version="2" comment="Reg_Dword type and value equals 300000 or less">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">300000</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:298400" version="2" comment="Reg_Dword type and value equals 3 or less">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:298500" version="2" comment="Reg_Sz type and value equals 5 or less">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal">5</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:298600" version="1">
      <type>reg_multi_sz</type>
      <value operation="pattern match" entity_check="all">^((Software\\Microsoft\\OLAP Server)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Print)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows)|(System\\CurrentControlSet\\Control\\ContentIndex)|(System\\CurrentControlSet\\Control\\Print\\Printers)|(System\\CurrentControlSet\\Control\\Terminal Server)|(System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig)|(System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration)|(System\\CurrentControlSet\\Services\\Eventlog)|(System\\CurrentControlSet\\Services\\Sysmon[Ll]og))$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:300503" version="2" comment="Reg_Dword type and value equals 4">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">4</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:306200" version="2" comment="Reg_Dword type and value equals 0">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:307200" version="1" comment="Debug programs">
      <sedebugprivilege datatype="boolean" operation="equals">0</sedebugprivilege>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:307700" version="2" comment="Reg_Dword type and value equals 2147483644">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">2147483644</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:308100" version="2" comment="Reg_Sz type and value equals Enabled">
      <type>reg_sz</type>
      <value datatype="string" operation="equals">Enabled</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309600" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^D(oD|OD) N(otice|OTICE) (and|AND) C(onsent|ONSENT) B(anner|ANNER)$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309601" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^U\.?S\.? D(EPARTMENT|epartment) (OF|Of|of) D(EFENSE|efense) W(ARNING|arning) S(TATEMENT|tatement)$</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309800" version="1" comment="Access this computer from the network">
      <senetworklogonright datatype="boolean" operation="equals">0</senetworklogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309801" version="2" comment="Administrators">
      <security_principle datatype="string" operation="equals">Administrators</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309802" version="1" comment="Authenticated Users">
      <security_principle datatype="string" operation="equals">Authenticated Users</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309901" version="1" comment="Local Service">
      <security_principle datatype="string" operation="equals">LOCAL SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:309902" version="1" comment="Network Service">
      <security_principle datatype="string" operation="equals">NETWORK SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310000" version="1" comment="Allow log on locally">
      <seinteractivelogonright datatype="boolean" operation="equals">0</seinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310100" version="1" comment="Allow log on through Remote Desktop Services">
      <seremoteinteractivelogonright datatype="boolean" operation="equals">0</seremoteinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310200" version="1" comment="Back up files and directories">
      <sebackupprivilege datatype="boolean" operation="equals">0</sebackupprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310300" version="1" comment="Bypass traverse checking">
      <sechangenotifyprivilege datatype="boolean" operation="equals">0</sechangenotifyprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310400" version="1" comment="Change the system time">
      <sesystemtimeprivilege datatype="boolean" operation="equals">0</sesystemtimeprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310500" version="1" comment="Change the time zone">
      <setimezoneprivilege datatype="boolean" operation="equals">0</setimezoneprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310600" version="1" comment="Create a pagefile">
      <secreatepagefileprivilege datatype="boolean" operation="equals">0</secreatepagefileprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310700" version="1" comment="Create a token object">
      <secreatetokenprivilege datatype="boolean" operation="equals">0</secreatetokenprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310800" version="1" comment="Create global objects">
      <secreateglobalprivilege datatype="boolean" operation="equals">0</secreateglobalprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310801" version="1" comment="Service">
      <security_principle datatype="string" operation="equals">SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:310900" version="1" comment="Create permanent shared objects">
      <secreatepermanentprivilege datatype="boolean" operation="equals">0</secreatepermanentprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311000" version="2" comment="Create symbolic links">
      <secreatesymboliclinkprivilege datatype="boolean" operation="equals">0</secreatesymboliclinkprivilege>
    </accesstoken_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311001" version="2" comment="verify hyper-v role installed">
      <result datatype="string" operation="equals" entity_check="all">Hyper-V</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311002" version="2" comment="VMs">
      <security_principle datatype="string" operation="equals">NT VIRTUAL MACHINE\Virtual Machines</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311100" version="1" comment="Deny log on as a batch job">
      <sedenybatchLogonright datatype="boolean" operation="equals">1</sedenybatchLogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311200" version="1" comment="Deny log on as a service">
      <sedenyservicelogonright datatype="boolean" operation="equals">0</sedenyservicelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311300" version="2" comment="Deny log on locally">
      <sedenyinteractivelogonright datatype="boolean" operation="equals">1</sedenyinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311400" version="2" comment="Deny log on through Remote Desktop Services">
      <sedenyremoteInteractivelogonright datatype="boolean" operation="equals">1</sedenyremoteInteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311500" version="1" comment="Enable computer and user accounts to be trusted for delegation">
      <seenabledelegationprivilege datatype="boolean" operation="equals">0</seenabledelegationprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311600" version="1" comment="Force shutdown from a remote system">
      <seremoteshutdownprivilege datatype="boolean" operation="equals">0</seremoteshutdownprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311700" version="1" comment="Generate security audits">
      <seauditprivilege datatype="boolean" operation="equals">0</seauditprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:311800" version="1" comment="Impersonate a client after authentication">
      <seimpersonateprivilege datatype="boolean" operation="equals">0</seimpersonateprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312000" version="1" comment="Increase scheduling priority">
      <seincreasebasepriorityprivilege datatype="boolean" operation="equals">0</seincreasebasepriorityprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312100" version="1" comment="Load and unload device drivers">
      <seloaddriverprivilege datatype="boolean" operation="equals">0</seloaddriverprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312200" version="1" comment="Lock pages in memory">
      <selockmemoryprivilege datatype="boolean" operation="equals">0</selockmemoryprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312500" version="1" comment="Modify an object label">
      <serelabelprivilege datatype="boolean" operation="equals">0</serelabelprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312600" version="1" comment="Modify firmware environment values">
      <sesystemenvironmentprivilege datatype="boolean" operation="equals">0</sesystemenvironmentprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312700" version="1" comment="Perform volume maintenance tasks">
      <semanagevolumeprivilege datatype="boolean" operation="equals">0</semanagevolumeprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312800" version="1" comment="Profile single process">
      <seprofilesingleprocessprivilege datatype="boolean" operation="equals">0</seprofilesingleprocessprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312900" version="1" comment="Profile system performance">
      <sesystemprofileprivilege datatype="boolean" operation="equals">0</sesystemprofileprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:312901" version="1" comment="NT Service\WdiServiceHost">
      <security_principle datatype="string" operation="equals">NT SERVICE\WdiServiceHost</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313000" version="1" comment="Remove computer from docking station">
      <seundockprivilege datatype="boolean" operation="equals">0</seundockprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313100" version="1" comment="Replace a process level token">
      <seassignprimarytokenprivilege datatype="boolean" operation="equals">0</seassignprimarytokenprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313200" version="1" comment="Restore files and directories">
      <serestoreprivilege datatype="boolean" operation="equals">0</serestoreprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313300" version="1" comment="Shut down the system">
      <seshutdownprivilege datatype="boolean" operation="equals">0</seshutdownprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313400" version="1" comment="Take ownership of files or other objects">
      <setakeownershipprivilege datatype="boolean" operation="equals">0</setakeownershipprivilege>
    </accesstoken_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313500" version="4" comment="Audit - Credential Validation - Success only">
      <credential_validation datatype="string" operation="equals">AUDIT_SUCCESS</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313501" version="3" comment="Audit - Credential Validation - Success and Failure">
      <credential_validation datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313600" version="3" comment="Audit - Credential Validation - Failure only">
      <credential_validation datatype="string" operation="equals">AUDIT_FAILURE</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313700" version="3" comment="Audit - Computer Account Management - Success only">
      <computer_account_management datatype="string" operation="equals">AUDIT_SUCCESS</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313701" version="3" comment="Audit - Computer Account Management - Success and Failure">
      <computer_account_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313800" version="3" comment="Audit - Computer Account Management - Failure only">
      <computer_account_management datatype="string" operation="equals">AUDIT_FAILURE</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313900" version="3" comment="Audit - Other Account Management Events - Success only">
      <other_account_management_events datatype="string" operation="equals">AUDIT_SUCCESS</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:313901" version="3" comment="Audit - Other Account Management Events - Success and Failure">
      <other_account_management_events datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314000" version="3" comment="Audit - Other Account Management Events - Failure only">
      <other_account_management_events datatype="string" operation="equals">AUDIT_FAILURE</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314100" version="3" comment="Audit - Security Group Management - Success only">
      <security_group_management datatype="string" operation="equals">AUDIT_SUCCESS</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314101" version="3" comment="Audit - Security Group Management - Success and Failure">
      <security_group_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314200" version="3" comment="Audit - Security Group Management - Failure only">
      <security_group_management datatype="string" operation="equals">AUDIT_FAILURE</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314300" version="3" comment="Audit - User Account Management - Success only">
      <user_account_management datatype="string" operation="equals">AUDIT_SUCCESS</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314301" version="3" comment="Audit - User Account Management - Success and Failure">
      <user_account_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314400" version="3" comment="Audit - User Account Management - Failure only">
      <user_account_management datatype="string" operation="equals">AUDIT_FAILURE</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314500" version="3" comment="Audit - Process Creation - Success only">
      <process_creation datatype="string" operation="equals">AUDIT_SUCCESS</process_creation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314501" version="3" comment="Audit - Process Creation - Success and Failure">
      <process_creation datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</process_creation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314600" version="3" comment="Audit - Logoff - Success only">
      <logoff datatype="string" operation="equals">AUDIT_SUCCESS</logoff>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314601" version="3" comment="Audit - Logoff - Success and Failure">
      <logoff datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</logoff>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314700" version="3" comment="Audit - Logon - Success only">
      <logon datatype="string" operation="equals">AUDIT_SUCCESS</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314701" version="3" comment="Audit - Logon - Success and Failure">
      <logon datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314800" version="3" comment="Audit - Logon - Failure only">
      <logon datatype="string" operation="equals">AUDIT_FAILURE</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314900" version="3" comment="Audit - Special Logon - Success only">
      <special_logon datatype="string" operation="equals">AUDIT_SUCCESS</special_logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:314901" version="3" comment="Audit - Special Logon - Success and Failure">
      <special_logon datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</special_logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315200" version="3" comment="Audit - Audit Policy Change - Success only">
      <audit_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315201" version="3" comment="Audit - Audit Policy Change - Success and Failure">
      <audit_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315300" version="3" comment="Audit - Audit Policy Change - Failure only">
      <audit_policy_change datatype="string" operation="equals">AUDIT_FAILURE</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315400" version="3" comment="Audit - Authentication Policy Change - Success only">
      <authentication_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</authentication_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315401" version="3" comment="Audit - Authentication Policy Change - Success and Failure">
      <authentication_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</authentication_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315500" version="3" comment="Audit - Sensitive Privilege Use - Success only">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_SUCCESS</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315501" version="3" comment="Audit - Sensitive Privilege Use - Success and Failure">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315600" version="3" comment="Audit - Sensitive Privilege Use - Failure only">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_FAILURE</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315700" version="3" comment="Audit - IPSec Driver - Success only">
      <ipsec_driver datatype="string" operation="equals">AUDIT_SUCCESS</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315701" version="3" comment="Audit - IPSec Driver - Success and Failure">
      <ipsec_driver datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315800" version="3" comment="Audit - IPSec Driver - Failure only">
      <ipsec_driver datatype="string" operation="equals">AUDIT_FAILURE</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315900" version="3" comment="Audit - Security State Change - Success only">
      <security_state_change datatype="string" operation="equals">AUDIT_SUCCESS</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:315901" version="3" comment="Audit - Security State Change - Success and Failure">
      <security_state_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316000" version="3" comment="Audit - Security State Change - Failure only">
      <security_state_change datatype="string" operation="equals">AUDIT_FAILURE</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316100" version="3" comment="Audit - Security System Extension - Success only">
      <security_system_extension datatype="string" operation="equals">AUDIT_SUCCESS</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316101" version="3" comment="Audit - Security System Extension - Success and Failure">
      <security_system_extension datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316200" version="3" comment="Audit - Security System Extension - Failure only">
      <security_system_extension datatype="string" operation="equals">AUDIT_FAILURE</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316300" version="3" comment="Audit - System Integrity - Success only">
      <system_integrity datatype="string" operation="equals">AUDIT_SUCCESS</system_integrity>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316301" version="3" comment="Audit - System Integrity - Success and Failure">
      <system_integrity datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</system_integrity>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316400" version="3" comment="Audit - System Integrity - Failure only">
      <system_integrity datatype="string" operation="equals">AUDIT_FAILURE</system_integrity>
    </auditeventpolicysubcategories_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316500" version="2" comment="Reg_Sz type and value equals Disabled">
      <type>reg_sz</type>
      <value datatype="string" operation="equals">Disabled</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316601" version="1" comment="registry type and value for IP-HTTPS url">
      <type>reg_sz</type>
      <value datatype="string" operation="equals">about:blank</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:316900" version="2" comment="Reg_Dword type and value equals 32768 or greater">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal">32768</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:317000" version="2" comment="Reg_Dword type and value equals 196608 or greater">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal">196608</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:317800" version="2" comment="Reg_Sz type">
      <type datatype="string" operation="equals">reg_sz</type>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:318000" version="2" comment="Value equals 1">
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:318100" version="2" comment="Reg_Dword type">
      <type datatype="string" operation="equals">reg_dword</type>
    </registry_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:318900" version="2" comment="Minimum password age equals 1 or greater">
      <min_passwd_age datatype="int" operation="greater than or equal">1</min_passwd_age>
    </passwordpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:319900" version="2" comment="Value equals 0">
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:320700" version="2" comment="Value equals 5">
      <value datatype="int" operation="equals">5</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:324900" version="2" comment="Value equals 14 or greater">
      <value datatype="int" operation="greater than or equal">14</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:325700" version="2" comment="Value equals 15 or less">
      <value datatype="int" operation="less than or equal">15</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:326100" version="2" comment="Value equals 255">
      <value datatype="int" operation="equals">255</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:329800" version="2" comment="Value equals 1 or greater">
      <value datatype="int" operation="greater than or equal">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:330100" version="2" comment="Value equals 537395200">
      <value datatype="int" operation="equals">537395200</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:331300" version="2" comment="Value equals 3">
      <value datatype="int" operation="equals">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:335500" version="2" comment="Value equals 2">
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:338300" version="2" comment="Minimum password length equals 14 or greater">
      <min_passwd_len datatype="int" operation="greater than or equal">14</min_passwd_len>
    </passwordpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:339300" version="2" comment="Value equals 0">
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:339500" version="2" comment="Reg_Binary type">
      <type datatype="string" operation="equals">reg_binary</type>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:358300" version="2" comment="Value does not equal 1">
      <value datatype="int" operation="not equal">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:358400" version="2" comment="Value does not equal 2">
      <value datatype="int" operation="not equal">2</value>
    </registry_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:389400" version="2" comment="Kerberos Policy - Enforce user logon restrictions - Enabled, PA test = -1">
      <result datatype="int">-1</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:389401" version="1" comment="Kerberos Policy - Enforce user logon restrictions - Enabled, Other tools test = 1">
      <result datatype="boolean">1</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:389500" version="1" comment="Maximum lifetime for service ticket lte 600">
      <result datatype="int" operation="less than or equal">600</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:389501" version="1" comment="Maximum lifetime for service ticket policy ne 0, returns -1 in policy auditor">
      <result datatype="int" operation="not equal">-1</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:389600" version="1" comment="Maximum lifetime for user ticket lte 10 days">
      <result datatype="int" operation="less than or equal">10</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:389601" version="1" comment="Maximum lifetime for user ticket must not equal 0, retrurns -1 in Policy Auditor">
      <result datatype="int" operation="not equal">-1</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:389700" version="1" comment="Maximum lifetime for user ticket renewal lte 7">
      <result datatype="int" operation="less than or equal">7</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:389800" version="1" comment="Maximum tolerance for computer clock synchronization lte 5">
      <result datatype="int" operation="less than or equal">5</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:391800" version="1" comment=" ENTERPRISE DOMAIN CONTROLLERS">
      <security_principle datatype="string" operation="equals">ENTERPRISE DOMAIN CONTROLLERS</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:391900" version="1" comment="Add workstations to domain">
      <semachineaccountprivilege datatype="boolean" operation="equals">0</semachineaccountprivilege>
    </accesstoken_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:392300" version="3" comment="Audit - Directory Service Access - Success only">
      <directory_service_access datatype="string" operation="equals">AUDIT_SUCCESS</directory_service_access>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:392301" version="3" comment="Audit - Directory Service Access - Success and Failure">
      <directory_service_access datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</directory_service_access>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:392400" version="3" comment="Audit - Directory Service Access - Failure only">
      <directory_service_access datatype="string" operation="equals">AUDIT_FAILURE</directory_service_access>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:392500" version="3" comment="Audit - Directory Service Changes - Success only">
      <directory_service_changes datatype="string" operation="equals">AUDIT_SUCCESS</directory_service_changes>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:392501" version="3" comment="Audit - Directory Service Changes - Success and Failure">
      <directory_service_changes datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</directory_service_changes>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:392600" version="3" comment="Audit - Directory Service Changes - Failure only">
      <directory_service_changes datatype="string" operation="equals">AUDIT_FAILURE</directory_service_changes>
    </auditeventpolicysubcategories_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:392700" version="1">
      <type>reg_multi_sz</type>
      <value operation="pattern match" entity_check="all">^((^|[Nn][Ee][Tt][Ll][Oo][Gg][Oo][Nn])|([Ss][Aa][Mm][Rr])|([Ll][Ss][Aa][Rr][Pp][Cc]))$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:430400" version="1" comment="Reg_Dword type and value equals 3">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:430800" version="1" comment="Reg_Dword type and value equals 2">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:434200" version="1" comment="Reg_Sz type and blank value">
      <type datatype="string" operation="equals">reg_sz</type>
      <value />
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463300" version="2" comment="Administrators">
      <security_principle datatype="string" operation="equals">Administrators</security_principle>
    </accesstoken_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473100" version="1" comment="Service Startup Type is Disabled">
      <result>Disabled</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473700" version="1" comment="Manage auditing and security log">
      <sesecurityprivilege datatype="boolean" operation="equals">0</sesecurityprivilege>
    </accesstoken_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498100" version="1" comment="Administrators Rights">
      <trustee_sid>S-1-5-32-544</trustee_sid>
    </fileeffectiverights53_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498101" version="1" comment="Local System Rights">
      <trustee_sid>S-1-5-18</trustee_sid>
    </fileeffectiverights53_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498102" version="1" comment="Full Rights">
      <standard_delete datatype="boolean">true</standard_delete>
      <standard_read_control datatype="boolean">true</standard_read_control>
      <standard_write_dac datatype="boolean">true</standard_write_dac>
      <standard_write_owner datatype="boolean">true</standard_write_owner>
      <standard_synchronize datatype="boolean">true</standard_synchronize>
      <generic_read datatype="boolean">true</generic_read>
      <generic_write datatype="boolean">true</generic_write>
      <generic_execute datatype="boolean">true</generic_execute>
      <file_read_data datatype="boolean">true</file_read_data>
      <file_write_data datatype="boolean">true</file_write_data>
      <file_append_data datatype="boolean">true</file_append_data>
      <file_read_ea datatype="boolean">true</file_read_ea>
      <file_write_ea datatype="boolean">true</file_write_ea>
      <file_execute datatype="boolean">true</file_execute>
      <file_delete_child datatype="boolean">true</file_delete_child>
      <file_read_attributes datatype="boolean">true</file_read_attributes>
      <file_write_attributes datatype="boolean">true</file_write_attributes>
    </fileeffectiverights53_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498103" version="1" comment="No Rights">
      <standard_delete datatype="boolean">false</standard_delete>
      <standard_read_control datatype="boolean">false</standard_read_control>
      <standard_write_dac datatype="boolean">false</standard_write_dac>
      <standard_write_owner datatype="boolean">false</standard_write_owner>
      <standard_synchronize datatype="boolean">false</standard_synchronize>
      <generic_read datatype="boolean">false</generic_read>
      <generic_write datatype="boolean">false</generic_write>
      <generic_execute datatype="boolean">false</generic_execute>
      <file_read_data datatype="boolean">false</file_read_data>
      <file_write_data datatype="boolean">false</file_write_data>
      <file_append_data datatype="boolean">false</file_append_data>
      <file_read_ea datatype="boolean">false</file_read_ea>
      <file_write_ea datatype="boolean">false</file_write_ea>
      <file_execute datatype="boolean">false</file_execute>
      <file_delete_child datatype="boolean">false</file_delete_child>
      <file_read_attributes datatype="boolean">false</file_read_attributes>
      <file_write_attributes datatype="boolean">false</file_write_attributes>
    </fileeffectiverights53_state>
    <wmi57_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514600" version="3" comment="Disabled state">
      <result datatype="record">
        <field xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" name="startmode" datatype="string" operation="case insensitive equals">disabled</field>
      </result>
    </wmi57_state>
    <wmi57_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514700" version="1" comment="Disabled state">
      <result datatype="record">
        <field xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" name="startmode" datatype="string" operation="case insensitive equals">disabled</field>
      </result>
    </wmi57_state>
    <wmi57_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:514800" version="2" comment="Disabled state">
      <result datatype="record">
        <field xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" name="startmode" datatype="string" operation="case insensitive equals">disabled</field>
      </result>
    </wmi57_state>
  </states>
  <variables>
    <local_variable id="oval:mil.disa.fso.windows:var:292200" version="1" datatype="string" comment="Guest">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:292201" item_field="trustee_name" />
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:292400" version="1" datatype="string" comment="Administrator">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:292401" item_field="trustee_name" />
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:306100" version="1" datatype="string" comment="All 'local disk' volumes, in X:\ format">
      <end character="\">
        <object_component object_ref="oval:mil.disa.fso.windows:obj:306102" item_field="result" />
      </end>
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:498100" version="1" datatype="string" comment="Database log files path">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:498100" item_field="value" />
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:498101" version="1" datatype="string" comment="DSA Database file">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:498101" item_field="value" />
    </local_variable>
  </variables>
</oval_definitions>

