<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows http://oval.mitre.org/language/download/schema/version5.8/ovaldefinition/complete/windows-definitions-schema.xsd">
  <generator>
    <oval:product_name>repotool</oval:product_name>
    <oval:schema_version>5.8</oval:schema_version>
    <oval:timestamp>2016-12-30T15:32:37</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:mil.disa.fso.windows:def:4422" version="2" class="compliance">
      <metadata>
        <title>Lockout Duration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1099" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24768-4" />
        <description>Lockout duration must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442200" comment="Verifies 'Account lockout duration' is set to '0'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442301" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4423" version="1" class="compliance">
      <metadata>
        <title>Bad Logon Attempts</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1097" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23909-5" />
        <description>The number of allowed bad logon attempts must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442300" comment="Verifies 'Account lockout threshold' is set to '3' or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442301" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4424" version="2" class="compliance">
      <metadata>
        <title>Bad Logon Counter Reset</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1098" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24840-1" />
        <description>The time before the bad-logon counter is reset must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442400" comment="Verifies 'Reset account lockout counter after' is set to at least '60' minutes" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442301" comment="Verifies 'Account lockout threshold' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4425" version="1" class="compliance">
      <metadata>
        <title>Password Uniqueness</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1107" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24644-7" />
        <description>Password uniqueness must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442500" comment="Verifies 'Enforce password history' is set to '5' passwords or more" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4426" version="1" class="compliance">
      <metadata>
        <title>Maximum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1104" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24535-7" />
        <description>Maximum password age must meet minimum requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442600" comment="Verifies 'Maximum Password Age' is set to '60' days or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442601" comment="Verifies 'Maximum Password Age' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4427" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1105" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24018-4" />
        <description>The minimum password age must meet requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442700" comment="Verifies 'Minimum Password Age' is set to at least '1' day" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4428" version="1" class="compliance">
      <metadata>
        <title>Minimum Password Length</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6836" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25317-9" />
        <description>Passwords must, at a minimum, be 14 characters.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442800" comment="Verifies 'Minimum password length' is set to at least '14' characters" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4429" version="1" class="compliance">
      <metadata>
        <title>Microsoft Strong Password Filtering</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1150" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25602-4" />
        <description>The built-in Microsoft password complexity filter must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:442900" comment="Verifies 'Password must meet complexity requirements' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4430" version="1" class="compliance">
      <metadata>
        <title>Reversible Password Encryption</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="2372" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23951-7" />
        <description>Reversible password encryption must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443000" comment="Verifies 'Store password using reversible encryption' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4431" version="1" class="compliance">
      <metadata>
        <title>Network – Mapper I/O Driver</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15696" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25156-1" />
        <description>The Mapper I/O network protocol (LLTDIO) driver must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443101" comment="Verifies AllowLLTDIOOnDomain value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443102" comment="Verifies AllowLLTDIOOnPublicNet value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443103" comment="Verifies EnableLLTDIO value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443100" comment="Verifies ProhibitLLTDIOOnPrivateNet value equals 0" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4432" version="1" class="compliance">
      <metadata>
        <title>Network – Responder Driver</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15697" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23931-9" />
        <description>The Responder network protocol driver must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443202" comment="Verifies AllowRspndrOnDomain value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443203" comment="Verifies AllowRspndrOnPublicNet value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443201" comment="Verifies EnableRspndr value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443200" comment="Verifies ProhibitRspndrOnPrivateNet value equals 0" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4433" version="1" class="compliance">
      <metadata>
        <title>Windows Peer to Peer Networking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24398-0" />
        <description>Windows Peer-to-Peer networking services must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443300" comment="Verifies 'Turn Off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4434" version="1" class="compliance">
      <metadata>
        <title>Prohibit Network Bridge</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15667" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25587-7" />
        <description>Network Bridges must be prohibited in Windows.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443400" comment="Verifies 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4435" version="1" class="compliance">
      <metadata>
        <title>Elevate when setting a network’s location</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21960" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23388-2" />
        <description>Domain users must be required to elevate when setting a network’s location.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443500" comment="Verifies 'Require domain users to elevate when setting a network's location' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4436" version="1" class="compliance">
      <metadata>
        <title>Direct Access - Route Through Internal Network</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21961" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25221-3" />
        <description>All Direct Access traffic must be routed through the internal network.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443600" comment="Verifies 'Route all traffic through the internal network' is set to 'Enabled: Enabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4437" version="1" class="compliance">
      <metadata>
        <title>6to4 State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26575" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24732-0" />
        <description>The 6to4 IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443700" comment="Verifies 'Set 6to4 State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4438" version="1" class="compliance">
      <metadata>
        <title>IP-HTTPS State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26576" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25651-1" />
        <description>The IP-HTTPS IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443800" comment="Verifies 'IP-HTTPS URL:' is not null" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443801" comment="Verifies 'IP-HTTPS State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4439" version="1" class="compliance">
      <metadata>
        <title>ISATAP State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26577" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25249-4" />
        <description>The ISATAP IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:443900" comment="Verifies 'ISATAP State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4440" version="1" class="compliance">
      <metadata>
        <title>Teredo State</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26578" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25571-1" />
        <description>The Teredo IPv6 transition technology must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444000" comment="Verifies 'Teredo State' is set to 'Enabled: Disabled State'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4441" version="1" class="compliance">
      <metadata>
        <title>Network - WCN Wireless Configuration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15698" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23804-8" />
        <description>The configuration of wireless devices using Windows Connect Now must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444103" comment="Verifies DisableInBand802DOT11Registrar value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444104" comment="Verifies DisableFlashConfigRegistrar value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444102" comment="Verifies DisableUPnPRegistrar value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444101" comment="Verifies DisableWPDRegistrar value equals 0" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444100" comment="Verifies EnableRegistrars value equals 0" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4442" version="1" class="compliance">
      <metadata>
        <title>Network - Windows Connect Now Wizards</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15699" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24665-2" />
        <description>The Windows Connect Now wizards must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444200" comment="Verifies 'Prohibit Access of the Windows Connect Now wizards' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4443" version="1" class="compliance">
      <metadata>
        <title>Windows Update Point and Print Driver Search</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21963" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24139-8" />
        <description>Windows Update must be prevented from searching for point and print drivers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444300" comment="Verifies 'Extend Point and Print connection to search Windows Update' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4444" version="1" class="compliance">
      <metadata>
        <title>WINCC-000018</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36677" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23727-1" />
        <description>Optional component installation and component repair must be prevented from using Windows Update.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444400" comment="Verifies 'Specify settings for optional component installation and component repair' is set to 'Enabled' with 'Never attempt to download payload from Windows Update' selected" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4445" version="1" class="compliance">
      <metadata>
        <title>Device Install - PnP Interface Remote Access</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15700" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24004-4" />
        <description>Remote access to the Plug and Play interface must be disabled for device installation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444500" comment="Verifies 'Allow remote access to the Plug and Play interface' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4446" version="1" class="compliance">
      <metadata>
        <title>Device Install - Generic Driver Error Report</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15702" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23275-1" />
        <description>An Error Report must not be sent when a generic device driver is installed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444600" comment="Verifies 'Do not send a Windows error report when a generic driver is installed on a device' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4447" version="1" class="compliance">
      <metadata>
        <title>Device Install - Drivers System Restore Point</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15701" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23669-5" />
        <description>A system restore point must be created when a new device driver is installed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444700" comment="Verifies 'Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4448" version="1" class="compliance">
      <metadata>
        <title>Prevent device metadata retrieval from Internet</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21964" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24165-3" />
        <description>Device metadata retrieval from the Internet must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444800" comment="Verifies 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4449" version="1" class="compliance">
      <metadata>
        <title>Device Install Software Request Error Report</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="28504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24685-0" />
        <description>Windows must be prevented from sending an error report when a device driver requests additional software during installation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:444900" comment="Verifies 'Prevent Windows from sending an error report when a device driver requests additional software during installation' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4450" version="1" class="compliance">
      <metadata>
        <title>Prevent Windows Update for device driver search</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21965" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24777-5" />
        <description>Device driver searches using Windows Update must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445000" comment="Verifies 'Specify search order for device driver source locations' is set to 'Enabled: Do not search Windows Update'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4451" version="1" class="compliance">
      <metadata>
        <title>WINCC-000025</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36678" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25002-7" />
        <description>Device driver updates must only search managed servers, not Windows Update.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445100" comment="Verifies 'Specify the search server for device driver updates' is set to 'Enabled' with 'Search Managed Server' selected" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4452" version="1" class="compliance">
      <metadata>
        <title>Driver Install - Device Driver Search Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15703" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24804-7" />
        <description>Users must not be prompted to search Windows Update for device drivers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445200" comment="Verifies 'Turn off Windows Update device driver search prompt' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4453" version="1" class="compliance">
      <metadata>
        <title>WINCC-000027</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36679" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25320-3" />
        <description>Early Launch Antimalware, Boot-Start Driver Initialization Policy must be enabled and configured to only Good and Unknown.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445300" comment="Verifies 'Boot-Start Driver Initialization Policy' is set to 'Enabled' with 'Good and Unknown' selected" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4454" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Registry Policy Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4448" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24992-0" />
        <description>Group Policy objects must be reprocessed even if they have not changed.</description>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Registry Policy Processing - Not Configured">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445405" comment="Registry Policy Variable = -1" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445400" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2} does not exist" />
        </criteria>
        <criteria operator="AND" comment="Registry Policy Processing - Disabled">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445406" comment="Registry Policy Variable = 0" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445401" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy value equals 0" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445403" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges value equals 1" />
        </criteria>
        <criteria operator="AND" comment="Registry Policy Processing - Enabled with nobackgroundpolicy">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445407" comment="Registry Policy Variable = 1" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445404" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy value equals 1" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445403" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges value equals 1" />
        </criteria>
        <criteria operator="AND" comment="Registry Policy Processing - Enabled with nogpolistchanges">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445408" comment="Registry Policy Variable = 2" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445401" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy value equals 0" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445402" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges value equals 0" />
        </criteria>
        <criteria operator="AND" comment="Registry Policy Processing - Enabled with nobackgroundpolicy and nogpolistchanges">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445409" comment="Registry Policy Variable = 3" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445404" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy value equals 1" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445402" comment="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges value equals 0" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4455" version="2" class="compliance">
      <metadata>
        <title>WINCC-000030</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36680" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24981-3" />
        <description>Access to the Windows Store must be turned off.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445502" comment="Windows\WinStore does not exist, Not Applicable" />
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445500" comment="Verifies 'Turn off access to the Store' is set to 'Enabled'" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:445501" comment="Windows\WinStore exist" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4457" version="1" class="compliance">
      <metadata>
        <title>HTTP Printer Drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14260" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24854-2" />
        <description>Downloading print driver packages over HTTP must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445700" comment="Verifies 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4458" version="1" class="compliance">
      <metadata>
        <title>Handwriting Recognition Error Reporting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15704" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25580-2" />
        <description>Errors in handwriting recognition on Tablet PCs must not be reported to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:445800" comment="Verifies 'Turn off handwriting recognition error reporting' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4461" version="1" class="compliance">
      <metadata>
        <title>Internet File Association Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15674" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24899-7" />
        <description>The Internet File Association service must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:446100" comment="Verifies 'Turn off Internet File Association service' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4462" version="1" class="compliance">
      <metadata>
        <title>Printing Over HTTP</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14259" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24832-8" />
        <description>Printing over HTTP must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:446200" comment="Verifies 'Turn off printing over HTTP' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4468" version="1" class="compliance">
      <metadata>
        <title>Windows Customer Experience Improvement Program</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="16020" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24082-0" />
        <description>The Windows Customer Experience Improvement Program must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:446800" comment="Verifies 'Turn off Windows Customer Experience Improvement Program' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4470" version="1" class="compliance">
      <metadata>
        <title>Windows Update Device Drive Searching</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14261" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24071-3" />
        <description>Windows must be prevented from using Windows Update to search for drivers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447000" comment="Verifies 'Turn off Windows Update device driver searching' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4471" version="1" class="compliance">
      <metadata>
        <title>WINCC-000048</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36681" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24401-2" />
        <description>Copying of user input methods to the system account for sign-in must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447100" comment="Verifies 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4473" version="1" class="compliance">
      <metadata>
        <title>WINCC-000051</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36684" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23305-6" />
        <description>Local users on domain-joined computers must not be enumerated.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447300" comment="Verifies 'Enumerate local users on domain-joined computers' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4474" version="1" class="compliance">
      <metadata>
        <title>WINCC-000052</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36687" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24092-9" />
        <description>App notifications on the lock screen must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447400" comment="Verifies 'Turn off app notifications on the lock screen' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4475" version="1" class="compliance">
      <metadata>
        <title>Power Mgmt - Password Wake on Battery</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15705" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23998-8" />
        <description>Users must be prompted for a password on resume from sleep (on battery).</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447500" comment="Verifies 'Require a password when a computer wakes (on battery)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4476" version="1" class="compliance">
      <metadata>
        <title>Power Mgmt - Password Wake When Plugged In</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15706" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23698-4" />
        <description>The user must be prompted for a password on resume from sleep (plugged in).</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447600" comment="Verifies 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4479" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Offer Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3470" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23282-7" />
        <description>The system must be configured to prevent unsolicited remote assistance offers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:447900" comment="Verifies 'Configure Offer Remote Assistance' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4480" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Solicit Remote Assistance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3343" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25590-1" />
        <description>Solicited Remote Assistance must not be allowed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448000" comment="Verifies 'Configure Solicited Remote Assistance' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4481" version="1" class="compliance">
      <metadata>
        <title>Remote Assistance - Session Logging</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15707" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24603-3" />
        <description>Remote Assistance log files must be generated.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448100" comment="Verifies 'Turn on session logging' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4484" version="1" class="compliance">
      <metadata>
        <title>WINCC-000065</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36696" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24560-5" />
        <description>The detection of compatibility issues for applications and drivers must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448400" comment="Verifies 'Detect compatibility issues for applications and drivers' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4485" version="1" class="compliance">
      <metadata>
        <title>MSDT Interactive Communication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21967" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23633-1" />
        <description>Microsoft Support Diagnostic Tool (MSDT) interactive communication with Microsoft must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448500" comment="Verifies 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4486" version="1" class="compliance">
      <metadata>
        <title>Windows Online Troubleshooting Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21969" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24776-7" />
        <description>Access to Windows Online Troubleshooting Service (WOTS) must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448600" comment="Verifies 'Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4487" version="1" class="compliance">
      <metadata>
        <title>Disable PerfTrack</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21970" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25080-3" />
        <description>Responsiveness events must be prevented from being aggregated and sent to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448700" comment="Verifies 'Enable/Disable PerfTrack' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4488" version="1" class="compliance">
      <metadata>
        <title>WINCC-000070</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36697" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23960-8" />
        <description>Trusted app installation must be enabled to allow for signed enterprise line of business apps.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448800" comment="Verifies 'Allow all trusted apps to install' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4489" version="2" class="compliance">
      <metadata>
        <title>Application Compatibility Program Inventory</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21971" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25331-0" />
        <description>The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:448900" comment="Verifies 'Turn off Inventory Collector' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4490" version="1" class="compliance">
      <metadata>
        <title>Autoplay for non-volume devices</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21973" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24715-5" />
        <description>Autoplay must be turned off for non-volume devices.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449000" comment="Verifies 'Disallow Autoplay for non-volume devices' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4491" version="1" class="compliance">
      <metadata>
        <title>Default Autorun Behavior</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="22692" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25487-0" />
        <description>The default autorun behavior must be configured to prevent autorun commands.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449100" comment="Verifies 'Default behavior for AutoRun' is set to 'Enabled:Do not execute any autorun commands'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4492" version="1" class="compliance">
      <metadata>
        <title>Disable Media Autoplay</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="2374" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23878-2" />
        <description>Autoplay must be disabled for all drives.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449200" comment="Verifies 'Turn off AutoPlay' is set to 'Enabled:All Drives'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4493" version="1" class="compliance">
      <metadata>
        <title>WINCC-000075</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36698" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24801-3" />
        <description>The use of biometrics must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449300" comment="Verifies 'Detect compatibility issues for applications and drivers' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4494" version="1" class="compliance">
      <metadata>
        <title>WINCC-000076</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36700" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23228-0" />
        <description>The password reveal button must not be displayed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449400" comment="Verifies 'Do not display the password reveal button' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4495" version="1" class="compliance">
      <metadata>
        <title>Enumerate Administrator Accounts on Elevation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14243" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24805-4" />
        <description>The system must require username and password to elevate a running application.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:449500" comment="Verifies 'Enumerate administrator accounts on elevation' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4502" version="1" class="compliance">
      <metadata>
        <title>Maximum Log Size - Application</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26579" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24277-6" />
        <description>The Application event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450200" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4503" version="1" class="compliance">
      <metadata>
        <title>Maximum Log Size - Security</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26580" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24572-0" />
        <description>The Security event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450300" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:81920'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4504" version="1" class="compliance">
      <metadata>
        <title>Maximum Log Size - Setup</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26581" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23743-8" />
        <description>The Setup event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450400" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4505" version="1" class="compliance">
      <metadata>
        <title>Maximum Log Size - System</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26582" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24411-1" />
        <description>The System event log must be configured to a minimum size requirement.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450500" comment="Verifies 'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4506" version="1" class="compliance">
      <metadata>
        <title>WINCC-000088</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36707" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23531-7" />
        <description>The Windows SmartScreen must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450600" comment="Verifies 'Configure Windows SmartScreen' is set to 'Enabled' with 'Turn off SmartScreen' selected" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4507" version="1" class="compliance">
      <metadata>
        <title>Explorer Data Execution Prevention</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21980" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25147-0" />
        <description>Explorer Data Execution Prevention must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450700" comment="Verifies 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4508" version="1" class="compliance">
      <metadata>
        <title>Windows Explorer - Heap Termination</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15718" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23913-7" />
        <description>Turning off File Explorer heap termination on corruption must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450800" comment="Verifies 'Turn off heap termination on corruption' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4509" version="1" class="compliance">
      <metadata>
        <title>Windows Explorer - Shell Protocol Protected Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15683" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23923-6" />
        <description>File Explorer shell protocol must run in protected mode.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:450900" comment="Verifies 'Turn off shell protocol protected mode' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4510" version="1" class="compliance">
      <metadata>
        <title>WINCC-000095</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36708" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25343-5" />
        <description>The location feature must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451000" comment="Verifies 'Turn off location' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4511" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Prevent Password Saving</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14247" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23787-5" />
        <description>Passwords must not be saved in the Remote Desktop Client.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451100" comment="Verifies 'Do not allow passwords to be saved' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4512" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Drive Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14249" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24648-8" />
        <description>Local drives must be prevented from sharing with Remote Desktop Session Hosts.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451200" comment="Verifies 'Do not allow drive redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4513" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Password Prompting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3453" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25016-7" />
        <description>Remote Desktop Services must always prompt a client for passwords upon connection.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451300" comment="Verifies 'Always prompt for password upon connection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4514" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Set Encryption Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3454" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24932-6" />
        <description>Remote Desktop Services must be configured with the client connection encryption set to the required level.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451400" comment="Verifies 'Set client connection encryption level' is set to 'Enabled' and 'High Level'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4517" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Delete Temp Folders</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3456" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24304-8" />
        <description>Remote Desktop Services must delete temporary folders when a session is terminated.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451700" comment="Verifies 'Do not delete temp folder upon exit' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4518" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Do Not Use Temp Folders</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3455" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24042-4" />
        <description>Remote Desktop Services must be configured to use session-specific temporary folders.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451800" comment="Verifies 'Do not use temporary folders per session' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4519" version="1" class="compliance">
      <metadata>
        <title>RSS Attachment Downloads</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15682" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25340-1" />
        <description>Attachments must be prevented from being downloaded from RSS feeds.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:451900" comment="Verifies 'Prevent downloading of enclosures' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4522" version="1" class="compliance">
      <metadata>
        <title>Defender - SpyNet Reporting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15713" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25247-8" />
        <description>Windows Defender SpyNet membership must be disabled.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452200" comment="Verifies 'Configure Microsoft Active Protection Service Reporting' is not configured" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452201" comment="Verifies 'Configure Microsoft Active Protection Service Reporting' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4525" version="1" class="compliance">
      <metadata>
        <title>Windows Installer - User Control</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15685" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23712-3" />
        <description>Users must be prevented from changing installation options.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452500" comment="Verifies 'Enable user control over installs' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4526" version="1" class="compliance">
      <metadata>
        <title>Always Install with Elevated Privileges Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="34974" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23919-4" />
        <description>The Windows Installer Always install with elevated privileges must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452600" comment="Verifies 'Always install with elevated privileges' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4527" version="1" class="compliance">
      <metadata>
        <title>Windows Installer - IE Security Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15684" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23886-5" />
        <description>Users must be notified if a web-based program attempts to install software.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452700" comment="Verifies 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4528" version="1" class="compliance">
      <metadata>
        <title>Windows Installer - Vendor Signed Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15686" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23601-8" />
        <description>Non-administrators must be prevented from applying vendor-signed updates.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:452800" comment="Verifies 'Prohibit non-administrators from applying vendor signed updates' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4530" version="1" class="compliance">
      <metadata>
        <title>Media Player - Disable Automatic Updates</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3480" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24250-3" />
        <description>Media Player must be configured to prevent automatic checking for updates.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453000" comment="Verifies 'Prevent Automatic Updates' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4531" version="1" class="compliance">
      <metadata>
        <title>WINCC-000123</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36712" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24431-9" />
        <description>The Windows Remote Management (WinRM) client must not use Basic authentication.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453100" comment="Verifies 'Allow Basic authentication' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4532" version="1" class="compliance">
      <metadata>
        <title>WINCC-000124</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36713" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23728-9" />
        <description>The Windows Remote Management (WinRM) client must not allow unencrypted traffic.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453200" comment="Verifies 'Allow unencrypted traffic' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4533" version="1" class="compliance">
      <metadata>
        <title>WINCC-000125</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36714" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25263-5" />
        <description>The Windows Remote Management (WinRM) client must not use Digest authentication.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453300" comment="Verifies 'Disallow Digest authentication' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4534" version="1" class="compliance">
      <metadata>
        <title>WINCC-000126</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36718" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23637-2" />
        <description>The Windows Remote Management (WinRM) service must not use Basic authentication.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453400" comment="Verifies 'Allow Basic authentication' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4535" version="1" class="compliance">
      <metadata>
        <title>WINCC-000127</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36719" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25102-5" />
        <description>The Windows Remote Management (WinRM) service must not allow unencrypted traffic.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453500" comment="Verifies 'Allow unencrypted traffic' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4536" version="1" class="compliance">
      <metadata>
        <title>WINCC-000128</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36720" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23262-9" />
        <description>The Windows Remote Management (WinRM) service must not store RunAs credentials.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453600" comment="Verifies 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4537" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Secure RPC Connection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4447" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24788-2" />
        <description>The Remote Desktop Session Host must require secure RPC communications.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453700" comment="Verifies 'Require secure RPC communication' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4538" version="1" class="compliance">
      <metadata>
        <title>Unsupported Service Packs</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1073" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Systems must be maintained at a supported service pack level.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453801" comment="Verifies the OS Version is equal to or greater than 6.2" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453800" comment="Verifies the OS Build is equal to or greater than 9200" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4539" version="1" class="compliance">
      <metadata>
        <title>Disable Guest Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24387-3" />
        <description>The built-in guest account must be disabled.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453900" comment="Verifies 'Accounts: Guest account status' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453901" comment="Verifies built-in guest account does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4540" version="1" class="compliance">
      <metadata>
        <title>Limit Blank Passwords</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3344" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25589-3" />
        <description>Local accounts with blank passwords must be restricted to prevent access from the network.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454000" comment="Verifies 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4541" version="1" class="compliance">
      <metadata>
        <title>Rename Built-in Administrator Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1115" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23836-0" />
        <description>The built-in administrator account must be renamed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454100" comment="Verifies 'Accounts: Rename administrator account' is set to a value other than 'Administrator'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4542" version="1" class="compliance">
      <metadata>
        <title>Rename Built-in Guest Account</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1114" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23675-2" />
        <description>The built-in guest account must be renamed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454200" comment="Verifies 'Accounts: Rename guest account' is set to a value other than 'Guest'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:453901" comment="Verifies built-in guest account does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4543" version="1" class="compliance">
      <metadata>
        <title>Audit Access of Global System Objects</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <reference source="DISA" ref_id="14228" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24075-4" />
        <description>Auditing Access of Global System Objects must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454300" comment="Verifies 'Audit: Audit the access of global system objects' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4544" version="1" class="compliance">
      <metadata>
        <title>Audit Backup and Restore Privileges</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14229" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24923-5" />
        <description>Auditing of Backup and Restore Privileges must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454400" comment="Verifies 'Audit: Audit the use of Backup and Restore privilege' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4545" version="1" class="compliance">
      <metadata>
        <title>Audit Policy Subcategory Setting</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14230" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24252-9" />
        <description>Audit policy using subcategories must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454500" comment="Verifies 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4546" version="1" class="compliance">
      <metadata>
        <title>Format and Eject Removable Media</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1171" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25217-1" />
        <description>Ejection of removable NTFS media must be restricted to Administrators.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454600" comment="Verifies 'Devices: Allowed to Format and Eject Removable Media' is set to 'Administrators'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4547" version="1" class="compliance">
      <metadata>
        <title>Encrypting and Signing of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6831" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24465-7" />
        <description>Outgoing secure channel traffic must be encrypted or signed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454700" comment="Verifies 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4548" version="1" class="compliance">
      <metadata>
        <title>Encryption of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1163" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24414-5" />
        <description>Outgoing secure channel traffic must be encrypted when possible.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454800" comment="Verifies 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454801" comment="Verifies 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4549" version="1" class="compliance">
      <metadata>
        <title>Signing of Secure Channel Traffic</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1164" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24812-0" />
        <description>Outgoing secure channel traffic must be signed when possible.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454900" comment="Verifies 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:454801" comment="Verifies 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4550" version="1" class="compliance">
      <metadata>
        <title>Computer Account Password Reset</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1165" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24243-8" />
        <description>The computer account password must not be prevented from being reset.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455000" comment="Verifies 'Domain member: Disable machine account password changes' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4551" version="1" class="compliance">
      <metadata>
        <title>Maximum Machine Account Password Age</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3373" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23596-0" />
        <description>The maximum age for machine account passwords must be set to requirements.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455100" comment="Verifies 'Domain member: Maximum machine account password age' is set to '30' days or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455101" comment="Verifies 'Domain member: Maximum machine account password age' is not set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4552" version="1" class="compliance">
      <metadata>
        <title>Strong Session Key</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3374" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25198-3" />
        <description>The system must be configured to require a strong session key.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455200" comment="Verifies 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4553" version="1" class="compliance">
      <metadata>
        <title>Display of Last User Name</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="11806" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24748-6" />
        <description>The system must be configured to prevent the display of the last username on the logon screen.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455300" comment="Verifies 'Interactive logon: Do not display last user name' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4554" version="1" class="compliance">
      <metadata>
        <title>Ctrl+Alt+Del Security Attention Sequence</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1154" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25803-8" />
        <description>The Ctrl+Alt+Del security attention sequence for logons must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455400" comment="Verifies 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4555" version="1" class="compliance">
      <metadata>
        <title>Password Expiration Warning</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1172" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23704-0" />
        <description>Users must be warned in advance of their passwords expiring.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455500" comment="Verifies 'Interactive logon: Prompt user to change password before expiration' is set for '14' days or more" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4556" version="1" class="compliance">
      <metadata>
        <title>Smart Card Removal Option</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1157" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24154-7" />
        <description>The Smart Card removal option must be configured to Force Logoff or Lock Workstation.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455600" comment="Verifies 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455601" comment="Verifies 'Interactive logon: Smart card removal behavior' is set to 'Force Logoff'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4557" version="1" class="compliance">
      <metadata>
        <title>SMB Client Packet Signing (Always)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6832" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24969-8" />
        <description>The Windows SMB client must be configured to always perform SMB packet signing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455700" comment="Verifies 'Microsoft Network Client: Digitally sign communications (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4558" version="1" class="compliance">
      <metadata>
        <title>SMB Client Packet Signing (if server agrees)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1166" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24740-3" />
        <description>The Windows SMB client must be enabled to perform SMB packet signing when possible.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455800" comment="Verifies 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4559" version="1" class="compliance">
      <metadata>
        <title>Unencrypted Password is Sent to SMB Server</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1141" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24751-0" />
        <description>Unencrypted passwords must not be sent to a third-party SMB Server.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:455900" comment="Verifies 'Microsoft Network Client: Send unencrypted password to connect to third-party SMB servers' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4560" version="1" class="compliance">
      <metadata>
        <title>Idle Time Before Suspending a Session.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1174" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23897-2" />
        <description>The amount of idle time required before suspending a session must be properly set.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456000" comment="Verifies 'Microsoft network server: Amount of idle time required before suspending session' is set to '15' minutes or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4561" version="1" class="compliance">
      <metadata>
        <title>SMB Server Packet Signing (Always)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6833" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23716-4" />
        <description>The Windows SMB server must be configured to always perform SMB packet signing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456100" comment="Verifies 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4562" version="1" class="compliance">
      <metadata>
        <title>SMB Server Packet Signing (if client agrees)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1162" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24354-3" />
        <description>The Windows SMB server must perform SMB packet signing when possible.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456200" comment="Verifies 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4563" version="1" class="compliance">
      <metadata>
        <title>Forcibly Disconnect when Logon Hours Expire</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1136" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24148-9" />
        <description>Users must be forcibly disconnected when their logon hours expire.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456300" comment="Verifies 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4564" version="1" class="compliance">
      <metadata>
        <title>SPN Target Name Validation Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21950" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24502-7" />
        <description>The service principal name (SPN) target name validation level must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456400" comment="Verifies 'Microsoft network server: Server SPN target name validation level' is set to 'Off'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4565" version="1" class="compliance">
      <metadata>
        <title>Disable Automatic Logon</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1145" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24927-6" />
        <description>Automatic logons must be disabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456500" comment="Verifes 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456501" comment="Verifies the automatic logon password registry value (DefaultPassword) does not exist" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4566" version="1" class="compliance">
      <metadata>
        <title>IPv6 Source Routing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21955" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24452-5" />
        <description>IPv6 source routing must be configured to the highest protection level.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456600" comment="Verifies 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4567" version="1" class="compliance">
      <metadata>
        <title>Disable IP Source Routing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4110" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24968-0" />
        <description>The system must be configured to prevent IP source routing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456700" comment="Verifies 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4568" version="1" class="compliance">
      <metadata>
        <title>Disable ICMP Redirect</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4111" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24977-1" />
        <description>The system must be configured to prevent ICMP redirects from overriding OSPF generated routes.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456800" comment="Verifies 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4569" version="1" class="compliance">
      <metadata>
        <title>TCP Connection Keep-Alive Time</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4113" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24310-5" />
        <description>The system must be configured to limit how often keep-alive packets are sent.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:456900" comment="Verifies 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to '300000 or 5 minutes (recommended)' or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4570" version="1" class="compliance">
      <metadata>
        <title>IPSec Exemptions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14232" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24253-7" />
        <description>IPSec Exemptions must be limited.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457000" comment="Verifies 'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic' is set to 'Only ISAKMP is exempt (recommended for Windows Server 2003)'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4571" version="1" class="compliance">
      <metadata>
        <title>Name-Release Attacks</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4116" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23715-6" />
        <description>The system must be configured to ignore NetBIOS name release requests except from WINS servers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457100" comment="Verifies 'MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4572" version="1" class="compliance">
      <metadata>
        <title>Disable Router Discovery</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4112" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23677-8" />
        <description>The system must be configured to disable the Internet Router Discovery Protocol (IRDP).</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457200" comment="Verifies 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4573" version="1" class="compliance">
      <metadata>
        <title>Safe DLL Search Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3479" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23462-5" />
        <description>The system must be configured to use Safe DLL Search Mode.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457300" comment="Verifies 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4574" version="1" class="compliance">
      <metadata>
        <title>Screen Saver Grace Period</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4442" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24993-8" />
        <description>The system must be configured to have password protection take effect within a limited time frame when the screen saver becomes active.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457400" comment="Verifies 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 5 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4575" version="1" class="compliance">
      <metadata>
        <title>IPv6 TCP Data Retransmissions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21956" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25202-3" />
        <description>IPv6 TCP data retransmissions must be configured to prevent resources from becoming exhausted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457500" comment="Verifies 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to '3' or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4576" version="1" class="compliance">
      <metadata>
        <title>TCP Data Retransmissions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4438" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25455-7" />
        <description>The system must limit how many times unacknowledged TCP data is retransmitted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457600" comment="Verifies 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4577" version="1" class="compliance">
      <metadata>
        <title>Audit Log Warning Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4108" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25110-8" />
        <description>The system must generate an audit event when the audit log reaches a percentage of full threshold.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457700" comment="Verifies 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 90 percent or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4578" version="1" class="compliance">
      <metadata>
        <title>Restrict Anonymous SAM Enumeration</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26283" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23082-1" />
        <description>Anonymous enumeration of SAM accounts must not be allowed.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457800" comment="Verifies 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4579" version="1" class="compliance">
      <metadata>
        <title>Restrict Anonymous Network Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1093" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24774-2" />
        <description>Anonymous enumeration of shares must be restricted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:457900" comment="Verifies 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4580" version="1" class="compliance">
      <metadata>
        <title>Storage of Passwords and Credentials</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3376" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23358-5" />
        <description>The system must be configured to prevent the storage of passwords and credentials.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458000" comment="Verifies 'Network access: Do not allow storage of credentials or .NET Passports for network authentication' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4581" version="1" class="compliance">
      <metadata>
        <title>Everyone Anonymous Rights</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3377" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23807-1" />
        <description>The system must not be configured to give anonymous users Everyone rights.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458100" comment="Verifies 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4582" version="2" class="compliance">
      <metadata>
        <title>Remotely Accessible Registry Paths</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3339" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23899-8" />
        <description>Unauthorized registry paths must not be remotely accessible.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458200" comment="Verifies 'Network access: Remotely accessible registry paths' is configured to contain authorized registry paths" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458201" comment="Verifies 'Network access: Remotely accessible registry paths' is configured with no entries" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458202" comment="Verifies 'Network access: Remotely accessible registry paths' is not configured" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4583" version="2" class="compliance">
      <metadata>
        <title>Remotely Accessible Registry Paths and Sub-Paths</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4443" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25426-8" />
        <description>Unauthorized remotely accessible registry paths and sub-paths must not be configured.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458300" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is configured to contain authorized registry paths" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458301" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is not configured" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458302" comment="Verifies 'Network access: Remotely accessible registry paths and sub paths' is configured but contains no entries" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4584" version="1" class="compliance">
      <metadata>
        <title>Anonymous Access to Named Pipes and Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="6834" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24564-7" />
        <description>Anonymous access to Named Pipes and Shares must be restricted.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458400" comment="Verifies 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4585" version="2" class="compliance">
      <metadata>
        <title>Anonymous Access to Network Shares</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3340" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25592-7" />
        <description>Unauthorized shares must not be accessed anonymously.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458500" comment="Verifies 'Network access: Shares that can be accessed anonymously' is blank" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458501" comment="Verifies 'Network access: Shares that can be accessed anonymously' is not configured" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4586" version="1" class="compliance">
      <metadata>
        <title>Sharing and Security Model for Local Accounts</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3378" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-22742-1" />
        <description>The system must be configured to use the Classic security model.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458600" comment="Verifies 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4587" version="1" class="compliance">
      <metadata>
        <title>Computer Identity Authentication for NTLM</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21951" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25508-3" />
        <description>Services using Local System that use negotiate when reverting to NTLM authentication must use the computer identity vs. authenticating anonymously.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458700" comment="Verifies 'Network Security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4588" version="1" class="compliance">
      <metadata>
        <title>NTLM NULL Session Fallback</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21952" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25531-5" />
        <description>NTLM must be prevented from falling back to a Null session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458800" comment="Verifies 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4589" version="1" class="compliance">
      <metadata>
        <title>PKU2U Online Identities Authentication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21953" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25299-9" />
        <description>PKU2U authentication using online identities must be prevented.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:458900" comment="Verifies 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4590" version="2" class="compliance">
      <metadata>
        <title>Kerberos Encryption Types</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="21954" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24147-1" />
        <description>Kerberos encryption types must be configured to prevent the use of DES encryption suites.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459000" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is not configured" />
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:459001" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC' not selected" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:459002" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC_MD5' not selected" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:459003" comment="Verifies 'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC_MD5' not selected" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4591" version="1" class="compliance">
      <metadata>
        <title>LAN Manager Hash Value Stored</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3379" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24150-5" />
        <description>The system must be configured to prevent the storage of the LAN Manager hash of passwords.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459100" comment="Verifies 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4592" version="1" class="compliance">
      <metadata>
        <title>Force Logoff When Logon Hours Expire</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3380" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25367-4" />
        <description>The system must be configured to force users to log off when their allowed logon hours expire.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459200" comment="Verifies 'Network security: Force logoff when logon hours expire' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4593" version="1" class="compliance">
      <metadata>
        <title>LanMan Authentication Level</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1153" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24650-4" />
        <description>The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459300" comment="Verifies 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM &amp; NTLM'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4594" version="1" class="compliance">
      <metadata>
        <title>LDAP Client Signing</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3381" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25245-2" />
        <description>Network Security: LDAP client signing requirements</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459400" comment="Verifies 'Network security: LDAP client signing requirements' is set to at a minimum 'Negotiate signing'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4595" version="1" class="compliance">
      <metadata>
        <title>Session Security for NTLM SSP Based Clients</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3382" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24783-3" />
        <description>The system must be configured to meet the minimum session security requirement for NTLM SSP based clients.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459500" comment="Verifies 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459501" comment="Verifies 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require 128-bit encryption'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4596" version="1" class="compliance">
      <metadata>
        <title>Session Security for NTLM SSP Based Servers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25264-3" />
        <description>The system must be configured to meet the minimum session security requirement for NTLM SSP based servers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459600" comment="Verifies 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459601" comment="Verifies 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require 128-bit encryption'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4599" version="1" class="compliance">
      <metadata>
        <title>Display Shutdown Button</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1075" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25100-9" />
        <description>The shutdown option must be available from the logon dialog box.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:459900" comment="Verifies 'Shutdown: Allow system to be shutdown without having to log on' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4600" version="1" class="compliance">
      <metadata>
        <title>FIPS Compliant Algorithms</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3383" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23921-0" />
        <description>The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460000" comment="Verifies 'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4601" version="1" class="compliance">
      <metadata>
        <title>Case Insensitivity for Non-Windows</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3385" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24870-8" />
        <description>The system must be configured to require case insensitivity for non-Windows subsystems.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460100" comment="Verifies 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4602" version="1" class="compliance">
      <metadata>
        <title>Global System Objects Permission Strength</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1173" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24633-0" />
        <description>The default permissions of global system objects must be increased.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460200" comment="Verifies 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4603" version="1" class="compliance">
      <metadata>
        <title>UAC - Admin Approval Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14234" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24134-9" />
        <description>User Account Control approval mode for the built-in Administrator must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460300" comment="Verifies 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4604" version="1" class="compliance">
      <metadata>
        <title>UAC - Admin Elevation Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14235" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23877-4" />
        <description>User Account Control must, at minimum, prompt administrators for consent.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460400" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent' or more secure options" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460401" comment="Verifies 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is not set to 'Elevate without prompting'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4605" version="1" class="compliance">
      <metadata>
        <title>UAC - User Elevation Prompt</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14236" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24519-1" />
        <description>User Account Control must automatically deny standard user requests for elevation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460500" comment="Verifies 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4606" version="1" class="compliance">
      <metadata>
        <title>UAC - Application Installations</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14237" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24498-8" />
        <description>User Account Control must be configured to detect application installations and prompt for elevation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460600" comment="Verifies 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4607" version="1" class="compliance">
      <metadata>
        <title>UAC - Application Elevations</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="16008" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23880-8" />
        <description>Windows must elevate all applications in User Account Control, not just signed ones.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460700" comment="Verifies 'User Account Control: Only elevate executables that are signed and validated' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4608" version="1" class="compliance">
      <metadata>
        <title>UAC - UIAccess Application Elevation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14239" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25471-4" />
        <description>User Account Control must only elevate UIAccess applications that are installed in secure locations.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460800" comment="Verifies 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4609" version="1" class="compliance">
      <metadata>
        <title>UAC - All Admin Approval Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14240" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23653-9" />
        <description>User Account Control must run all administrators in Admin Approval Mode, enabling UAC.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:460900" comment="Verifies 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4610" version="1" class="compliance">
      <metadata>
        <title>UAC - Secure Desktop Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14241" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23656-2" />
        <description>User Account Control must switch to the secure desktop when prompting for elevation.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461000" comment="Verifies 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4611" version="1" class="compliance">
      <metadata>
        <title>UAC - Non UAC Compliant Application Virtualization</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="14242" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24231-3" />
        <description>User Account Control must virtualize file and registry write failures to per-user locations.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461100" comment="Verifies 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4614" version="1" class="compliance">
      <metadata>
        <title>NTFS Requirement</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1081" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Local volumes must be formatted using NTFS.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461400" comment="Verifies local volumes are formatted using NTFS" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4615" version="1" class="compliance">
      <metadata>
        <title>Legal Notice Display</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1089" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25355-9" />
        <description>The required legal notice must be configured to display before console logon.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461500" comment="Legal Notice is configured with the required text." />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461501" comment="Legal Notice is configured with the required text." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4616" version="2" class="compliance">
      <metadata>
        <title>Caching of logon credentials</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1090" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24264-4" />
        <description>Caching of logon credentials must be limited.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461600" comment="Verifies 'Interactive Logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4' logons or less" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469400" comment="System is not a member of a domain" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4617" version="1" class="compliance">
      <metadata>
        <title>UR: Act as part of the operating system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1102" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25043-1" />
        <description>Unauthorized accounts must not have the Act as part of the operating system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461700" comment="Act as part of the operating system - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4618" version="1" class="compliance">
      <metadata>
        <title>Secure Print Driver Installation</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1151" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25176-9" />
        <description>The print driver installation privilege must be restricted to administrators.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461800" comment="Verifies 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4619" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Session Limit</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3449" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23328-8" />
        <description>Remote Desktop Services must limit users to one remote session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:461900" comment="Verifies 'Restrict Remote Desktop Services users to a Single Remote Desktop Services Session' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4620" version="4" class="compliance">
      <metadata>
        <title>Group Policy - Do Not Turn off Background Refresh</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <description>Group Policies must be refreshed in the background if the user is logged on.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462000" comment="Verifies 'Turn Off Background Refresh of Group Policy' is set to 'Disabled'" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462001" comment="Verifies 'DisableBkGndGroupPolicy' registry value is set to '0'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4621" version="2" class="compliance">
      <metadata>
        <title>Optional Subsystems</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4445" ref_url="http://iase.disa.mil/stigs/srr/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24878-1" />
        <description>Optional Subsystems must not be permitted to operate on the system.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462100" comment="Verifies 'System Settings: Optional Subsystems' is blank" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4623" version="1" class="compliance">
      <metadata>
        <title>Event Viewer Events.asp Links</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15672" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24235-4" />
        <description>Event Viewer Events.asp links must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462300" comment="Verifies 'Turn off Event Viewer “Events.asp' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4624" version="1" class="compliance">
      <metadata>
        <title>Media Player - First Use Dialog Boxes</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15687" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25014-2" />
        <description>Users must not be presented with Privacy and Installation options on first use of Windows Media Player.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462400" comment="Verifies 'Do Not Show First Use Dialog Boxes' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4625" version="1" class="compliance">
      <metadata>
        <title>Media DRM - Internet Access</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15722" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24380-8" />
        <description>Windows Media Digital Rights Management (DRM) must be prevented from accessing the Internet.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462500" comment="Verifies 'Prevent Windows Media DRM Internet Access' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4626" version="1" class="compliance">
      <metadata>
        <title>Software Certificate Installation Files</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15823" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Software certificate installation files must be removed from a system.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462600" comment="Verifies certificate installation files (*.p12 and *.pfx) are not present on the system" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4627" version="1" class="compliance">
      <metadata>
        <title>UAC - UIAccess Secure Desktop</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15991" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23295-9" />
        <description>UIAccess applications must not be allowed to prompt for elevation without using the secure desktop.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462700" comment="Verifies 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4628" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - COM Port Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15997" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24625-6" />
        <description>Users must be prevented from mapping local COM ports and redirecting data from the Remote Desktop Session Host to local COM ports.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462800" comment="Verifies 'Do not allow COM port redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4629" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - LPT Port Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15998" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24381-6" />
        <description>Users must be prevented from mapping local LPT ports and redirecting data from the Remote Desktop Session Host to local LPT ports.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:462900" comment="Verifies 'Do not allow LPT port redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4630" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - PNP Device Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="15999" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24708-0" />
        <description>Users must be prevented from redirecting Plug and Play devices to the Remote Desktop Session Host.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463000" comment="Verifies 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4631" version="1" class="compliance">
      <metadata>
        <title>TS/RDS - Smart Card Device Redirection</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="16000" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24260-2" />
        <description>The system must be configured to ensure smart card devices can be redirected to the Remote Desktop session.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463100" comment="Verifies 'Do not allow smart card device redirection' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4633" version="1" class="compliance">
      <metadata>
        <title>UR: Debug Programs</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="18010" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23648-9" />
        <description>Unauthorized accounts must not have the Debug programs user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463300" comment="Debug Programs - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4634" version="1" class="compliance">
      <metadata>
        <title>Legal Banner Dialog Box Title</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26359" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24020-0" />
        <description>The Windows dialog box title for the legal banner must be configured.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463400" comment="Legal Notice Caption - DoD Notice and Consent Banner" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463401" comment="Legal Notice Caption - US Department of Defense Warning Statement" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4636" version="1" class="compliance">
      <metadata>
        <title>UR: Allow log on locally</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26472" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25228-8" />
        <description>Unauthorized accounts must not have the Allow log on locally user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463600" comment="Allow log on locally - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4637" version="1" class="compliance">
      <metadata>
        <title>UR: Allow log on through Remote Desktop Services</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26473" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24406-1" />
        <description>Unauthorized accounts must not have the Allow log on through Remote Desktop Services user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463700" comment="Allow log on through Remote Desktop Services - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4638" version="1" class="compliance">
      <metadata>
        <title>UR: Back up files and directories</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26474" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25380-7" />
        <description>Unauthorized accounts must not have the Back up files and directories user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463800" comment="Back up files and directories - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4639" version="1" class="compliance">
      <metadata>
        <title>UR: Bypass traverse checking</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26475" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25271-8" />
        <description>Unauthorized accounts must not have the Bypass traverse checking user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:463900" comment="Bypass traverse checking - Administrators, Authenticated Users, Local Service, Network Service, Window Manager\Window Manager Group" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4640" version="1" class="compliance">
      <metadata>
        <title>UR: Change the system time</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26476" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24185-1" />
        <description>Unauthorized accounts must not have the Change the system time user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464000" comment="Change the system time - Administrators, Local Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4641" version="1" class="compliance">
      <metadata>
        <title>UR: Change the time zone</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26477" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24632-2" />
        <description>Unauthorized accounts must not have the Change the time zone user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464100" comment="Change the time zone - Administrators, Local Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4642" version="1" class="compliance">
      <metadata>
        <title>UR: Create a pagefile</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26478" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23972-3" />
        <description>Unauthorized accounts must not have the Create a pagefile user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464200" comment="Create a pagefile - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4643" version="1" class="compliance">
      <metadata>
        <title>UR: Create a token object</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26479" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23939-2" />
        <description>Unauthorized accounts must not have the Create a token object user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464300" comment="Create a token object - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4644" version="1" class="compliance">
      <metadata>
        <title>UR: Create global objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26480" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23850-1" />
        <description>Unauthorized accounts must not have the Create global objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464400" comment="Create global objects - Administrators, Service, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4645" version="1" class="compliance">
      <metadata>
        <title>UR: Create permanent shared objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26481" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23723-0" />
        <description>Unauthorized accounts must not have the Create permanent shared objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464500" comment="Create permanent shared objects - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4646" version="2" class="compliance">
      <metadata>
        <title>UR: Create symbolic links</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26482" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24549-8" />
        <description>Unauthorized accounts must not have the Create symbolic links user right.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464600" comment="Create symbolic links - Administrators" />
        <criteria operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:464601" comment="Hyper-v role installed" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:464602" comment="Create symbolic links - Administrators and VMs" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4647" version="1" class="compliance">
      <metadata>
        <title>UR: Force shutdown from a remote system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26488" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24734-6" />
        <description>Unauthorized accounts must not have the Force shutdown from a remote system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464700" comment="Force shutdown from a remote system - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4648" version="1" class="compliance">
      <metadata>
        <title>UR: Generate security audits</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26489" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24048-1" />
        <description>Unauthorized accounts must not have the Generate security audits user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464800" comment="Generate security audits - Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4649" version="1" class="compliance">
      <metadata>
        <title>UR: Impersonate a client after authentication</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26490" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24477-2" />
        <description>Unauthorized accounts must not have the Impersonate a client after authentication user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:464900" comment="Impersonate a client after authentication - Administrators, Service, Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4651" version="1" class="compliance">
      <metadata>
        <title>UR: Increase scheduling priority</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26492" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24911-0" />
        <description>Unauthorized accounts must not have the Increase scheduling priority user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465100" comment="Increase scheduling priority - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4652" version="1" class="compliance">
      <metadata>
        <title>UR: Load and unload device drivers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26493" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24779-1" />
        <description>Unauthorized accounts must not have the Load and unload device drivers user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465200" comment="Load and unload device drivers - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4653" version="1" class="compliance">
      <metadata>
        <title>UR: Lock pages in memory</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26494" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23829-5" />
        <description>Unauthorized accounts must not have the Lock pages in memory user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465300" comment="Lock pages in memory - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4655" version="1" class="compliance">
      <metadata>
        <title>UR: Modify an object label</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26497" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24682-7" />
        <description>Unauthorized accounts must not have the Modify an object label user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465500" comment="Modify an object label - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4656" version="1" class="compliance">
      <metadata>
        <title>UR: Modify firmware environment values</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26498" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25533-1" />
        <description>Unauthorized accounts must not have the Modify firmware environment values user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465600" comment="Modify firmware environment values - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4657" version="1" class="compliance">
      <metadata>
        <title>UR: Perform volume maintenance tasks</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26499" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25070-4" />
        <description>Unauthorized accounts must not have the Perform volume maintenance tasks user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465700" comment="Perform volume maintenance tasks - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4658" version="1" class="compliance">
      <metadata>
        <title>UR: Profile single process</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26500" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23844-4" />
        <description>Unauthorized accounts must not have the Profile single process user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465800" comment="Profile single process - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4659" version="1" class="compliance">
      <metadata>
        <title>UR: Profile system performance</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26501" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23802-2" />
        <description>Unauthorized accounts must not have the Profile system performance user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:465900" comment="Profile system performance - Administrators, NT Service\WdiServiceHost" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4660" version="1" class="compliance">
      <metadata>
        <title>UR: Replace a process level token</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26503" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24555-5" />
        <description>Unauthorized accounts must not have the Replace a process level token user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466000" comment="Replace a process level token - Local Service, Network Service" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4661" version="1" class="compliance">
      <metadata>
        <title>UR: Restore files and directories</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26504" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25518-2" />
        <description>Unauthorized accounts must not have the Restore files and directories user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466100" comment="Restore files and directories - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4662" version="1" class="compliance">
      <metadata>
        <title>UR: Shut down the system</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26505" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23500-2" />
        <description>Unauthorized accounts must not have the Shut down the system user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466200" comment="Shut down the system - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4663" version="1" class="compliance">
      <metadata>
        <title>UR: Take ownership of files or other objects</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26506" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25585-1" />
        <description>Unauthorized accounts must not have the Take ownership of files or other objects user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466300" comment="Take ownership of files or other objects - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4664" version="1" class="compliance">
      <metadata>
        <title>Audit - Credential Validation - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26529" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Credential Validation successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Credential Validation - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466400" comment="Audit - Credential Validation - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466401" comment="Audit - Credential Validation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4665" version="1" class="compliance">
      <metadata>
        <title>Audit - Credential Validation - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26530" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Credential Validation failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Credential Validation - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466500" comment="Audit - Credential Validation - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466401" comment="Audit - Credential Validation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4666" version="1" class="compliance">
      <metadata>
        <title>Audit - Computer Account Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26531" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Computer Account Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Computer Account Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466600" comment="Audit - Computer Account Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466601" comment="Audit - Computer Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4667" version="1" class="compliance">
      <metadata>
        <title>Audit - Computer Account Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26532" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Logon - Computer Account Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Computer Account Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466700" comment="Audit - Computer Account Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466601" comment="Audit - Computer Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4668" version="1" class="compliance">
      <metadata>
        <title>Audit - Other Account Management Events - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26533" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Other Account Management Events successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Other Account Management Events - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466800" comment="Audit - Other Account Management Events - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466801" comment="Audit - Other Account Management Events - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4669" version="1" class="compliance">
      <metadata>
        <title>Audit - Other Account Management Events - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26534" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Other Account Management Events failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Other Account Management Events - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466900" comment="Audit - Other Account Management Events - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:466801" comment="Audit - Other Account Management Events - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4670" version="1" class="compliance">
      <metadata>
        <title>Audit - Security Group Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26535" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Security Group Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security Group Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467000" comment="Audit - Security Group Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467001" comment="Audit - Security Group Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4671" version="1" class="compliance">
      <metadata>
        <title>Audit - Security Group Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26536" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - Security Group Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security Group Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467100" comment="Audit - Security Group Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467001" comment="Audit - Security Group Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4672" version="1" class="compliance">
      <metadata>
        <title>Audit - User Account Management - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26537" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - User Account Management successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - User Account Management - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467200" comment="Audit - User Account Management - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467201" comment="Audit - User Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4673" version="1" class="compliance">
      <metadata>
        <title>Audit - User Account Management - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26538" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Account Management - User Account Management failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - User Account Management - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467300" comment="Audit - User Account Management - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467201" comment="Audit - User Account Management - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4674" version="1" class="compliance">
      <metadata>
        <title>Audit - Process Creation - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26539" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Detailed Tracking - Process Creation successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Process Creation - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467400" comment="Audit - Process Creation - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467401" comment="Audit - Process Creation - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4675" version="1" class="compliance">
      <metadata>
        <title>Audit - Logoff - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26540" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logoff successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logoff - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467500" comment="Audit - Logoff - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467501" comment="Audit - Logoff - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4676" version="1" class="compliance">
      <metadata>
        <title>Audit - Logon - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26541" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logon successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logon - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467600" comment="Audit - Logon - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467601" comment="Audit - Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4677" version="1" class="compliance">
      <metadata>
        <title>Audit - Logon - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26542" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Logon failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Logon - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467700" comment="Audit - Logon - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467601" comment="Audit - Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4678" version="1" class="compliance">
      <metadata>
        <title>Audit - Special Logon - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26543" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Logon/Logoff - Special Logon successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Special Logon - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467800" comment="Audit - Special Logon - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:467801" comment="Audit - Special Logon - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4681" version="1" class="compliance">
      <metadata>
        <title>Audit - Audit Policy Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26546" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Audit Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468100" comment="Audit - Audit Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468101" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4682" version="1" class="compliance">
      <metadata>
        <title>Audit - Audit Policy Change - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26547" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Audit Policy Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468200" comment="Audit - Audit Policy Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468101" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4683" version="1" class="compliance">
      <metadata>
        <title>Audit - Authentication Policy Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26548" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Policy Change - Authentication Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Authentication Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468300" comment="Audit - Authentication Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468301" comment="Audit - Authentication Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4684" version="1" class="compliance">
      <metadata>
        <title>Audit - Sensitive Privilege Use - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26549" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Privilege Use - Sensitive Privilege Use successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Sensitive Privilege Use - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468400" comment="Audit - Sensitive Privilege Use - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468401" comment="Audit - Sensitive Privilege Use - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4685" version="1" class="compliance">
      <metadata>
        <title>Audit - Sensitive Privilege Use - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26550" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit Privilege Use - Sensitive Privilege Use failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Sensitive Privilege Use - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468500" comment="Audit - Sensitive Privilege Use - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468401" comment="Audit - Sensitive Privilege Use - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4686" version="1" class="compliance">
      <metadata>
        <title>Audit - IPSec Driver - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26551" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - IPsec Driver successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - IPSec Driver - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468600" comment="Audit - IPSec Driver - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468601" comment="Audit - IPSec Driver - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4687" version="1" class="compliance">
      <metadata>
        <title>Audit - IPSec Driver - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26552" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - IPsec Driver failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - IPSec Driver - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468700" comment="Audit - IPSec Driver - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468601" comment="Audit - IPSec Driver - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4688" version="1" class="compliance">
      <metadata>
        <title>Audit - Security State Change - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26553" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security State Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security State Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468800" comment="Audit - Security State Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468801" comment="Audit - Security State Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4689" version="1" class="compliance">
      <metadata>
        <title>Audit - Security State Change - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26554" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security State Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security State Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468900" comment="Audit - Security State Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:468801" comment="Audit - Security State Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4690" version="1" class="compliance">
      <metadata>
        <title>Audit - Security System Extension - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26555" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security System Extension successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security System Extension - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469000" comment="Audit - Security System Extension - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469001" comment="Audit - Security System Extension - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4691" version="1" class="compliance">
      <metadata>
        <title>Audit - Security System Extension - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26556" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - Security System Extension failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Security System Extension - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469100" comment="Audit - Security System Extension - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469001" comment="Audit - Security System Extension - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4692" version="1" class="compliance">
      <metadata>
        <title>Audit - System Integrity - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26557" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - System Integrity successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - System Integrity - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469200" comment="Audit - System Integrity - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469201" comment="Audit - System Integrity - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4693" version="1" class="compliance">
      <metadata>
        <title>Audit - System Integrity - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26558" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit System - System Integrity failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - System Integrity - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469300" comment="Audit - System Integrity - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469201" comment="Audit - System Integrity - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4695" version="1" class="compliance">
      <metadata>
        <title>UR: Deny access to this computer from the network - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="1155" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24188-5" />
        <description>The Deny access to this computer from the network user right on domain controllers must be configured to prevent unauthenticated access.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469500" comment="Deny access to this computer from the network - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4696" version="1" class="compliance">
      <metadata>
        <title>Kerberos - User Logon Restrictions</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="2376" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23796-6" />
        <description>Kerberos user logon restrictions must be enforced.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469600" comment="Kerberos Policy - Enforce user logon restrictions - Enabled, PA test = -1" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469601" comment="Kerberos Policy - Enforce user logon restrictions - Enabled, Other tools test = 1" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4697" version="1" class="compliance">
      <metadata>
        <title>Kerberos - Service Ticket Lifetime</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="2377" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23419-5" />
        <description>Kerberos Policy - Maximum lifetime for service ticket must be 600 or less, but not equal 0</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469701" comment="Kerberos Policy - Maximum lifetime for service ticket - Ticket expires" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469700" comment="Kerberos Policy - Maximum lifetime for service ticket - 600 minutes or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4698" version="1" class="compliance">
      <metadata>
        <title>Kerberos - User Ticket Lifetime</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="2378" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24230-5" />
        <description>The Kerberos user ticket lifetime must be limited to 10 hours or less.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469801" comment="Kerberos Policy - Maximum lifetime for user ticket - Ticket expires" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469800" comment="Kerberos Policy - Maximum lifetime for user ticket - 10 hours or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4699" version="1" class="compliance">
      <metadata>
        <title>Kerberos - User Ticket Renewal</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="2379" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24125-7" />
        <description>The Kerberos policy user ticket renewal maximum lifetime must be limited to 7 days or less.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:469900" comment="Kerberos Policy - Maximum lifetime for user ticket renewal - 7 days or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4700" version="1" class="compliance">
      <metadata>
        <title>Kerberos - Computer Clock Sync</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="2380" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25365-8" />
        <description>The computer clock synchronization tolerance must be limited to 5 minutes or less.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470000" comment="Kerberos Policy - Maximum tolerance for computer clock synchronization - 5 minutes or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4701" version="1" class="compliance">
      <metadata>
        <title>Anonymous Access to Named Pipes - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="3338" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Named pipes that can be accessed anonymously must be configured with limited values on domain controllers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470100" comment="Verifies 'Network access: Named Pipes that can be accessed anonymously' contains no values other than NETLOGON, SAMR, or LSARPC" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4702" version="1" class="compliance">
      <metadata>
        <title>LDAP Signing Requirements</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4407" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23587-9" />
        <description>Domain controllers must require LDAP access signing.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470200" comment="Verifies 'Domain Controller: LDAP Server signing requirements' is set to 'Require signing'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4703" version="1" class="compliance">
      <metadata>
        <title>Computer Account Password Change</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="4408" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24692-6" />
        <description>Domain controllers must be configured to allow reset of machine account passwords.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470300" comment="Verifies 'Domain Controller: Refuse machine account password changes' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4704" version="1" class="compliance">
      <metadata>
        <title>UR: Access this computer from the network - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26470" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>Unauthorized accounts must not have the Access this computer from the network user right on domain controllers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470400" comment="Access this computer from the network - Administrators, Authenticated Users, Enterprise Domain Controllers" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4705" version="1" class="compliance">
      <metadata>
        <title>UR: Deny log on as a service - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26484" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on as a service user right on domain controllers must be configured to include no accounts or groups.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470500" comment="Deny log on as a service - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4706" version="1" class="compliance">
      <metadata>
        <title>UR: Deny log on locally - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26485" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on locally user right on domain controllers must be configured to prevent unauthenticated access.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470600" comment="Deny log on locally - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4707" version="1" class="compliance">
      <metadata>
        <title>UR: Enable computer and user accounts to be trusted for delegation - Domain Controller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26487" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25270-0" />
        <description>Unauthorized accounts must not have the Enable computer and user accounts to be trusted for delegation user right on domain controllers.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470700" comment="Enable computer and user accounts to be trusted for delegation - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4708" version="1" class="compliance">
      <metadata>
        <title>UR: Add workstations to domain</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="30016" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23271-0" />
        <description>Unauthorized accounts must not have the Add workstations to domain user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470800" comment="Add workstations to domain - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4709" version="1" class="compliance">
      <metadata>
        <title>Audit - Directory Service Access - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="33663" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit DS Access - Directory Service Access successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Directory Service Access - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470900" comment="Audit - Directory Service Access - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470901" comment="Audit - Directory Service Access - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4710" version="1" class="compliance">
      <metadata>
        <title>Audit - Directory Service Access - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="33664" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit DS Access - Directory Service Access failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Directory Service Access - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471000" comment="Audit - Directory Service Access - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:470901" comment="Audit - Directory Service Access - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4711" version="1" class="compliance">
      <metadata>
        <title>Audit - Directory Service Changes - Success</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="33665" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit DS Access - Directory Service Changes successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Directory Service Changes - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471100" comment="Audit - Directory Service Changes - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471101" comment="Audit - Directory Service Changes - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4712" version="1" class="compliance">
      <metadata>
        <title>Audit - Directory Service Changes - Failure</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="33666" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The system must be configured to audit DS Access - Directory Service Changes failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Directory Service Changes - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471200" comment="Audit - Directory Service Changes - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471101" comment="Audit - Directory Service Changes - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4713" version="1" class="compliance">
      <!--This check for the Deny log on as a batch will return an Unknown with Policy Auditor 5.3 due a case sensitivity issue with user right name as defined in the schema - sedenyremoteInteractivelogonright.-->
      <metadata>
        <title>UR: Deny log on as a batch job - Domain Controllers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26483" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The Deny log on as a batch job user right on domain controllers must be configured to prevent unauthenticated access.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471300" comment="Deny log on as a batch job - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4714" version="2" class="compliance">
      <!--This check for the Deny log on through Remote Desktop Services will return an Unknown with Policy Auditor 5.3 due a case sensitivity issue with user right name as defined in the schema - sedenybatchLogonright.-->
      <metadata>
        <title>UR: Deny log on through Remote Desktop Services - Domain Controllers</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26486" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23273-6" />
        <description>The Deny log on through Remote Desktop Services user right on domain controllers must be configured to prevent unauthenticated access.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:471400" comment="Deny log on through Remote Desktop Services - Guests" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4727" version="1" class="compliance">
      <metadata>
        <title>WINCC-000011</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36673" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24070-5" />
        <description>IP stateless autoconfiguration limits state must be enabled.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472700" comment="Verifies 'Set IP Stateless Autoconfiguration Limits State' is set to 'Enabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4728" version="1" class="compliance">
      <metadata>
        <title>WINCC-000106</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="36709" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23213-2" />
        <description>Basic authentication for RSS feeds over HTTP must be turned off.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:472800" comment="Verifies 'Turn on Basic feed authentication over HTTP' is set to 'Disabled'" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4730" version="2" class="compliance">
      <metadata>
        <title>WINSO-000021</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <description>The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473000" comment="Verifies 'Interactive logon: Machine inactivity limit' is set to '900' seconds or less" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4731" version="3" class="compliance">
      <metadata>
        <title>Fax Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26600" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-25383-1" />
        <description>The Fax service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473100" comment="Verifies the Fax service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473101" comment="Verifies the Fax service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4732" version="2" class="compliance">
      <metadata>
        <title>Microsoft FTP Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26602" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23863-4" />
        <description>The Microsoft FTP service must not be installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473200" comment="Verifies the Microsoft FTP service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473201" comment="Verifies the Microsoft FTP service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4733" version="1" class="compliance">
      <metadata>
        <title>Peer Networking Identity Manager Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26604" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24910-2" />
        <description>The Peer Networking Identity Manager service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473300" comment="Verifies the Peer Networking Identity Manager service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473301" comment="Verifies the Peer Networking Identity Manager service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4734" version="1" class="compliance">
      <metadata>
        <title>Simple TCP/IP Services Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26605" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-23748-7" />
        <description>The Simple TCP/IP Services service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473400" comment="Verifies the Simple TCP/IP Services service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473401" comment="Verifies the Simple TCP/IP Services service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4735" version="1" class="compliance">
      <metadata>
        <title>Telnet Service Disabled</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="26606" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24474-9" />
        <description>The Telnet service must be disabled if installed.</description>
      </metadata>
      <criteria operator="OR">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473500" comment="Verifies the Telnet service startup type is Disabled" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473501" comment="Verifies the Telnet service is not installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4736" version="1" class="compliance">
      <metadata>
        <title>WNSV-000106</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="40206" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference ref_url="http://cce.mitre.org" source="CCE" ref_id="CCE-24365-9" />
        <description>The Smart Card Removal Policy service must be configured to automatic.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473600" comment="Verifies the Smart Card Removal Policy service startup type is Automatic" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4737" version="3" class="compliance">
      <metadata>
        <title>UR: Manage auditing and security log</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>Unauthorized accounts must not have the Manage auditing and security log user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473700" comment="Manage auditing and security log - Administrators" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4738" version="1" class="compliance">
      <metadata>
        <title>UR: Synchronize directory service data</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="12780" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <reference source="http://cce.mitre.org" ref_id="CCE-25408-6" />
        <description>The Synchronize directory service data user right must be configured to include no accounts or groups (blank).</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:473800" comment="Synchronize directory service data - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4740" version="2" class="compliance">
      <metadata>
        <title>UR: Access Credential Manager as a trusted caller</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <description>Unauthorized accounts must not have the Access Credential Manager as a trusted caller user right.</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:474000" comment="Access Credential Manager as a trusted caller - None" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4837" version="3" class="compliance">
      <metadata>
        <title>WINPK-000001 DoD Root Certificate</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="32272" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The DoD Root Certificate must be installed into the Trusted Root Store.</description>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Checking HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\ for the trusted root certificates.">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483700" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483704" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483708" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
        </criteria>
        <criteria operator="AND" comment="Checking HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\ for the trusted root certificates.">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483701" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483705" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483709" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
        </criteria>
        <criteria operator="AND" comment="Checking HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\ for the trusted root certificates.">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483702" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483706" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483710" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
        </criteria>
        <criteria operator="AND" comment="Checking HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\ for the trusted root certificates.">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483703" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483707" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:483711" comment="Verifies the DoD Root Certificate is installed into the Trusted Root Store" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4838" version="3" class="compliance">
      <metadata>
        <title>WINPK-000003 DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate. Windows 2012.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="32274" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4876" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store." />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4839" version="3" class="compliance">
      <metadata>
        <title>The US DoD CCEB Interoperability Root CA cross-certificates must be installed in the Untrusted Certificates Store. Win2012.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference source="DISA" ref_id="40237" ref_url="http://iase.disa.mil/stigs/SRR/index.html" />
        <description>The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4877" comment="US DoD CCEB Interoperability cross-certs must be installed" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4876" version="5" class="compliance">
      <metadata>
        <title>WINPK-000003 DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487600" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487601" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487602" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487603" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487604" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487605" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487606" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487607" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" />
        </criteria>
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487608" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487609" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487610" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487611" comment="Verifies the DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4877" version="336" class="compliance">
      <metadata>
        <title>WINPK-000004</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
        </affected>
        <description>The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate must be installed into the Untrusted Certificates Store.</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487704" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487705" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487706" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:487707" comment="Verifies the US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4973" version="1" class="compliance">
      <metadata>
        <title>The operating system must shut down by default upon audit failure (unless availability is an overriding concern).</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 2008</platform>
          <platform>Microsoft Windows 2008 R2</platform>
          <platform>Microsoft Windows 2012</platform>
        </affected>
        <description>Required to enter a password to access private keys</description>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497300" comment="HKEY_LOCAL_MACHINE\System\Policies\Microsoft\Cryptography\ForceKeyProtection exists and equals 2" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4975" version="2" class="compliance">
      <metadata>
        <title>The system must be configured to audit Policy Change - Authorization Policy Change successes.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>The system must be configured to audit Policy Change - Audit Policy Change successes.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Success">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497500" comment="Audit - Audit Policy Change - Success only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497501" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4976" version="2" class="compliance">
      <metadata>
        <title>The system must be configured to audit Policy Change - Authorization Policy Change failures.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>The system must be configured to audit Policy Change - Audit Policy Change failures.</description>
      </metadata>
      <criteria operator="OR" comment="Audit - Audit Policy Change - Failure">
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497600" comment="Audit - Audit Policy Change - Failure only" />
        <criterion test_ref="oval:mil.disa.fso.windows:tst:497601" comment="Audit - Audit Policy Change - Success and Failure" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4981" version="2" class="compliance">
      <metadata>
        <title>Active Directory data files must have proper access control permissions.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>Active Directory data files must have proper access control permissions.</description>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Database log files path permissions OK" operator="OR">
          <criteria comment="Checks for SCC" operator="AND">
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498100" comment="Database log files: NT Authority\SYSTEM has full control" />
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498101" comment="Database log files: BUILTIN\Administrators has full control" />
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498102" comment="Database log files: No other permissions" />
          </criteria>
          <criteria comment="Checks for ACAS and McAfee ePO and Policy Auditor" operator="AND">
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498106" comment="Database log files: NT Authority\SYSTEM has full control" />
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498107" comment="Database log files: BUILTIN\Administrators has full control" />
            <criterion test_ref="oval:mil.disa.fso.windows:tst:498108" comment="Database log files: No other permissions" />
          </criteria>
        </criteria>
        <criteria comment="DSA Database file permissions OK" operator="AND">
          <criterion test_ref="oval:mil.disa.fso.windows:tst:498103" comment="DSA Database file: NT Authority\SYSTEM has full control" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:498104" comment="DSA Database file: BUILTIN\Administrators has full control" />
          <criterion test_ref="oval:mil.disa.fso.windows:tst:498105" comment="DSA Database file: No other permissions" />
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4984" version="2" class="compliance">
      <metadata>
        <title>Event Viewer must be protected from unauthorized modification and deletion</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <description>Verify the permissions on Event Viewer only allow TrustedInstaller permissions to change or modify.</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:mil.disa.fso.windows:tst:498400" comment="Eventvwr.exe: Read and Execute rights for Administrators, System, Users, All Application Packages" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4987" version="1" class="compliance">
      <metadata>
        <title>UR: Access Credential Manager as a trusted caller (Windows 2012)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <reference ref_id="CCE-25683-4" source="http://cce.mitre.org" />
        <description>Unauthorized accounts must not have the Access Credential Manager as a trusted caller user right. (Windows 2012)</description>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4740" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4988" version="1" class="compliance">
      <metadata>
        <title>WINSO-000021 (Windows 2012)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <reference ref_id="CCE-23043-3" source="http://cce.mitre.org" />
        <description>The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver. (Windows 2012)</description>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4730" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4989" version="1" class="compliance">
      <metadata>
        <title>Group Policy - Do Not Turn off Background Refresh (Windows 2012)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 10</platform>
        </affected>
        <reference ref_id="CCE-23622-4" source="http://cce.mitre.org" />
        <description>Group Policies must be refreshed in the background if the user is logged on. (Windows 2012)</description>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4620" />
      </criteria>
    </definition>
    <definition id="oval:mil.disa.fso.windows:def:4990" version="1" class="compliance">
      <metadata>
        <title>UR: Manage auditing and security log (Windows 2012)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
        </affected>
        <reference ref_id="CCE-23456-7" source="http://cce.mitre.org" />
        <description>Unauthorized accounts must not have the Manage auditing and security log user right. (Windows 2012)</description>
      </metadata>
      <criteria>
        <extend_definition definition_ref="oval:mil.disa.fso.windows:def:4737" />
      </criteria>
    </definition>
  </definitions>
  <tests>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442200" version="2" comment="'Account lockout duration' is set to '0'" check_existence="at_least_one_exists" check="all" state_operator="OR">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442201" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442300" version="1" comment="'Account lockout threshold' is set to '3' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442300" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442301" version="2" comment="'Account lockout threshold' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442301" />
    </lockoutpolicy_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442400" version="1" comment="'Reset account lockout counter after' is set to at least '60' minutes" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442400" />
    </lockoutpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442500" version="1" comment="'Enforce password history' is set to '5' passwords or more" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442500" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442600" version="1" comment="'Maximum Password Age' is set to '60' days or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442600" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442601" version="1" comment="'Maximum Password Age' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442601" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442700" version="1" comment="'Minimum Password Age' is set to at least '1' day" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442700" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442800" version="1" comment="'Minimum password length' is set to at least '14' characters" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442800" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:442900" version="1" comment="'Password must meet complexity requirements' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:442900" />
    </passwordpolicy_test>
    <passwordpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443000" version="1" comment="'Store password using reversible encryption' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443000" />
    </passwordpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443100" version="1" comment="ProhibitLLTDIOOnPrivateNet value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443101" version="1" comment="AllowLLTDIOOnDomain value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443101" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443102" version="1" comment="AllowLLTDIOOnPublicNet value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443102" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443103" version="1" comment="EnableLLTDIO value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443103" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443200" version="1" comment="ProhibitRspndrOnPrivateNet value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443201" version="1" comment="EnableRspndr value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443201" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443202" version="1" comment="AllowRspndrOnDomain value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443202" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443203" version="1" comment="AllowRspndrOnPublicNet value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443203" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443300" version="1" comment="'Turn Off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443400" version="1" comment="'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443500" version="1" comment="'Require domain users to elevate when setting a network's location' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443600" version="1" comment="'Route all traffic through the internal network' is set to 'Enabled: Enabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443700" version="1" comment="'Set 6to4 State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443800" version="1" comment="'IP-HTTPS URL:' is not null" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443801" version="1" comment="'IP-HTTPS State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443801" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443801" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:443900" version="1" comment="'ISATAP State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:443900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:443900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444000" version="1" comment="'Teredo State' is set to 'Enabled: Disabled State'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444100" version="1" comment="EnableRegistrars value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444101" version="1" comment="DisableWPDRegistrar value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444101" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444102" version="1" comment="DisableUPnPRegistrar value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444102" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444103" version="1" comment="DisableInBand802DOT11Registrar value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444103" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444104" version="1" comment="DisableFlashConfigRegistrar value equals 0" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444104" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444200" version="1" comment="'Prohibit Access of the Windows Connect Now wizards' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444300" version="1" comment="'Extend Point and Print connection to search Windows Update' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444400" version="1" comment="'Specify settings for optional component installation and component repair' is set to 'Enabled' with 'Never attempt to download payload from Windows Update' selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444500" version="1" comment="'Allow remote access to the Plug and Play interface' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444600" version="1" comment="'Do not send a Windows error report when a generic driver is installed on a device' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444700" version="1" comment="'Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444800" version="1" comment="'Prevent device metadata retrieval from the Internet' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:444900" version="1" comment="'Prevent Windows from sending an error report when a device driver requests additional software during installation' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:444900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445000" version="1" comment="'Specify search order for device driver source locations' is set to 'Enabled: Do not search Windows Update'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445100" version="1" comment="'Specify the search server for device driver updates' is set to 'Enabled' with 'Search Managed Server' selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445200" version="1" comment="'Turn off Windows Update device driver search prompt' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445300" version="1" comment="'Boot-Start Driver Initialization Policy' is set to 'Enabled' with 'Good and Unknown' selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445400" version="1" comment="'Registry policy processing' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445401" version="1" comment="'Process even if the Group Policy objects have not changed' is selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445401" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445402" version="1" comment="'Registry policy processing' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445402" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445403" version="1" comment="'Registry policy processing' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445402" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445404" version="1" comment="'Process even if the Group Policy objects have not changed' is not selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445401" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445405" version="1" comment="Registry Policy Variable = -1" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445402" />
    </variable_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445406" version="1" comment="Registry Policy Variable = 0" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445403" />
    </variable_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445407" version="1" comment="Registry Policy Variable = 1" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445404" />
    </variable_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445408" version="1" comment="Registry Policy Variable = 2" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445405" />
    </variable_test>
    <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:tst:445409" version="1" comment="Registry Policy Variable = 3" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445403" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445406" />
    </variable_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445500" version="1" comment="'Turn off access to the Store' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445501" version="1" comment="Windows\WinStore exist" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445501" />
    </file_test>
    <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445502" version="1" comment="Windows\WinStore does not exist, Not Applicable" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445501" />
    </file_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445700" version="1" comment="'Turn off downloading of print drivers over HTTP' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:445800" version="1" comment="'Turn off handwriting recognition error reporting' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:445800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:445800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:446100" version="1" comment="'Turn off Internet File Association service' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:446100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:446100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:446200" version="1" comment="'Turn off printing over HTTP' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:446200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:446200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:446800" version="1" comment="'Turn off Windows Customer Experience Improvement Program' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:446800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:446800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447000" version="1" comment="'Turn off Windows Update device driver searching' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:447000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447100" version="1" comment="'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447300" version="1" comment="'Enumerate local users on domain-joined computers' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447400" version="1" comment="'Turn off app notifications on the lock screen' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447500" version="1" comment="'Require a password when a computer wakes (on battery)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:447500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447600" version="1" comment="'Require a password when a computer wakes (plugged in)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:447600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:447900" version="1" comment="'Configure Offer Remote Assistance' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:447900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:447900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448000" version="1" comment="'Configure Solicited Remote Assistance' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448100" version="1" comment="'Turn on session logging' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448400" version="1" comment="'Detect compatibility issues for applications and drivers' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448500" version="1" comment="'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448600" version="1" comment="'Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448700" version="1" comment="'Enable/Disable PerfTrack' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448800" version="1" comment="'Allow all trusted apps to install' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:448900" version="2" comment="'Turn off Inventory Collector' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:448900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:448900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449000" version="1" comment="'Disallow Autoplay for non-volume devices' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:449000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449100" version="1" comment="'Default behavior for AutoRun' is set to 'Enabled:Do not execute any autorun commands'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:449100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449200" version="1" comment="'Turn off AutoPlay' is set to 'Enabled:All Drives'" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:449200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449300" version="1" comment="'Detect compatibility issues for applications and drivers' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449400" version="1" comment="'Do not display the password reveal button' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:449500" version="1" comment="'Enumerate administrator accounts on elevation' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:449500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:449500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450200" version="1" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450300" version="1" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:81920'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450400" version="1" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450500" version="1" comment="'Specify the maximum log size (KB)' is set at a minimum to 'Enabled:32768'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450600" version="1" comment="'Configure Windows SmartScreen' is set to 'Enabled' with 'Turn off SmartScreen' selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450700" version="1" comment="'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450800" version="1" comment="'Turn off heap termination on corruption' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:450900" version="1" comment="'Turn off shell protocol protected mode' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:450900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:450900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451000" version="1" comment="'Turn off location' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451100" version="1" comment="'Do not allow passwords to be saved' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451200" version="1" comment="'Do not allow drive redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451300" version="1" comment="'Always prompt for password upon connection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451400" version="1" comment="'Set client connection encryption level' is set to 'Enabled' and 'High Level'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451700" version="1" comment="'Do not delete temp folder upon exit' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451800" version="1" comment="'Do not use temporary folders per session' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:451800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:451900" version="1" comment="'Prevent downloading of enclosures' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:451900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452200" version="1" comment="'Configure Microsoft Active Protection Service Reporting' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452201" version="1" comment="'Configure Microsoft Active Protection Service Reporting' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452201" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452500" version="1" comment="'Enable user control over installs' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452600" version="1" comment="'Always install with elevated privileges' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452700" version="1" comment="'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:452800" version="1" comment="'Prohibit non-administrators from applying vendor signed updates' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:452800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453000" version="1" comment="'Prevent Automatic Updates' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453100" version="1" comment="'Allow Basic authentication' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453200" version="1" comment="'Allow unencrypted traffic' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453300" version="1" comment="'Disallow Digest authentication' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453400" version="1" comment="'Allow Basic authentication' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453500" version="1" comment="'Allow unencrypted traffic' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453600" version="1" comment="'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453700" version="1" comment="'Require secure RPC communication' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453800" version="1" comment="The OS Build is equal to or greater than 9200" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453801" version="1" comment="The OS Version is equal to or greater than 6.2" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453801" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453801" />
    </registry_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453900" version="1" comment="'Accounts: Guest account status' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453901" />
    </user_test>
    <sid_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:453901" version="1" comment="The built-in guest account does not exist" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:453901" />
    </sid_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454000" version="1" comment="'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454000" />
    </registry_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454100" version="2" comment="'Accounts: Rename administrator account' is set to a value other than 'Administrator'" check_existence="at_least_one_exists" check="none satisfy">
      <object object_ref="oval:mil.disa.fso.windows:obj:454100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454101" />
    </user_test>
    <user_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454200" version="2" comment="'Accounts: Rename guest account' is set to a value other than 'Guest'" check_existence="at_least_one_exists" check="none satisfy">
      <object object_ref="oval:mil.disa.fso.windows:obj:453900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454200" />
    </user_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454300" version="1" comment="'Audit: Audit the access of global system objects' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454400" version="1" comment="'Audit: Audit the use of Backup and Restore privilege' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454500" version="1" comment="'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454600" version="1" comment="'Devices: Allowed to Format and Eject Removable Media' is set to 'Administrators'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454700" version="1" comment="'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454800" version="1" comment="'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454801" version="1" comment="'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:454900" version="1" comment="'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:454900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:454900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455000" version="1" comment="'Domain member: Disable machine account password changes' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455100" version="1" comment="'Domain member: Maximum machine account password age' is set to '30' days or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455101" version="1" comment="'Domain member: Maximum machine account password age' is not set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455101" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455200" version="1" comment="'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455300" version="1" comment="'Interactive logon: Do not display last user name' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455400" version="1" comment="'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455500" version="1" comment="'Interactive logon: Prompt user to change password before expiration' is set for '14' days or more" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455600" version="1" comment="'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455601" version="1" comment="'Interactive logon: Smart card removal behavior' is set to 'Force Logoff'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455601" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455700" version="1" comment="'Microsoft Network Client: Digitally sign communications (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455800" version="1" comment="'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:455900" version="1" comment="'Microsoft Network Client: Send unencrypted password to connect to third-party SMB servers' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:455900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456000" version="1" comment="'Microsoft network server: Amount of idle time required before suspending session' is set to '15' minutes or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456100" version="1" comment="'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456200" version="1" comment="'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456300" version="1" comment="'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456400" version="1" comment="'Microsoft network server: Server SPN target name validation level' is set to 'Off'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456500" version="1" comment="'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456501" version="1" comment="The automatic logon password registry value (DefaultPassword) does not exist" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456501" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456600" version="1" comment="'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456700" version="1" comment="'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456800" version="1" comment="'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:456900" version="1" comment="'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to '300000 or 5 minutes (recommended)' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:456900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:456900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457000" version="1" comment="'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic' is set to 'Only ISAKMP is exempt (recommended for Windows Server 2003)'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457100" version="1" comment="'MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457200" version="1" comment="'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457300" version="1" comment="'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457400" version="1" comment="'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 5 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457500" version="1" comment="'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to '3' or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457600" version="1" comment="'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default)' is set to 3 or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457700" version="1" comment="'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 90 percent or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457800" version="1" comment="'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:457900" version="1" comment="'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:457900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:457900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458000" version="1" comment="'Network access: Do not allow storage of credentials or .NET Passports for network authentication' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458100" version="1" comment="'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458200" version="1" comment="'Network access: Remotely accessible registry paths' is configured to contain authorized registry paths" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458201" version="1" comment="'Network access: Remotely accessible registry paths' is configured to contain no entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:462100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458202" version="1" comment="'Network access: Remotely accessible registry paths' is is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458300" version="1" comment="'Network access: Remotely accessible registry paths and sub paths' is configured to contain authorized registry paths" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458301" version="1" comment="'Network access: Remotely accessible registry paths and sub paths' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458302" version="1" comment="'Network access: Remotely accessible registry paths and sub paths' is configured but contains no entries" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:462100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458400" version="1" comment="'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458500" version="1" comment="'Network access: Shares that can be accessed anonymously' is blank" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458501" version="1" comment="'Network access: Shares that can be accessed anonymously' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458600" version="1" comment="'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458700" version="1" comment="'Network Security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458800" version="1" comment="'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:458900" version="1" comment="'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:458900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:458900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459000" version="2" comment="'Network Security: Configure encryption types allowed for Kerberos' is not configured" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459001" version="2" comment="'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC' not selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459001" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459002" version="2" comment="'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC_MD5' not selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459002" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459003" version="2" comment="'Network Security: Configure encryption types allowed for Kerberos' is set to 'Enabled' with 'DES_CBC_MD5' not selected" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459003" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459100" version="1" comment="'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459100" />
    </registry_test>
    <lockoutpolicy_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459200" version="1" comment="'Network security: Force logoff when logon hours expire' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:442300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459200" />
    </lockoutpolicy_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459300" version="1" comment="'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM &amp; NTLM'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459400" version="1" comment="'Network security: LDAP client signing requirements' is set to at a minimum 'Negotiate signing'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459500" version="1" comment="'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459501" version="1" comment="'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require 128-bit encryption'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459501" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459600" version="1" comment="'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459601" version="1" comment="'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require 128-bit encryption'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459501" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:459900" version="1" comment="'Shutdown: Allow system to be shutdown without having to log on' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:459900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:459900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460000" version="1" comment="'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460100" version="1" comment="'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460200" version="1" comment="'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460200" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460300" version="1" comment="'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460300" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460400" version="1" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent' or more secure options" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460401" version="1" comment="'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is not set to 'Elevate without prompting'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:455101" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460500" version="1" comment="'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460600" version="1" comment="'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460700" version="1" comment="'User Account Control: Only elevate executables that are signed and validated' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460800" version="1" comment="'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460800" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:460900" version="1" comment="'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:460900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:460900" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461000" version="1" comment="'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461100" version="1" comment="'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461100" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461400" version="1" check="all" comment="Local volumes are formatted using NTFS">
      <object object_ref="oval:mil.disa.fso.windows:obj:461400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461400" />
    </wmi_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461500" version="1" comment="Legal Notice is configured with the required text." check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461500" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461501" version="1" comment="Legal Notice is configured with the required text." check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461501" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461600" version="2" comment="'Interactive Logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4' logons or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461600" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461700" version="1" check="all" comment="Act as part of the operating system - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:461700" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461800" version="1" comment="'Devices: Prevent users from installing printer drivers' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:461900" version="1" comment="'Restrict Remote Desktop Services users to a Single Remote Desktop Services Session' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:461900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462000" version="3" comment="Verifies 'Turn Off Background Refresh of Group Policy' is set to 'Disabled'" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462000" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462001" version="2" comment="Verifies 'DisableBkGndGroupPolicy' registry value is set to '0'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:462001" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462100" version="1" check="all" comment="'System Settings: Optional Subsystems' is blank" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:462100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:462100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462300" version="1" comment="'Turn off Event Viewer “Events.asp' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462400" version="1" comment="'Do Not Show First Use Dialog Boxes' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462500" version="1" comment="'Prevent Windows Media DRM Internet Access' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462600" version="1" comment="Software certificate installation files (*.p12 and *.pfx) are not present on the system" check="none exist" check_existence="none_exist">
      <object object_ref="oval:mil.disa.fso.windows:obj:462600" />
    </file_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462700" version="1" comment="'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462800" version="1" comment="'Do not allow COM port redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:462900" version="1" comment="'Do not allow LPT port redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:462900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463000" version="1" comment="'Do not allow supported Plug and Play device redirection' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:463000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463100" version="1" comment="'Do not allow smart card device redirection' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:463100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463300" version="1" check="all" comment="Debug Programs - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463301" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463400" version="1" comment="Legal Notice Caption - DoD Notice and Consent Banner" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:463400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463401" version="1" comment="Legal Notice Caption - US Department of Defense Warning Statement" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:463400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463401" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463600" version="1" check="all" comment="Allow log on locally - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463700" version="1" check="all" comment="Allow log on through Remote Desktop Services - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463800" version="1" check="all" comment="Back up files and directories - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:463900" version="1" check="all" comment="Bypass traverse checking - Administrators, Authenticated Users, Local Service, Network Service, Window Manager\Window Manager Group">
      <object object_ref="oval:mil.disa.fso.windows:obj:463900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:463900" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464000" version="1" check="all" comment="Change the system time - Administrators, Local Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464100" version="1" check="all" comment="Change the time zone - Administrators, Local Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464200" version="1" check="all" comment="Create a pagefile - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464300" version="1" check="all" comment="Create a token object - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464400" version="1" check="all" comment="Create global objects - Administrators, Service, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464401" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464500" version="1" check="all" comment="Create permanent shared objects - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464600" version="2" check="all" comment="Create symbolic links - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464600" />
    </accesstoken_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464601" version="2" check="all" comment="verify hyper-v role installed" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:464601" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464601" />
    </wmi_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464602" version="2" check="all" comment="Create symbolic links - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:464602" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464700" version="1" check="all" comment="Force shutdown from a remote system - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464800" version="1" check="all" comment="Generate security audits - Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:464900" version="1" check="all" comment="Impersonate a client after authentication - Administrators, Service, Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:464900" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465100" version="1" check="all" comment="Increase scheduling priority - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465200" version="1" check="all" comment="Load and unload device drivers - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465300" version="1" check="all" comment="Lock pages in memory - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465500" version="1" check="all" comment="Modify an object label - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465600" version="1" check="all" comment="Modify firmware environment values - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465700" version="1" check="all" comment="Perform volume maintenance tasks - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465800" version="1" check="all" comment="Profile single process - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:465900" version="1" check="all" comment="Profile system performance - Administrators, NT Service\WdiServiceHost">
      <object object_ref="oval:mil.disa.fso.windows:obj:465900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:465901" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466000" version="1" check="all" comment="Replace a process level token - Local Service, Network Service">
      <object object_ref="oval:mil.disa.fso.windows:obj:464800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466000" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466100" version="1" check="all" comment="Restore files and directories - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466100" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466200" version="1" check="all" comment="Shut down the system - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466200" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466300" version="1" check="all" comment="Take ownership of files or other objects - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466300" />
    </accesstoken_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466400" version="1" comment="Audit - Credential Validation - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466401" version="1" comment="Audit - Credential Validation - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466401" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466500" version="1" comment="Audit - Credential Validation - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466600" version="1" comment="Audit - Computer Account Management - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466601" version="1" comment="Audit - Computer Account Management - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466601" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466700" version="1" comment="Audit - Computer Account Management - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466800" version="1" comment="Audit - Other Account Management Events - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466801" version="1" comment="Audit - Other Account Management Events - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466801" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:466900" version="1" comment="Audit - Other Account Management Events - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:466900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467000" version="1" comment="Audit - Security Group Management - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467000" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467001" version="1" comment="Audit - Security Group Management - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467001" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467100" version="1" comment="Audit - Security Group Management - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467200" version="1" comment="Audit - User Account Management - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467201" version="1" comment="Audit - User Account Management - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467201" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467300" version="1" comment="Audit - User Account Management - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467400" version="1" comment="Audit - Process Creation - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467401" version="1" comment="Audit - Process Creation - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467401" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467500" version="1" comment="Audit - Logoff - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467501" version="1" comment="Audit - Logoff - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467600" version="1" comment="Audit - Logon - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467601" version="1" comment="Audit - Logon - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467601" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467700" version="1" comment="Audit - Logon - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467800" version="1" comment="Audit - Special Logon - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:467801" version="1" comment="Audit - Special Logon - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:467801" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468100" version="1" comment="Audit - Audit Policy Change - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468101" version="1" comment="Audit - Audit Policy Change - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468101" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468200" version="1" comment="Audit - Audit Policy Change - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468300" version="1" comment="Audit - Authentication Policy Change - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468300" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468301" version="1" comment="Audit - Authentication Policy Change - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468301" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468400" version="1" comment="Audit - Sensitive Privilege Use - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468400" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468401" version="1" comment="Audit - Sensitive Privilege Use - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468401" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468500" version="1" comment="Audit - Sensitive Privilege Use - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468600" version="1" comment="Audit - IPSec Driver - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468601" version="1" comment="Audit - IPSec Driver - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468601" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468700" version="1" comment="Audit - IPSec Driver - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468700" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468800" version="1" comment="Audit - Security State Change - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468800" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468801" version="1" comment="Audit - Security State Change - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468801" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:468900" version="1" comment="Audit - Security State Change - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:468900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469000" version="1" comment="Audit - Security System Extension - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469000" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469001" version="1" comment="Audit - Security System Extension - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469001" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469100" version="1" comment="Audit - Security System Extension - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469200" version="1" comment="Audit - System Integrity - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469200" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469201" version="1" comment="Audit - System Integrity - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469201" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469300" version="1" comment="Audit - System Integrity - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469300" />
    </auditeventpolicysubcategories_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469400" version="2" check="all" comment="System is not a member of a domain">
      <object object_ref="oval:mil.disa.fso.windows:obj:469400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469400" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469500" version="1" check="all" comment="Deny access to this computer from the network - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:469500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469500" />
    </accesstoken_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469600" version="1" check="all" comment="Kerberos user logon restrictions must be enforced, PA test = -1" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:469600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469600" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469601" version="1" check="all" comment="Kerberos user logon restrictions must be enforced, Other tools test = 1" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:469600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469601" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469700" version="1" check="all" comment="Kerberos Policy - Maximum lifetime for service ticket - 600 minutes or less" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:469700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469700" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469701" version="1" check="all" comment="Kerberos Policy - Maximum lifetime for service ticket - Ticket expires" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:469700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469701" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469800" version="1" check="all" comment="Kerberos Policy - Maximum lifetime for user ticket - 10 hours or less" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:469800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469800" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469801" version="1" check="all" comment="Kerberos Policy - Maximum lifetime for user ticket - Ticket expires" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:469800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469801" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:469900" version="1" check="all" comment="Kerberos Policy - Maximum lifetime for user ticket renewal - 7 days or less" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:469900" />
      <state state_ref="oval:mil.disa.fso.windows:ste:469900" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470000" version="1" check="all" comment="Kerberos Policy - Maximum tolerance for computer clock synchronization - 5 minutes or less" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:470000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470000" />
    </wmi_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470100" version="1" comment="'Network access: Named Pipes that can be accessed anonymously' contains no values other than NETLOGON, SAMR, or LSARPC" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:470100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470100" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470200" version="1" comment="'Domain Controller: LDAP Server signing requirements' is set to 'Require signing'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:470200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:444400" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470300" version="1" comment="'Domain Controller: Refuse machine account password changes' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:470300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470400" version="1" check="all" comment="Access this computer from the network - Administrators, Authenticated Users, Enterprise Domain Controllers">
      <object object_ref="oval:mil.disa.fso.windows:obj:470400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470402" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470500" version="1" check="all" comment="Deny log on as a service - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470500" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470600" version="1" check="all" comment="Deny log on locally - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:469500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470600" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470700" version="1" check="all" comment="Enable computer and user accounts to be trusted for delegation - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470800" version="1" check="all" comment="Add workstations to domain - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470800" />
    </accesstoken_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470900" version="1" comment="Audit - Directory Service Access - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470900" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:470901" version="1" comment="Audit - Directory Service Access - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:470901" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:471000" version="1" comment="Audit - Directory Service Access - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471000" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:471100" version="1" comment="Audit - Directory Service Changes - Success only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471100" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:471101" version="1" comment="Audit - Directory Service Changes - Success and Failure" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471101" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:471200" version="1" comment="Audit - Directory Service Changes - Failure only" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471200" />
    </auditeventpolicysubcategories_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:471300" version="1" check="all" comment="Deny log on as a batch job - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:469500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471300" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:471400" version="1" check="all" comment="Deny log on through Remote Desktop Services - Guests">
      <object object_ref="oval:mil.disa.fso.windows:obj:469500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:471400" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472700" version="1" comment="'Set IP Stateless Autoconfiguration Limits State' is set to 'Enabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:472700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:453700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:472800" version="1" comment="'Turn on Basic feed authentication over HTTP' is set to 'Disabled'" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:472800" />
      <state state_ref="oval:mil.disa.fso.windows:ste:452700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473000" version="1" comment="'Interactive logon: Machine inactivity limit' is set to '900' seconds or less" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473000" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473000" />
    </registry_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473100" version="1" comment="The Fax service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473100" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473101" version="1" comment="The Fax service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473200" version="1" comment="The Microsoft FTP service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473200" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473201" version="1" comment="The Microsoft FTP service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473200" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473300" version="1" comment="The Peer Networking Identity Manager service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473301" version="1" comment="The Peer Networking Identity Manager service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473300" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473400" version="1" comment="The Simple TCP/IP Services service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473401" version="1" comment="The Simple TCP/IP Services service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473400" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473500" version="1" comment="The Telnet service startup type is Disabled" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473500" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473100" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473501" version="1" comment="The Telnet service is not installed" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473500" />
    </wmi_test>
    <wmi_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473600" version="1" comment="The Smart Card Removal Policy service startup type is Automatic" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:473600" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473600" />
    </wmi_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473700" version="2" check_existence="any_exist" check="all" comment="Manage auditing and security log - Administrators">
      <object object_ref="oval:mil.disa.fso.windows:obj:463300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473700" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:473800" version="1" check="all" comment="Synchronize directory service data - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:473800" />
    </accesstoken_test>
    <accesstoken_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:474000" version="1" check="all" comment="Access Credential Manager as a trusted caller - None">
      <object object_ref="oval:mil.disa.fso.windows:obj:461700" />
      <state state_ref="oval:mil.disa.fso.windows:ste:474000" />
    </accesstoken_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483700" version="2" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483700" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483701" version="2" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483701" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483702" version="2" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483702" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483703" version="2" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483703" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483704" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483704" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483705" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483705" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483706" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483706" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483707" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483707" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483708" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483708" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483709" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483709" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483710" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483710" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:483711" version="1" comment="The DoD Root Certificate is installed into the Trusted Root Store" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:483711" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487600" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487600" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487601" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487601" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487602" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487602" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487603" version="4" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -22" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487603" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487604" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487604" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487605" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487605" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487606" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487606" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487607" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FF" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487607" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487608" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487608" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487609" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487609" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487610" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487610" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487611" version="2" comment="The DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate is installed into the Untrusted Certificates Store -FC" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487611" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487704" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487704" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487705" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487705" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487706" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487706" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:487707" version="2" comment="The US DoD CCEB Interoperability Root CA 1 to DoD Root CA 2 cross-certificate is installed into the Untrusted Certificates Store -DA" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:487707" />
    </registry_test>
    <registry_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497300" version="1" comment="HKEY_LOCAL_MACHINE\System\Policies\Microsoft\Cryptography\ForceKeyProtection exists and equals 2" check_existence="all_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:497300" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497300" />
    </registry_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497500" version="2" check="all" comment="Audit - Audit Policy Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497500" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497501" version="2" check="all" comment="Audit - Audit Policy Change - Success only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497501" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497600" version="2" check="all" comment="Audit - Audit Policy Change - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497600" />
    </auditeventpolicysubcategories_test>
    <auditeventpolicysubcategories_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:497601" version="2" check="all" comment="Audit - Audit Policy Change - Failure only" check_existence="at_least_one_exists">
      <object object_ref="oval:mil.disa.fso.windows:obj:466400" />
      <state state_ref="oval:mil.disa.fso.windows:ste:497601" />
    </auditeventpolicysubcategories_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498100" version="1" comment="Database log files: NT Authority\SYSTEM has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498102" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498101" version="1" comment="Database log files: BUILTIN\Administrators has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498103" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498102" version="1" comment="Database log files: No other permissions" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498104" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498103" version="1" comment="DSA Database file: NT Authority\SYSTEM has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498105" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498104" version="1" comment="DSA Database file: BUILTIN\Administrators has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498106" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498105" version="2" comment="DSA Database file: No other permissions" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498107" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498106" version="1" comment="Database log files: NT Authority\SYSTEM has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498108" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498107" version="1" comment="Database log files: BUILTIN\Administrators has full control" check_existence="at_least_one_exists" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498109" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498102" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498108" version="1" comment="Database log files: No other permissions" check_existence="none_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498110" />
    </fileeffectiverights53_test>
    <fileeffectiverights53_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:tst:498400" version="1" comment="Eventvwr.exe: Only Read and Execute rights for users other than TrustedInstaller" check_existence="any_exist" check="all">
      <object object_ref="oval:mil.disa.fso.windows:obj:498404" />
      <state state_ref="oval:mil.disa.fso.windows:ste:498408" />
    </fileeffectiverights53_test>
  </tests>
  <objects>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:388601" version="2" comment="System Root Directory Registry Object">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name datatype="string">SystemRoot</name>
    </registry_object>
    <lockoutpolicy_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:442300" version="2" comment="Lockout policy" />
    <passwordpolicy_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:442600" version="1" comment="Password policy" />
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">ProhibitLLTDIOOnPrivateNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443101" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowLLTDIOOnDomain</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443102" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowLLTDIOOnPublicNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443103" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">EnableLLTDIO</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">ProhibitRspndrOnPrivateNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443201" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">EnableRspndr</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443202" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowRspndrOnDomain</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443203" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\LLTD</key>
      <name datatype="string">AllowRspndrOnPublicNet</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\policies\Microsoft\Peernet</key>
      <name datatype="string">Disabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Network Connections</key>
      <name datatype="string">NC_AllowNetBridge_NLA</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Network Connections</key>
      <name datatype="string">NC_StdDomainUserSetLocation</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">Force_Tunneling</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">6to4_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface</key>
      <name datatype="string">IPHTTPS_ClientUrl</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443801" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface</key>
      <name datatype="string">IPHTTPS_ClientState</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:443900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">ISATAP_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\TCPIP\v6Transition</key>
      <name datatype="string">Teredo_State</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">EnableRegistrars</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444101" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableWPDRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444102" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableUPnPRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444103" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableInBand802DOT11Registrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444104" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\Registrars</key>
      <name datatype="string">DisableFlashConfigRegistrar</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\WCN\UI</key>
      <name datatype="string">DisableWcnUi</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DoNotInstallCompatibleDriverFromWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows\CurrentVersion\Policies\Servicing</key>
      <name datatype="string" operation="equals">UseWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">AllowRemoteRPC</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSendGenericDriverNotFoundToWER</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string">DisableSystemRestore</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\Device Metadata</key>
      <name datatype="string">PreventDeviceMetadataFromNetwork</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:444900" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\DeviceInstall\Settings</key>
      <name datatype="string" operation="equals">DisableSendRequestAdditionalSoftwareToWER</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">SearchOrderConfig</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string" operation="equals">DriverServerSelection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">DontPromptForWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">System\CurrentControlSet\Policies\EarlyLaunch</key>
      <name datatype="string" operation="equals">DriverLoadPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</key>
      <name xsi:nil="true" datatype="string" />
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445401" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</key>
      <name datatype="string">NoBackgroundPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445402" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</key>
      <name datatype="string">NoGPOListChanges</name>
    </registry_object>
    <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:obj:445403" version="1" comment="Variable">
      <var_ref datatype="string">oval:mil.disa.fso.windows:var:445400</var_ref>
    </variable_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445500" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string" operation="equals">NoUseStoreOpenWith</name>
    </registry_object>
    <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445501" version="1" comment="Windows/WinStore exist">
      <behaviors recurse_direction="down" max_depth="-1" />
      <path datatype="string" operation="equals">C:\Windows\WinStore</path>
      <filename xsi:nil="true" datatype="string" />
    </file_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DisableWebPnPDownload</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:445800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\HandwritingErrorReports</key>
      <name datatype="string">PreventHandwritingErrorReports</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:446100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoInternetOpenWith</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:446200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Printers</key>
      <name datatype="string">DisableHTTPPrinting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:446800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\SQMClient\Windows</key>
      <name datatype="string">CEIPEnable</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\DriverSearching</key>
      <name datatype="string">DontSearchWindowsUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Control Panel\International</key>
      <name datatype="string" operation="equals">BlockUserInputMethodsForSignIn</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\System</key>
      <name datatype="string" operation="equals">EnumerateLocalUsers</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\System</key>
      <name datatype="string" operation="equals">DisableLockScreenAppNotifications</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51</key>
      <name datatype="string">DCSettingIndex</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51</key>
      <name datatype="string">ACSettingIndex</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:447900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fAllowUnsolicited</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fAllowToGetHelp</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">LoggingEnabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\AppCompat</key>
      <name datatype="string" operation="equals">DisablePcaUI</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy</key>
      <name datatype="string">DisableQueryRemoteServer</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy</key>
      <name datatype="string">EnableQueryRemoteServer</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}</key>
      <name datatype="string">ScenarioExecutionEnabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448800" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Appx</key>
      <name datatype="string" operation="equals">AllowAllTrustedApps</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:448900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\AppCompat</key>
      <name datatype="string">DisableInventory</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoAutoplayfornonVolume</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoAutorun</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">NoDriveTypeAutoRun</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\Biometrics</key>
      <name datatype="string" operation="equals">Enabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\CredUI</key>
      <name datatype="string" operation="equals">DisablePasswordReveal</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:449500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI</key>
      <name datatype="string">EnumerateAdministrators</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Application</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Security</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows\EventLog\System</key>
      <name datatype="string">MaxSize</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450600" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\System</key>
      <name datatype="string" operation="equals">EnableSmartScreen</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoDataExecutionPrevention</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Explorer</key>
      <name datatype="string">NoHeapTerminationOnCorruption</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:450900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</key>
      <name datatype="string">PreXPSP2ShellProtocolBehavior</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451000" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\LocationAndSensors</key>
      <name datatype="string" operation="equals">DisableLocation</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">DisablePasswordSaving</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableCdm</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fPromptForPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">MinEncryptionLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">DeleteTempDirsOnExit</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">PerSessionTempDir</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:451900" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Feeds</key>
      <name datatype="string" operation="equals">DisableEnclosureDownload</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows Defender\SpyNet</key>
      <name xsi:nil="true" datatype="string" />
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452201" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows Defender\SpyNet</key>
      <name datatype="string">SpyNetReporting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452500" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string" operation="equals">EnableUserControl</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452600" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string" operation="equals">AlwaysInstallElevated</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452700" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string" operation="equals">SafeForScripting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:452800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows\Installer</key>
      <name datatype="string">DisableLUAPatching</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\WindowsMediaPlayer</key>
      <name datatype="string">DisableAutoUpdate</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Client</key>
      <name datatype="string" operation="equals">AllowBasic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453200" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Client</key>
      <name datatype="string" operation="equals">AllowUnencryptedTraffic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Client</key>
      <name datatype="string" operation="equals">AllowDigest</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453400" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Service</key>
      <name datatype="string" operation="equals">AllowBasic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453500" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Service</key>
      <name datatype="string" operation="equals">AllowUnencryptedTraffic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453600" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows\WinRM\Service</key>
      <name datatype="string" operation="equals">DisableRunAs</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453700" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string" operation="equals">fEncryptRPCTraffic</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453800" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows NT\CurrentVersion</key>
      <name datatype="string" operation="equals">CurrentBuildNumber</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453801" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows NT\CurrentVersion</key>
      <name datatype="string" operation="equals">CurrentVersion</name>
    </registry_object>
    <user_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453900" version="1" comment="Built-in Guest">
      <user var_ref="oval:mil.disa.fso.windows:var:453900" datatype="string" />
    </user_object>
    <sid_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:453901" version="2" comment="Built-in Guest SID">
      <trustee_name operation="pattern match" datatype="string">.*</trustee_name>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.fso.windows:ste:453900</filter>
    </sid_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\Currentcontrolset\Control\Lsa</key>
      <name datatype="string">Limitblankpassworduse</name>
    </registry_object>
    <user_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454100" version="1" comment="Built-in Administrator">
      <user var_ref="oval:mil.disa.fso.windows:var:454100" datatype="string" />
    </user_object>
    <sid_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454101" version="2" comment="Built-in Administrator SID">
      <trustee_name operation="pattern match" datatype="string">.*</trustee_name>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.fso.windows:ste:454100</filter>
    </sid_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\Currentcontrolset\Control\Lsa</key>
      <name datatype="string">AuditBaseObjects</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\Currentcontrolset\Control\Lsa</key>
      <name datatype="string">FullPrivilegeAuditing</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\Currentcontrolset\Control\Lsa</key>
      <name datatype="string">scenoapplylegacyauditpolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">AllocateDASD</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireSignOrSeal</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">SealSecureChannel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:454900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">SignSecureChannel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">DisablePasswordChange</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">MaximumPasswordAge</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RequireStrongKey</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">DontDisplayLastUserName</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">DisableCAD</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">PasswordExpiryWarning</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">scremoveoption</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanWorkstation\Parameters</key>
      <name datatype="string">RequireSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanWorkstation\Parameters</key>
      <name datatype="string">EnableSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:455900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanWorkstation\Parameters</key>
      <name datatype="string">EnablePlainTextPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">AutoDisconnect</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">RequireSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanmanServer\Parameters</key>
      <name datatype="string">EnableSecuritySignature</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">EnableForcedLogOff</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">SMBServerNameHardeningLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456500" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string" operation="equals">AutoAdminLogon</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456501" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">DefaultPassword</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip6\Parameters</key>
      <name datatype="string">DisableIPSourceRouting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">DisableIPSourceRouting</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">EnableICMPRedirect</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:456900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">KeepAliveTime</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\IPSEC</key>
      <name datatype="string">NoDefaultExempt</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netbt\Parameters</key>
      <name datatype="string">NoNameReleaseOnDemand</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">PerformRouterDiscovery</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Session Manager</key>
      <name datatype="string">SafeDllSearchMode</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">ScreenSaverGracePeriod</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip6\Parameters</key>
      <name datatype="string">TcpMaxDataRetransmissions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string">TcpMaxDataRetransmissions</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\Eventlog\Security</key>
      <name datatype="string">WarningLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">RestrictAnonymousSAM</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:457900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">RestrictAnonymous</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">DisableDomainCreds</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">EveryoneIncludesAnonymous</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths</key>
      <name datatype="string">Machine</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths</key>
      <name datatype="string">Machine</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">restrictnullsessaccess</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">NullSessionShares</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">ForceGuest</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">UseMachineId</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">allownullsessionfallback</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:458900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\pku2u</key>
      <name datatype="string">AllowOnlineID</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters</key>
      <name datatype="string">SupportedEncryptionTypes</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">NoLMHash</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Lsa</key>
      <name datatype="string">LmCompatibilityLevel</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Services\LDAP</key>
      <name datatype="string">LDAPClientIntegrity</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">NTLMMinClientSec</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0</key>
      <name datatype="string">NTLMMinServerSec</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:459900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ShutdownWithoutLogon</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy</key>
      <name datatype="string">Enabled</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Session Manager\Kernel</key>
      <name datatype="string">ObCaseInsensitive</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SYSTEM\CurrentControlSet\Control\Session Manager</key>
      <name datatype="string">ProtectionMode</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">FilterAdministratorToken</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ConsentPromptBehaviorAdmin</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ConsentPromptBehaviorUser</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460600" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableInstallerDetection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">ValidateAdminCodeSignatures</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableSecureUIAPaths</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:460900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableLUA</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">PromptOnSecureDesktop</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableVirtualization</name>
    </registry_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461301" version="1" comment="All 'Local Disk' Volumes">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT name FROM win32_logicaldisk WHERE drivetype=3</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461400" version="1" comment="All 'Local Disk' File systems">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT filesystem FROM win32_logicaldisk WHERE drivetype=3</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LegalNoticeText</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461600" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows NT\CurrentVersion\Winlogon</key>
      <name datatype="string">CachedLogonsCount</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461700" version="2" comment="All security principles">
      <security_principle datatype="string" operation="pattern match">.*</security_principle>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461800" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers</key>
      <name datatype="string">AddPrinterDrivers</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:461900" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fSingleSessionPerUser</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462000" version="2">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\system</key>
      <name datatype="string">DisableBkGndGroupPolicy</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems</key>
      <name datatype="string" operation="equals">Optional</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462300" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\EventViewer</key>
      <name datatype="string">MicrosoftEventVwrDisableLinks</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WindowsMediaPlayer</key>
      <name datatype="string">GroupPrivacyAcceptance</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462500" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Policies\Microsoft\WMDRM</key>
      <name datatype="string">DisableOnline</name>
    </registry_object>
    <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462600" version="2" comment="Local Volumes\*.p12 and *.pfx">
      <behaviors recurse_direction="down" max_depth="-1" />
      <path datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:461300" var_check="at least one" />
      <filename datatype="string" operation="pattern match">^.*\.[Pp](12|[Ff][Xx])$</filename>
    </file_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462700" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">EnableUIADesktopToggle</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462800" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableCcm</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:462900" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisableLPT</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463000" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fDisablePNPRedir</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463100" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Windows NT\Terminal Services</key>
      <name datatype="string">fEnableSmartCard</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463300" version="2" comment="Filter for Administrators">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
      </set>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463400" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">LegalNoticeCaption</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:463900" version="1" comment="Filter for Administrators, Authenticated Users, Local Service, Network Service, Window Manager\Window Manager Group">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:470400</filter>
        <filter>oval:mil.disa.fso.windows:ste:463500</filter>
        <filter>oval:mil.disa.fso.windows:ste:463501</filter>
        <filter>oval:mil.disa.fso.windows:ste:463901</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464000" version="1" comment="Filter for Administrators and Local Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:463500</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464400" version="1" comment="Filter for Administrators, Service, Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:464400</filter>
        <filter>oval:mil.disa.fso.windows:ste:463500</filter>
        <filter>oval:mil.disa.fso.windows:ste:463501</filter>
      </set>
    </accesstoken_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464601" version="3" comment="verify hyper-v role installed">
      <namespace datatype="string" operation="equals">root\cimv2</namespace>
      <wql datatype="string" operation="equals">SELECT name FROM Win32_ServerFeature WHERE ID = 20</wql>
    </wmi_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464602" version="2" comment="Filter for Administrators and VMs">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:464602</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:464800" version="1" comment="Filter for Local Service and Network Service">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463500</filter>
        <filter>oval:mil.disa.fso.windows:ste:463501</filter>
      </set>
    </accesstoken_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:465900" version="1" comment="Filter for Administrators and NT Service\WdiServiceHost">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:465900</filter>
      </set>
    </accesstoken_object>
    <auditeventpolicysubcategories_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:466400" version="1" />
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:469400" version="1" comment="Registry path to determine domain membership.">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\TCPIP\Parameters</key>
      <name datatype="string">Domain</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:469500" version="1" comment="Guests">
      <security_principle datatype="string" operation="equals">Guests</security_principle>
    </accesstoken_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:469600" version="1" comment="Kerberos Policy - Enforce user logon restrictions">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingBoolean WHERE KeyName='TicketValidateClient'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:469700" version="1" comment="Kerberos Policy - Maximum lifetime for service ticket must be 600 or less">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingNumeric WHERE KeyName='MaxServiceAge'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:469800" version="1" comment="Kerberos Policy - Maximum lifetime for user ticket must be 10 days or less">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingNumeric WHERE KeyName='MaxTicketAge'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:469900" version="1" comment="Kerberos Policy - Maximum lifetime for user ticket renewal must be 7 days or less">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingNumeric WHERE KeyName='MaxRenewAge'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:470000" version="1" comment="Kerberos Policy - Maximum tolerance for computer clock synchronization must be 5 minutes or less">
      <namespace datatype="string">root\rsop\computer</namespace>
      <wql datatype="string">SELECT setting FROM RSOP_SecuritySettingNumeric WHERE KeyName='MaxClockSkew'</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:470100" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\LanManServer\Parameters</key>
      <name datatype="string">NullSessionPipes</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:470200" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\NTDS\Parameters</key>
      <name datatype="string">LDAPServerIntegrity</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:470300" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\Netlogon\Parameters</key>
      <name datatype="string">RefusePasswordChange</name>
    </registry_object>
    <accesstoken_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:470400" version="1" comment="Filter for Administrators, Authenticated Users and Enterprise Domain Controllers">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
        <object_reference>oval:mil.disa.fso.windows:obj:461700</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:463300</filter>
        <filter>oval:mil.disa.fso.windows:ste:470400</filter>
        <filter>oval:mil.disa.fso.windows:ste:470401</filter>
      </set>
    </accesstoken_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:472700" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">System\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name datatype="string" operation="equals">EnableIPAutoConfigurationLimits</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:472800" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">Software\Policies\Microsoft\Internet Explorer\Feeds</key>
      <name datatype="string" operation="equals">AllowBasicAuthInClear</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473000" version="1">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">Software\Microsoft\Windows\CurrentVersion\Policies\System</key>
      <name datatype="string">InactivityTimeoutSecs</name>
    </registry_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473100" version="1" comment="Fax Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='Fax'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473200" version="1" comment="Microsoft FTP Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='ftpsvc'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473300" version="1" comment="Peer Networking Identity Manager Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='p2pimsvc'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473400" version="1" comment="Simple TCP/IP Services Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='simptcp'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473500" version="1" comment="Telnet Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='tlntsvr'</wql>
    </wmi_object>
    <wmi_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:473600" version="1" comment="Smart Card Removal Policy Service Startup Type">
      <namespace datatype="string">root\cimv2</namespace>
      <wql datatype="string">SELECT startmode FROM Win32_Service WHERE name='SCPolicySvc'</wql>
    </wmi_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483700" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483701" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483702" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483703" version="2">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\8C941B34EA1EA6ED9AE2BC54CF687252B4C9B561</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483704" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483705" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483706" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483707" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\D73CA91102A2204A36459ED32213B467D7CE97FB</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483708" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483709" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483710" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:483711" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Root\Certificates\B8269F25DBD937ECAFD4C35A9838571723F2D026</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487600" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487601" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487602" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487603" version="3">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\22BBE981F0694D246CC1472ED2B021DC8540A22F</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487604" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487605" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487606" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487607" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FFAD03329B9E527A43EEC66A56F9CBB5393E6E13</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487608" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487609" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487610" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487611" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\FCE1B1E25374DD94F5935BEB86CA643D8C8D1FF4</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487704" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487705" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487706" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:487707" version="1">
      <hive datatype="string" operation="equals">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string" operation="equals">SOFTWARE\Policies\Microsoft\EnterpriseCertificates\Disallowed\Certificates\DA36FAF56B2F6FBA1604F5BE46D864C9FA013BA3</key>
      <name datatype="string" operation="pattern match">^.+$</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:497300" version="1" comment="HKEY_LOCAL_MACHINE\System\Policies\Microsoft\Cryptography\ForceKeyProtection">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">SOFTWARE\Policies\Microsoft\Cryptography</key>
      <name datatype="string">ForceKeyProtection</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498100" version="3" comment="Database log files path">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\NTDS\Parameters</key>
      <name datatype="string" operation="equals">Database log files path</name>
    </registry_object>
    <registry_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498101" version="3" comment="DSA Database file">
      <hive datatype="string">HKEY_LOCAL_MACHINE</hive>
      <key datatype="string">System\CurrentControlSet\Services\NTDS\Parameters</key>
      <name datatype="string" operation="equals">DSA Database file</name>
    </registry_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498102" version="2" comment="Database log files - SYSTEM permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" operation="case insensitive equals" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid>S-1-5-18</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498103" version="2" comment="Database log files - Administrators permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" operation="case insensitive equals" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid>S-1-5-32-544</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498104" version="2" comment="Database log files - Other permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" operation="case insensitive equals" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid operation="pattern match" datatype="string">.*</trustee_sid>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498100</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498101</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498103</filter>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498105" version="2" comment="DSA Database file - SYSTEM permissions">
      <filepath var_ref="oval:mil.disa.fso.windows:var:498101" var_check="all" datatype="string" />
      <trustee_sid>S-1-5-18</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498106" version="2" comment="DSA Database file - Administrators permissions">
      <filepath var_ref="oval:mil.disa.fso.windows:var:498101" var_check="all" datatype="string" />
      <trustee_sid>S-1-5-32-544</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498107" version="1" comment="DSA Database file - Other permissions">
      <filepath var_ref="oval:mil.disa.fso.windows:var:498101" var_check="all" datatype="string" />
      <trustee_sid operation="pattern match" datatype="string">.*</trustee_sid>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498100</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498101</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498103</filter>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498108" version="1" comment="Database log files - SYSTEM permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid>S-1-5-18</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498109" version="1" comment="Database log files - Administrators permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid>S-1-5-32-544</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498110" version="1" comment="Database log files - Other permissions">
      <path var_ref="oval:mil.disa.fso.windows:var:498100" var_check="all" datatype="string" />
      <filename datatype="string" operation="pattern match">.*</filename>
      <trustee_sid operation="pattern match" datatype="string">.*</trustee_sid>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498100</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498101</filter>
      <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.fso.windows:ste:498103</filter>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498401" version="1" comment="Event Viewer Rights">
      <path var_ref="oval:mil.disa.fso.windows:var:498401" var_check="at least one" datatype="string" />
      <filename datatype="string">Eventvwr.exe</filename>
      <trustee_sid operation="pattern match" datatype="string">.*</trustee_sid>
    </fileeffectiverights53_object>
    <fileeffectiverights53_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:obj:498404" version="1" comment="Eventvwr Rights except for TrustedInstaller">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <object_reference>oval:mil.disa.fso.windows:obj:498401</object_reference>
        <filter>oval:mil.disa.fso.windows:ste:498402</filter>
      </set>
    </fileeffectiverights53_object>
  </objects>
  <states>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442200" version="2" comment="Lockout Duration equals -1">
      <lockout_duration datatype="int" operation="less than or equal" entity_check="all">0</lockout_duration>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442201" version="2" comment="lockout duration is forever,option2">
      <lockout_duration datatype="int" operation="equals" entity_check="all">4294967295</lockout_duration>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442300" version="1" comment="Lockout Threshold is less than or equal to variable">
      <lockout_threshold operation="less than or equal" datatype="int" var_ref="oval:mil.disa.fso.windows:var:442300" />
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442301" version="2" comment="Lockout Threshold is greater than 0">
      <lockout_threshold operation="greater than" datatype="int">0</lockout_threshold>
    </lockoutpolicy_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442400" version="1" comment="Lockout Observation Window is greater than or equal to variable">
      <lockout_observation_window operation="greater than or equal" datatype="int" var_ref="oval:mil.disa.fso.windows:var:442400" />
    </lockoutpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442500" version="1" comment="Password History Length is greater than or equal to variable">
      <password_hist_len datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:442500" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442600" version="1" comment="Maximum Password Age is less than or equal to variable">
      <max_passwd_age datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:442600" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442601" version="1" comment="Maximum Password Age is not equal to 0">
      <max_passwd_age datatype="int" operation="greater than">0</max_passwd_age>
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442700" version="1" comment="Minimum Password Age is greater than or equal to variable">
      <min_passwd_age datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:442700" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442800" version="1" comment="Minimum Password Length is greater than or equal to variable">
      <min_passwd_len operation="greater than or equal" datatype="int" var_ref="oval:mil.disa.fso.windows:var:442800" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:442900" version="1" comment="Password Complexity equals variable">
      <password_complexity datatype="boolean" var_ref="oval:mil.disa.fso.windows:var:442900" />
    </passwordpolicy_state>
    <passwordpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443000" version="1" comment="Reversible Encryption equals variable">
      <reversible_encryption datatype="boolean" var_ref="oval:mil.disa.fso.windows:var:443000" />
    </passwordpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:443300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:443400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443600" version="1" comment="Reg_Sz type and value equals variable">
      <type>reg_sz</type>
      <value datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443700" version="1" comment="Reg_Sz type and value equals variable">
      <type>reg_sz</type>
      <value datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443800" version="1" comment="Reg_Sz type and value is not null">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^.+$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443801" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:443900" version="1" comment="Reg_Sz type and value equals variable">
      <type>reg_sz</type>
      <value datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:443900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444000" version="1" comment="Reg_Sz type and value equals variable">
      <type>reg_sz</type>
      <value datatype="string" operation="equals" var_ref="oval:mil.disa.fso.windows:var:444000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:444200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:444300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444400" version="1" comment="Reg_Dword type and value equals 2">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:444500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:444600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:444700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:444800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:444800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:445000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:445000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:445200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:445200" />
    </registry_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445402" version="1" comment="Value equals -1">
      <value datatype="int">-1</value>
    </variable_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445403" version="1" comment="Value equals 0">
      <value datatype="int">0</value>
    </variable_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445404" version="1" comment="Value equals 1">
      <value datatype="int">1</value>
    </variable_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445405" version="1" comment="Value equals 2">
      <value datatype="int">2</value>
    </variable_state>
    <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.fso.windows:ste:445406" version="1" comment="Value equals 3">
      <value datatype="int">3</value>
    </variable_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:445700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:445700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:445800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:445800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:446100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:446100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:446200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:446200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:446800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:446800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:447000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:447000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:447500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:447500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:447600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:447600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:447900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:447900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:448000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:448100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:448500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:448600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:448700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:448900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:448900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:449000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:449000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:449100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:449100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:449200" version="1" comment="Reg_Dword type and value equals 255">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">255</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:449500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:449500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450200" version="1" comment="Reg_Dword type and value equals or is greater than variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:450200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450300" version="1" comment="Reg_Dword type and value equals or is greater than variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:450300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450400" version="1" comment="Reg_Dword type and value equals or is greater than variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:450400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450500" version="1" comment="Reg_Dword type and value equals or is greater than variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:450500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:450700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:450800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:450900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:450900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:451100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:451800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:451800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:452200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:452200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:452700" version="1" comment="Reg_Dword type and value equals 0">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:452800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:452800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:453000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453700" version="1" comment="Reg_Dword type and value equals 1">
      <type>reg_dword</type>
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453800" version="1" comment="Reg_Sz type and value is greater than or equal to 9200">
      <type>reg_sz</type>
      <value datatype="version" operation="greater than or equal">9200</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453801" version="1" comment="Reg_Sz type and value is greater than or equal to 6.2">
      <type>reg_sz</type>
      <value datatype="version" operation="greater than or equal">6.2</value>
    </registry_state>
    <sid_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453900" version="3" comment="Built-in Guest SID">
      <trustee_sid operation="pattern match">^S-1-5-[0-9-]+-501$</trustee_sid>
    </sid_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:453901" version="1" comment="Enabled equals variable">
      <enabled datatype="boolean" var_ref="oval:mil.disa.fso.windows:var:453901" />
    </user_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454000" />
    </registry_state>
    <sid_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454100" version="3" comment="Built-in Administrator SID">
      <trustee_sid operation="pattern match">^S-1-5-[0-9-]+-500$</trustee_sid>
    </sid_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454101" version="2" comment="Account name is Administrator">
      <user datatype="string" operation="pattern match">^.*\\[Aa]dministrator$|^[Aa]dministrator$</user>
    </user_state>
    <user_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454200" version="2" comment="Account name is Guest">
      <user datatype="string" operation="pattern match">^.*\\[Gg]uest$|^[Gg]uest$</user>
    </user_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454400" version="1" comment="Reg_Binary type and value equals variable">
      <type>reg_binary</type>
      <value datatype="binary" var_ref="oval:mil.disa.fso.windows:var:454400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454600" version="1" comment="Reg_Sz type and value is less than or equal to variable">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:454600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:454900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:454900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455100" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:455100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455101" version="1" comment="Reg_Dword type and value is greater than 0">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455500" version="1" comment="Reg_Dword type and value is greater than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:455500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455600" version="1" comment="Reg_Sz type and value equals 1">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455601" version="1" comment="Reg_Sz type and value equals 2">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:455900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:455900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456000" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:456000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456500" version="1" comment="Reg_Sz type and value equals 0">
      <type>reg_sz</type>
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:456800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:456900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:456900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:457000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" operation="equals" var_ref="oval:mil.disa.fso.windows:var:457100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:457200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:457300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457400" version="1" comment="Reg_Sz type and value is less than or equal to variable">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:457400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457500" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:457500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457600" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:457600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457700" version="1" comment="Reg_Dword type and value is less than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal" var_ref="oval:mil.disa.fso.windows:var:457700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:457800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:457900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:457900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458200" version="1" comment="Value matches ^((System\\CurrentControlSet\\Control\\ProductOptions)|(System\\CurrentControlSet\\Control\\Server Applications)|(Software\\Microsoft\\Windows NT\\CurrentVersion))$">
      <type>reg_multi_sz</type>
      <value operation="pattern match" entity_check="all">^((System\\CurrentControlSet\\Control\\ProductOptions)|(System\\CurrentControlSet\\Control\\Server Applications)|(Software\\Microsoft\\Windows NT\\CurrentVersion)|())$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458300" version="2" comment="Value matches ^((Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows)|(System\\CurrentControlSet\\Control\\Print\\Printers)|(System\\CurrentControlSet\\Services\\Eventlog)|(Software\\Microsoft\\OLAP Server)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Print)|(System\\CurrentControlSet\\Control\\ContentIndex)|(System\\CurrentControlSet\\Control\\Terminal Server)|(System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig)|(System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib)|(System\\CurrentControlSet\\Services\\SysmonLog))$">
      <type>reg_multi_sz</type>
      <value operation="pattern match" entity_check="all">^((Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows)|(System\\CurrentControlSet\\Control\\Print\\Printers)|(System\\CurrentControlSet\\Services\\Eventlog)|(Software\\Microsoft\\OLAP Server)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Print)|(System\\CurrentControlSet\\Control\\ContentIndex)|(System\\CurrentControlSet\\Control\\Terminal Server)|(System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig)|(System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration)|(Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib)|(System\\CurrentControlSet\\Services\\Sysmon[Ll]og)|())$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458400" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458500" version="2" comment="Reg_Multi_Sz type and value is blank">
      <type>reg_multi_sz</type>
      <value datatype="string" operation="pattern match" entity_check="none satisfy">.+</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:458900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:458900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459001" version="2" comment="Reg_Dword type and value bitwise and is not 1">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and" entity_check="none satisfy">1</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459002" version="2" comment="Reg_Dword type and value bitwise and is not 2">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and" entity_check="none satisfy">2</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459003" version="2" comment="Reg_Dword type and value bitwise and is not 3">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and" entity_check="none satisfy">3</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:459100" />
    </registry_state>
    <lockoutpolicy_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459200" version="1" comment="Force Logoff equals variable">
      <force_logoff datatype="int" var_ref="oval:mil.disa.fso.windows:var:459200" />
    </lockoutpolicy_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:459300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459400" version="1" comment="Reg_Dword type and value is greater than or equal to variable">
      <type>reg_dword</type>
      <value datatype="int" operation="greater than or equal" var_ref="oval:mil.disa.fso.windows:var:459400" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459500" version="1" comment="Reg_Dword type and value bitwise and 524288">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and">524288</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459501" version="1" comment="Reg_Dword type and value bitwise and 536870912">
      <type>reg_dword</type>
      <value datatype="int" operation="bitwise and">536870912</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:459900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:459900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460100" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460200" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460200" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460300" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460300" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460400" version="1" comment="Reg_Dword type and value equals 4 or less than">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">4</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460500" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460500" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460600" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460600" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460700" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460700" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460800" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460800" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:460900" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:460900" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461000" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:461000" />
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461100" version="1" comment="Reg_Dword type and value equals variable">
      <type>reg_dword</type>
      <value datatype="int" var_ref="oval:mil.disa.fso.windows:var:461100" />
    </registry_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461400" version="1" comment="NTFS">
      <result>NTFS</result>
    </wmi_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461500" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^[[:space:]]*You[[:space:]]+are[[:space:]]+accessing[[:space:]]+a[[:space:]]+U\.S\.[[:space:]]+Government[[:space:]]+\(USG\)[[:space:]]+Information[[:space:]]+System[[:space:]]+\(IS\)[[:space:]]+that[[:space:]]+is[[:space:]]+provided[[:space:]]+for[[:space:]]+USG[-—]authorized[[:space:]]+use[[:space:]]+only\.[[:space:]]+By[[:space:]]+using[[:space:]]+this[[:space:]]+IS[[:space:]]+\(which[[:space:]]+includes[[:space:]]+any[[:space:]]+device[[:space:]]+attached[[:space:]]+to[[:space:]]+this[[:space:]]+IS\),[[:space:]]+you[[:space:]]+consent[[:space:]]+to[[:space:]]+the[[:space:]]+following[[:space:]]+conditions:[[:space:]]+-The[[:space:]]+USG[[:space:]]+routinely[[:space:]]+intercepts[[:space:]]+and[[:space:]]+monitors[[:space:]]+communications[[:space:]]+on[[:space:]]+this[[:space:]]+IS[[:space:]]+for[[:space:]]+purposes[[:space:]]+including,[[:space:]]+but[[:space:]]+not[[:space:]]+limited[[:space:]]+to,[[:space:]]+penetration[[:space:]]+testing,[[:space:]]+COMSEC[[:space:]]+monitoring,[[:space:]]+network[[:space:]]+operations[[:space:]]+and[[:space:]]+defense,[[:space:]]+personnel[[:space:]]+misconduct[[:space:]]+\(PM\),[[:space:]]+law[[:space:]]+enforcement[[:space:]]+\(LE\),[[:space:]]+and[[:space:]]+counterintelligence[[:space:]]+\(CI\)[[:space:]]+investigations\.[[:space:]]+-At[[:space:]]+any[[:space:]]+time,[[:space:]]+the[[:space:]]+USG[[:space:]]+may[[:space:]]+inspect[[:space:]]+and[[:space:]]+seize[[:space:]]+data[[:space:]]+stored[[:space:]]+on[[:space:]]+this[[:space:]]+IS\.[[:space:]]+-Communications[[:space:]]+using,[[:space:]]+or[[:space:]]+data[[:space:]]+stored[[:space:]]+on,[[:space:]]+this[[:space:]]+IS[[:space:]]+are[[:space:]]+not[[:space:]]+private,[[:space:]]+are[[:space:]]+subject[[:space:]]+to[[:space:]]+routine[[:space:]]+monitoring,[[:space:]]+interception,[[:space:]]+and[[:space:]]+search,[[:space:]]+and[[:space:]]+may[[:space:]]+be[[:space:]]+disclosed[[:space:]]+or[[:space:]]+used[[:space:]]+for[[:space:]]+any[[:space:]]+USG-authorized[[:space:]]+purpose\.[[:space:]]+[-—]This[[:space:]]+IS[[:space:]]+includes[[:space:]]+security[[:space:]]+measures[[:space:]]+\(e\.g\.,[[:space:]]+authentication[[:space:]]+and[[:space:]]+access[[:space:]]+controls\)[[:space:]]+to[[:space:]]+protect[[:space:]]+USG[[:space:]]+interests[—-]+not[[:space:]]+for[[:space:]]+your[[:space:]]+personal[[:space:]]+benefit[[:space:]]+or[[:space:]]+privacy\.[[:space:]]+[—-]Notwithstanding[[:space:]]+the[[:space:]]+above,[[:space:]]+using[[:space:]]+this[[:space:]]+IS[[:space:]]+does[[:space:]]+not[[:space:]]+constitute[[:space:]]+consent[[:space:]]+to[[:space:]]+PM,[[:space:]]+LE[[:space:]]+or[[:space:]]+CI[[:space:]]+investigative[[:space:]]+searching[[:space:]]+or[[:space:]]+monitoring[[:space:]]+of[[:space:]]+the[[:space:]]+content[[:space:]]+of[[:space:]]+privileged[[:space:]]+communications,[[:space:]]+or work product,[[:space:]]+related[[:space:]]+to[[:space:]]+personal[[:space:]]+representation[[:space:]]+or[[:space:]]+services[[:space:]]+by[[:space:]]+attorneys,[[:space:]]+psychotherapists,[[:space:]]+or[[:space:]]+clergy,[[:space:]]+and[[:space:]]+their[[:space:]]+assistants\.[[:space:]]+Such[[:space:]]+communications[[:space:]]+and[[:space:]]+work[[:space:]]+product[[:space:]]+are[[:space:]]+private[[:space:]]+and[[:space:]]+confidential\.[[:space:]]+See[[:space:]]+User[[:space:]]+Agreement[[:space:]]+for[[:space:]]+details\.[[:space:]]*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461501" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^\s*You\s+are\s+accessing\s+a\s+U\.S\.\s+Government\s+\(USG\)\s+Information\s+System\s+\(IS\)\s+that\s+is\s+provided\s+for\s+USG[-—]authorized\s+use\s+only\.\s+By\s+using\s+this\s+IS\s+\(which\s+includes\s+any\s+device\s+attached\s+to\s+this\s+IS\),\s+you\s+consent\s+to\s+the\s+following\s+conditions:\s+-The\s+USG\s+routinely\s+intercepts\s+and\s+monitors\s+communications\s+on\s+this\s+IS\s+for\s+purposes\s+including,\s+but\s+not\s+limited\s+to,\s+penetration\s+testing,\s+COMSEC\s+monitoring,\s+network\s+operations\s+and\s+defense,\s+personnel\s+misconduct\s+\(PM\),\s+law\s+enforcement\s+\(LE\),\s+and\s+counterintelligence\s+\(CI\)\s+investigations\.\s+-At\s+any\s+time,\s+the\s+USG\s+may\s+inspect\s+and\s+seize\s+data\s+stored\s+on\s+this\s+IS\.\s+-Communications\s+using,\s+or\s+data\s+stored\s+on,\s+this\s+IS\s+are\s+not\s+private,\s+are\s+subject\s+to\s+routine\s+monitoring,\s+interception,\s+and\s+search,\s+and\s+may\s+be\s+disclosed\s+or\s+used\s+for\s+any\s+USG-authorized\s+purpose\.\s+[-—]This\s+IS\s+includes\s+security\s+measures\s+\(e\.g\.,\s+authentication\s+and\s+access\s+controls\)\s+to\s+protect\s+USG\s+interests[—-]+not\s+for\s+your\s+personal\s+benefit\s+or\s+privacy\.\s+[—-]Notwithstanding\s+the\s+above,\s+using\s+this\s+IS\s+does\s+not\s+constitute\s+consent\s+to\s+PM,\s+LE\s+or\s+CI\s+investigative\s+searching\s+or\s+monitoring\s+of\s+the\s+content\s+of\s+privileged\s+communications,\s+or work product,\s+related\s+to\s+personal\s+representation\s+or\s+services\s+by\s+attorneys,\s+psychotherapists,\s+or\s+clergy,\s+and\s+their\s+assistants\.\s+Such\s+communications\s+and\s+work\s+product\s+are\s+private\s+and\s+confidential\.\s+See\s+User\s+Agreement\s+for\s+details\.\s*$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461600" version="2" comment="Reg_SZ type and value equals 4 or less">
      <type>reg_sz</type>
      <value datatype="int" operation="less than or equal">4</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:461700" version="1" comment="Act as part of the operating system">
      <setcbprivilege datatype="boolean" operation="equals">0</setcbprivilege>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:462001" version="2" comment="Reg_Dword type and value equals 0">
      <value datatype="int" operation="equals">0</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:462100" version="2" comment="Reg_Multi_Sz type and blank value">
      <type>reg_multi_sz</type>
      <value datatype="string" operation="pattern match" entity_check="none satisfy">.+</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463300" version="2" comment="Administrators">
      <security_principle datatype="string" operation="equals">Administrators</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463301" version="1" comment="Debug programs">
      <sedebugprivilege datatype="boolean" operation="equals">0</sedebugprivilege>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463400" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^D(oD|OD) N(otice|OTICE) (and|AND) C(onsent|ONSENT) B(anner|ANNER)$</value>
    </registry_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463401" version="1">
      <type>reg_sz</type>
      <value datatype="string" operation="pattern match">^U\.?S\.? D(EPARTMENT|epartment) (OF|Of|of) D(EFENSE|efense) W(ARNING|arning) S(TATEMENT|tatement)$</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463500" version="1" comment="Local Service">
      <security_principle datatype="string" operation="equals">LOCAL SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463501" version="1" comment="Network Service">
      <security_principle datatype="string" operation="equals">NETWORK SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463600" version="1" comment="Allow log on locally">
      <seinteractivelogonright datatype="boolean" operation="equals">0</seinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463700" version="1" comment="Allow log on through Remote Desktop Services">
      <seremoteinteractivelogonright datatype="boolean" operation="equals">0</seremoteinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463800" version="1" comment="Back up files and directories">
      <sebackupprivilege datatype="boolean" operation="equals">0</sebackupprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463900" version="1" comment="Bypass traverse checking">
      <sechangenotifyprivilege datatype="boolean" operation="equals">0</sechangenotifyprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:463901" version="1" comment="Window Manager\Window Manager Group">
      <security_principle datatype="string" operation="equals">Window Manager\Window Manager Group</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464000" version="1" comment="Change the system time">
      <sesystemtimeprivilege datatype="boolean" operation="equals">0</sesystemtimeprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464100" version="1" comment="Change the time zone">
      <setimezoneprivilege datatype="boolean" operation="equals">0</setimezoneprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464200" version="1" comment="Create a pagefile">
      <secreatepagefileprivilege datatype="boolean" operation="equals">0</secreatepagefileprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464300" version="1" comment="Create a token object">
      <secreatetokenprivilege datatype="boolean" operation="equals">0</secreatetokenprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464400" version="1" comment="Service">
      <security_principle datatype="string" operation="equals">SERVICE</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464401" version="1" comment="Create global objects">
      <secreateglobalprivilege datatype="boolean" operation="equals">0</secreateglobalprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464500" version="1" comment="Create permanent shared objects">
      <secreatepermanentprivilege datatype="boolean" operation="equals">0</secreatepermanentprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464600" version="2" comment="Create symbolic links">
      <secreatesymboliclinkprivilege datatype="boolean" operation="equals">0</secreatesymboliclinkprivilege>
    </accesstoken_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464601" version="3" comment="verify hyper-v role installed">
      <result datatype="string" operation="equals" entity_check="all">Hyper-V</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464602" version="3" comment="VMs">
      <security_principle datatype="string" operation="equals">NT VIRTUAL MACHINE\Virtual Machines</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464700" version="1" comment="Force shutdown from a remote system">
      <seremoteshutdownprivilege datatype="boolean" operation="equals">0</seremoteshutdownprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464800" version="1" comment="Generate security audits">
      <seauditprivilege datatype="boolean" operation="equals">0</seauditprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:464900" version="1" comment="Impersonate a client after authentication">
      <seimpersonateprivilege datatype="boolean" operation="equals">0</seimpersonateprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465100" version="1" comment="Increase scheduling priority">
      <seincreasebasepriorityprivilege datatype="boolean" operation="equals">0</seincreasebasepriorityprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465200" version="1" comment="Load and unload device drivers">
      <seloaddriverprivilege datatype="boolean" operation="equals">0</seloaddriverprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465300" version="1" comment="Lock pages in memory">
      <selockmemoryprivilege datatype="boolean" operation="equals">0</selockmemoryprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465500" version="1" comment="Modify an object label">
      <serelabelprivilege datatype="boolean" operation="equals">0</serelabelprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465600" version="1" comment="Modify firmware environment values">
      <sesystemenvironmentprivilege datatype="boolean" operation="equals">0</sesystemenvironmentprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465700" version="1" comment="Perform volume maintenance tasks">
      <semanagevolumeprivilege datatype="boolean" operation="equals">0</semanagevolumeprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465800" version="1" comment="Profile single process">
      <seprofilesingleprocessprivilege datatype="boolean" operation="equals">0</seprofilesingleprocessprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465900" version="1" comment="NT Service\WdiServiceHost">
      <security_principle datatype="string" operation="equals">NT SERVICE\WdiServiceHost</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:465901" version="1" comment="Profile system performance">
      <sesystemprofileprivilege datatype="boolean" operation="equals">0</sesystemprofileprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466000" version="1" comment="Replace a process level token">
      <seassignprimarytokenprivilege datatype="boolean" operation="equals">0</seassignprimarytokenprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466100" version="1" comment="Restore files and directories">
      <serestoreprivilege datatype="boolean" operation="equals">0</serestoreprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466200" version="1" comment="Shut down the system">
      <seshutdownprivilege datatype="boolean" operation="equals">0</seshutdownprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466300" version="1" comment="Take ownership of files or other objects">
      <setakeownershipprivilege datatype="boolean" operation="equals">0</setakeownershipprivilege>
    </accesstoken_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466400" version="1" comment="Audit - Credential Validation - Success only">
      <credential_validation datatype="string" operation="equals">AUDIT_SUCCESS</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466401" version="1" comment="Audit - Credential Validation - Success and Failure">
      <credential_validation datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466500" version="1" comment="Audit - Credential Validation - Failure only">
      <credential_validation datatype="string" operation="equals">AUDIT_FAILURE</credential_validation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466600" version="1" comment="Audit - Computer Account Management - Success only">
      <computer_account_management datatype="string" operation="equals">AUDIT_SUCCESS</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466601" version="1" comment="Audit - Computer Account Management - Success and Failure">
      <computer_account_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466700" version="1" comment="Audit - Computer Account Management - Failure only">
      <computer_account_management datatype="string" operation="equals">AUDIT_FAILURE</computer_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466800" version="1" comment="Audit - Other Account Management Events - Success only">
      <other_account_management_events datatype="string" operation="equals">AUDIT_SUCCESS</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466801" version="1" comment="Audit - Other Account Management Events - Success and Failure">
      <other_account_management_events datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:466900" version="1" comment="Audit - Other Account Management Events - Failure only">
      <other_account_management_events datatype="string" operation="equals">AUDIT_FAILURE</other_account_management_events>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467000" version="1" comment="Audit - Security Group Management - Success only">
      <security_group_management datatype="string" operation="equals">AUDIT_SUCCESS</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467001" version="1" comment="Audit - Security Group Management - Success and Failure">
      <security_group_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467100" version="1" comment="Audit - Security Group Management - Failure only">
      <security_group_management datatype="string" operation="equals">AUDIT_FAILURE</security_group_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467200" version="1" comment="Audit - User Account Management - Success only">
      <user_account_management datatype="string" operation="equals">AUDIT_SUCCESS</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467201" version="1" comment="Audit - User Account Management - Success and Failure">
      <user_account_management datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467300" version="1" comment="Audit - User Account Management - Failure only">
      <user_account_management datatype="string" operation="equals">AUDIT_FAILURE</user_account_management>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467400" version="1" comment="Audit - Process Creation - Success only">
      <process_creation datatype="string" operation="equals">AUDIT_SUCCESS</process_creation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467401" version="1" comment="Audit - Process Creation - Success and Failure">
      <process_creation datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</process_creation>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467500" version="1" comment="Audit - Logoff - Success only">
      <logoff datatype="string" operation="equals">AUDIT_SUCCESS</logoff>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467501" version="1" comment="Audit - Logoff - Success and Failure">
      <logoff datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</logoff>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467600" version="1" comment="Audit - Logon - Success only">
      <logon datatype="string" operation="equals">AUDIT_SUCCESS</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467601" version="1" comment="Audit - Logon - Success and Failure">
      <logon datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467700" version="1" comment="Audit - Logon - Failure only">
      <logon datatype="string" operation="equals">AUDIT_FAILURE</logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467800" version="1" comment="Audit - Special Logon - Success only">
      <special_logon datatype="string" operation="equals">AUDIT_SUCCESS</special_logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:467801" version="1" comment="Audit - Special Logon - Success and Failure">
      <special_logon datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</special_logon>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468100" version="1" comment="Audit - Audit Policy Change - Success only">
      <audit_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468101" version="1" comment="Audit - Audit Policy Change - Success and Failure">
      <audit_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468200" version="1" comment="Audit - Audit Policy Change - Failure only">
      <audit_policy_change datatype="string" operation="equals">AUDIT_FAILURE</audit_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468300" version="1" comment="Audit - Authentication Policy Change - Success only">
      <authentication_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</authentication_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468301" version="1" comment="Audit - Authentication Policy Change - Success and Failure">
      <authentication_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</authentication_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468400" version="1" comment="Audit - Sensitive Privilege Use - Success only">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_SUCCESS</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468401" version="1" comment="Audit - Sensitive Privilege Use - Success and Failure">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468500" version="1" comment="Audit - Sensitive Privilege Use - Failure only">
      <sensitive_privilege_use datatype="string" operation="equals">AUDIT_FAILURE</sensitive_privilege_use>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468600" version="1" comment="Audit - IPSec Driver - Success only">
      <ipsec_driver datatype="string" operation="equals">AUDIT_SUCCESS</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468601" version="1" comment="Audit - IPSec Driver - Success and Failure">
      <ipsec_driver datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468700" version="1" comment="Audit - IPSec Driver - Failure only">
      <ipsec_driver datatype="string" operation="equals">AUDIT_FAILURE</ipsec_driver>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468800" version="1" comment="Audit - Security State Change - Success only">
      <security_state_change datatype="string" operation="equals">AUDIT_SUCCESS</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468801" version="1" comment="Audit - Security State Change - Success and Failure">
      <security_state_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:468900" version="1" comment="Audit - Security State Change - Failure only">
      <security_state_change datatype="string" operation="equals">AUDIT_FAILURE</security_state_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469000" version="1" comment="Audit - Security System Extension - Success only">
      <security_system_extension datatype="string" operation="equals">AUDIT_SUCCESS</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469001" version="1" comment="Audit - Security System Extension - Success and Failure">
      <security_system_extension datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469100" version="1" comment="Audit - Security System Extension - Failure only">
      <security_system_extension datatype="string" operation="equals">AUDIT_FAILURE</security_system_extension>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469200" version="1" comment="Audit - System Integrity - Success only">
      <system_integrity datatype="string" operation="equals">AUDIT_SUCCESS</system_integrity>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469201" version="1" comment="Audit - System Integrity - Success and Failure">
      <system_integrity datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</system_integrity>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469300" version="1" comment="Audit - System Integrity - Failure only">
      <system_integrity datatype="string" operation="equals">AUDIT_FAILURE</system_integrity>
    </auditeventpolicysubcategories_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469400" version="1" comment="Reg_Sz type and blank value">
      <type datatype="string" operation="equals">reg_sz</type>
      <value />
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469500" version="1" comment="Deny access from the network">
      <sedenynetworklogonright datatype="boolean" operation="equals">1</sedenynetworklogonright>
    </accesstoken_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469600" version="1" comment="Kerberos Policy - Enforce user logon restrictions - Enabled, PA test = -1">
      <result datatype="int">-1</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469601" version="1" comment="Kerberos Policy - Enforce user logon restrictions - Enabled, Other tools test = 1">
      <result datatype="boolean">1</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469700" version="1" comment="Maximum lifetime for service ticket lte 600">
      <result datatype="int" operation="less than or equal">600</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469701" version="1" comment="Maximum lifetime for service ticket policy ne 0, returns -1 in policy auditor">
      <result datatype="int" operation="not equal">-1</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469800" version="1" comment="Maximum lifetime for user ticket lte 10 days">
      <result datatype="int" operation="less than or equal">10</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469801" version="1" comment="Maximum lifetime for user ticket must not equal 0, retrurns -1 in Policy Auditor">
      <result datatype="int" operation="not equal">-1</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:469900" version="1" comment="Maximum lifetime for user ticket renewal lte 7">
      <result datatype="int" operation="less than or equal">7</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470000" version="1" comment="Maximum tolerance for computer clock synchronization lte 5">
      <result datatype="int" operation="less than or equal">5</result>
    </wmi_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470100" version="1">
      <type>reg_multi_sz</type>
      <value operation="pattern match" entity_check="all">^((^|[Nn][Ee][Tt][Ll][Oo][Gg][Oo][Nn])|([Ss][Aa][Mm][Rr])|([Ll][Ss][Aa][Rr][Pp][Cc]))$</value>
    </registry_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470400" version="1" comment="Authenticated Users">
      <security_principle datatype="string" operation="equals">Authenticated Users</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470401" version="1" comment=" ENTERPRISE DOMAIN CONTROLLERS">
      <security_principle datatype="string" operation="equals">ENTERPRISE DOMAIN CONTROLLERS</security_principle>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470402" version="1" comment="Access this computer from the network">
      <senetworklogonright datatype="boolean" operation="equals">0</senetworklogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470500" version="1" comment="Deny log on as a service">
      <sedenyservicelogonright datatype="boolean" operation="equals">0</sedenyservicelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470600" version="1" comment="Deny log on locally">
      <sedenyinteractivelogonright datatype="boolean" operation="equals">1</sedenyinteractivelogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470700" version="1" comment="Enable computer and user accounts to be trusted for delegation">
      <seenabledelegationprivilege datatype="boolean" operation="equals">0</seenabledelegationprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470800" version="1" comment="Add workstations to domain">
      <semachineaccountprivilege datatype="boolean" operation="equals">0</semachineaccountprivilege>
    </accesstoken_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470900" version="1" comment="Audit - Directory Service Access - Success only">
      <directory_service_access datatype="string" operation="equals">AUDIT_SUCCESS</directory_service_access>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:470901" version="1" comment="Audit - Directory Service Access - Success and Failure">
      <directory_service_access datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</directory_service_access>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:471000" version="1" comment="Audit - Directory Service Access - Failure only">
      <directory_service_access datatype="string" operation="equals">AUDIT_FAILURE</directory_service_access>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:471100" version="1" comment="Audit - Directory Service Changes - Success only">
      <directory_service_changes datatype="string" operation="equals">AUDIT_SUCCESS</directory_service_changes>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:471101" version="1" comment="Audit - Directory Service Changes - Success and Failure">
      <directory_service_changes datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</directory_service_changes>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:471200" version="1" comment="Audit - Directory Service Changes - Failure only">
      <directory_service_changes datatype="string" operation="equals">AUDIT_FAILURE</directory_service_changes>
    </auditeventpolicysubcategories_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:471300" version="1" comment="Deny log on as a batch job">
      <sedenybatchLogonright datatype="boolean" operation="equals">1</sedenybatchLogonright>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:471400" version="1" comment="Deny log on through Remote Desktop Services">
      <sedenyremoteInteractivelogonright datatype="boolean" operation="equals">1</sedenyremoteInteractivelogonright>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473000" version="1" comment="Reg_Dword type and value is less than or equals 900">
      <type>reg_dword</type>
      <value datatype="int" operation="less than or equal">900</value>
    </registry_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473100" version="1" comment="Service Startup Type is Disabled">
      <result>Disabled</result>
    </wmi_state>
    <wmi_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473600" version="1" comment="Service Startup Type is Automatic">
      <result>Auto</result>
    </wmi_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473700" version="1" comment="Manage auditing and security log">
      <sesecurityprivilege datatype="boolean" operation="equals">0</sesecurityprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:473800" version="1" comment="Synchronize directory service data">
      <sesyncagentprivilege datatype="boolean" operation="equals">0</sesyncagentprivilege>
    </accesstoken_state>
    <accesstoken_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:474000" version="1" comment="Access Credential Manager as a trusted caller">
      <setrustedcredmanaccessnameright datatype="boolean" operation="equals">0</setrustedcredmanaccessnameright>
    </accesstoken_state>
    <registry_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497300" version="1" comment="Reg_Dword type and value equals 2">
      <type datatype="string" operation="equals">reg_dword</type>
      <value datatype="int" operation="equals">2</value>
    </registry_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497500" version="1" comment="Audit - Audit Policy Change - Success only">
      <authorization_policy_change datatype="string" operation="equals">AUDIT_SUCCESS</authorization_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497501" version="1" comment="Audit - Audit Policy Change - Success only">
      <authorization_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</authorization_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497600" version="1" comment="Audit - Audit Policy Change - Failure only">
      <authorization_policy_change datatype="string" operation="equals">AUDIT_FAILURE</authorization_policy_change>
    </auditeventpolicysubcategories_state>
    <auditeventpolicysubcategories_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:497601" version="1" comment="Audit - Audit Policy Change - Failure only">
      <authorization_policy_change datatype="string" operation="equals">AUDIT_SUCCESS_FAILURE</authorization_policy_change>
    </auditeventpolicysubcategories_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498100" version="1" comment="Administrators Rights">
      <trustee_sid>S-1-5-32-544</trustee_sid>
    </fileeffectiverights53_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498101" version="1" comment="Local System Rights">
      <trustee_sid>S-1-5-18</trustee_sid>
    </fileeffectiverights53_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498102" version="1" comment="Full Rights">
      <standard_delete datatype="boolean">true</standard_delete>
      <standard_read_control datatype="boolean">true</standard_read_control>
      <standard_write_dac datatype="boolean">true</standard_write_dac>
      <standard_write_owner datatype="boolean">true</standard_write_owner>
      <standard_synchronize datatype="boolean">true</standard_synchronize>
      <generic_read datatype="boolean">true</generic_read>
      <generic_write datatype="boolean">true</generic_write>
      <generic_execute datatype="boolean">true</generic_execute>
      <file_read_data datatype="boolean">true</file_read_data>
      <file_write_data datatype="boolean">true</file_write_data>
      <file_append_data datatype="boolean">true</file_append_data>
      <file_read_ea datatype="boolean">true</file_read_ea>
      <file_write_ea datatype="boolean">true</file_write_ea>
      <file_execute datatype="boolean">true</file_execute>
      <file_delete_child datatype="boolean">true</file_delete_child>
      <file_read_attributes datatype="boolean">true</file_read_attributes>
      <file_write_attributes datatype="boolean">true</file_write_attributes>
    </fileeffectiverights53_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498103" version="1" comment="No Rights">
      <standard_delete datatype="boolean">false</standard_delete>
      <standard_read_control datatype="boolean">false</standard_read_control>
      <standard_write_dac datatype="boolean">false</standard_write_dac>
      <standard_write_owner datatype="boolean">false</standard_write_owner>
      <standard_synchronize datatype="boolean">false</standard_synchronize>
      <generic_read datatype="boolean">false</generic_read>
      <generic_write datatype="boolean">false</generic_write>
      <generic_execute datatype="boolean">false</generic_execute>
      <file_read_data datatype="boolean">false</file_read_data>
      <file_write_data datatype="boolean">false</file_write_data>
      <file_append_data datatype="boolean">false</file_append_data>
      <file_read_ea datatype="boolean">false</file_read_ea>
      <file_write_ea datatype="boolean">false</file_write_ea>
      <file_execute datatype="boolean">false</file_execute>
      <file_delete_child datatype="boolean">false</file_delete_child>
      <file_read_attributes datatype="boolean">false</file_read_attributes>
      <file_write_attributes datatype="boolean">false</file_write_attributes>
    </fileeffectiverights53_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498402" version="1" comment="TrustedInstaller">
      <trustee_sid operation="equals" datatype="string">S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464</trustee_sid>
    </fileeffectiverights53_state>
    <fileeffectiverights53_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" id="oval:mil.disa.fso.windows:ste:498408" version="1" comment="No Rights except Read and Execute">
      <standard_delete datatype="boolean" operation="equals" entity_check="all">false</standard_delete>
      <standard_write_dac datatype="boolean" operation="equals" entity_check="all">false</standard_write_dac>
      <standard_write_owner datatype="boolean" operation="equals" entity_check="all">false</standard_write_owner>
      <generic_write datatype="boolean" operation="equals" entity_check="all">false</generic_write>
      <file_write_data datatype="boolean" operation="equals" entity_check="all">false</file_write_data>
      <file_append_data datatype="boolean" operation="equals" entity_check="all">false</file_append_data>
      <file_write_ea datatype="boolean" operation="equals" entity_check="all">false</file_write_ea>
      <file_delete_child datatype="boolean" operation="equals" entity_check="all">false</file_delete_child>
      <file_write_attributes datatype="boolean" operation="equals" entity_check="all">false</file_write_attributes>
    </fileeffectiverights53_state>
  </states>
  <variables>
    <external_variable id="oval:mil.disa.fso.windows:var:442300" version="1" datatype="int" comment="Account Lockout Threshold">
      <possible_value hint="3_attempts">3</possible_value>
      <possible_value hint="5_attempts">5</possible_value>
      <possible_value hint="10_attempts">10</possible_value>
      <possible_value hint="50_attempts">50</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442400" version="1" datatype="int" comment="Reset Account Lockout Counter After">
      <possible_value hint="900_seconds">900</possible_value>
      <possible_value hint="3600_seconds">3600</possible_value>
      <possible_value hint="86400_seconds">86400</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442500" version="1" datatype="int" comment="Enforce Password History">
      <possible_value hint="5_passwords">5</possible_value>
      <possible_value hint="24_passwords">24</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442600" version="1" datatype="int" comment="Maximum Password Age">
      <possible_value hint="5184000_seconds">5184000</possible_value>
      <possible_value hint="7776000_seconds">7776000</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442700" version="1" datatype="int" comment="Minimum Password Age">
      <possible_value hint="86400_seconds">86400</possible_value>
      <possible_value hint="172800_seconds">172800</possible_value>
      <possible_value hint="432000_seconds">432000</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442800" version="1" datatype="int" comment="Minimum Password Length">
      <possible_value hint="8_characters">8</possible_value>
      <possible_value hint="9_characters">9</possible_value>
      <possible_value hint="12_characters">12</possible_value>
      <possible_value hint="14_characters">14</possible_value>
      <possible_value hint="15_characters">15</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:442900" version="1" datatype="boolean" comment="Enforce Password Complexity">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443000" version="1" datatype="boolean" comment="Enforce Reversible Encryption When Storing Passwords">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443300" version="1" datatype="int" comment="Turn Off Microsoft Peer-to-Peer Networking Services">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443400" version="1" datatype="int" comment="Prohibit installation and configuration of Network Bridge on your DNS domain network">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443500" version="1" datatype="int" comment="Require domain users to elevate when setting a network's location">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443600" version="1" datatype="string" comment="Route all traffic through the internal network">
      <possible_value hint="enabled_enabled_state">Enabled</possible_value>
      <possible_value hint="enabled_disabled_state">Disabled</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443700" version="1" datatype="string" comment="6to4 State">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443800" version="1" datatype="int" comment="IP HTTPS State">
      <possible_value hint="default">0</possible_value>
      <possible_value hint="disabled">3</possible_value>
      <possible_value hint="enabled">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:443900" version="1" datatype="string" comment="ISATAP State">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444000" version="1" datatype="string" comment="Teredo State">
      <possible_value hint="disabled">Disabled</possible_value>
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="client">Client</possible_value>
      <possible_value hint="enterprise_client">Enterprise Client</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444200" version="1" datatype="int" comment="Prohibit Access of the Windows Connect Now Wizards">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444300" version="1" datatype="int" comment="Extend Point and Print connection to search Windows Update and use alternate connection if needed">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444500" version="1" datatype="int" comment="Allow remote access to the PnP interface">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444600" version="1" datatype="int" comment="Do not send a Windows Error Report when a generic driver is installed on a device">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444700" version="1" datatype="int" comment="Do not create system restore point when new device driver installed">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:444800" version="1" datatype="int" comment="Prevent device metadata retrieval from the Internet">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445000" version="1" datatype="int" comment="Specify Search Order for device driver source locations">
      <possible_value hint="do_not_search_windows_update">0</possible_value>
      <possible_value hint="search_windows_update_first">1</possible_value>
      <possible_value hint="search_windows_update_last">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445200" version="1" datatype="int" comment="Turn off Windows Update device driver search prompt">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445400" version="1" datatype="int" comment="Registry Policy Processing">
      <possible_value hint="not configured">-1</possible_value>
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy">1</possible_value>
      <possible_value hint="enabled:nogpolistchanges">2</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy_and_nogpolistchanges">3</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445700" version="1" datatype="int" comment="Turn off downloading of print drivers over HTTP">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:445800" version="1" datatype="int" comment="Turn Off Handwriting Recognition Error Reporting">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:446100" version="1" datatype="int" comment="Turn Off Internet File Association Service">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:446200" version="1" datatype="int" comment="Turn off printing over HTTP">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:446800" version="1" datatype="int" comment="Turn off Windows Customer Experience Improvement Program">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:447000" version="1" datatype="int" comment="Turn off Windows Update device driver searching">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:447500" version="1" datatype="int" comment="Require a Password when a Computer Wakes (On Battery)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:447600" version="1" datatype="int" comment="Require a Password when a Computer Wakes (Plugged)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:447900" version="1" datatype="int" comment="Offer Remote Assistance">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448000" version="1" datatype="int" comment="Solicited Remote Assistance">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448100" version="1" datatype="int" comment="Turn on session logging">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448500" version="1" datatype="int" comment="Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448600" version="1" datatype="int" comment="Troubleshooting: Allow user to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448700" version="1" datatype="int" comment="Enable/Disable PerfTrack">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:448900" version="1" datatype="int" comment="Turn off Program Inventory">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:449000" version="1" datatype="int" comment="Turn off Autoplay for non-volume devices">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:449100" version="1" datatype="int" comment="Default behavior for AutoRun">
      <possible_value hint="do_not_execute_autorun_commands">1</possible_value>
      <possible_value hint="automatically_execute_autorun_commands">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:449500" version="1" datatype="int" comment="Enumerate administrator accounts on elevation">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450200" version="1" datatype="int" comment="Maximum Application Log Size">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450300" version="1" datatype="int" comment="Maximum Security Log Size">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450400" version="1" datatype="int" comment="Maximum Setup Log Size">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450500" version="1" datatype="int" comment="Maximum System Log Size">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450700" version="1" datatype="int" comment="Turn off Data Execution Protection">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450800" version="1" datatype="int" comment="Turn off Heap termination on corruption">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:450900" version="1" datatype="int" comment="Turn off shell protocol protected mode">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451100" version="1" datatype="int" comment="Do not allow passwords to be saved">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451200" version="1" datatype="int" comment="Do not allow drive redirection">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451300" version="1" datatype="int" comment="Always prompt for password upon connection">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451400" version="1" datatype="int" comment="Set client connection encryption level">
      <possible_value hint="low_level">1</possible_value>
      <possible_value hint="client_compatible">2</possible_value>
      <possible_value hint="high_level">3</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451700" version="1" datatype="int" comment="Do not delete temp folder upon exit">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:451800" version="1" datatype="int" comment="Do not use temporary folders per session">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:452200" version="1" datatype="int" comment="Configure Microsoft SpyNet Reporting">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:452800" version="1" datatype="int" comment="Prohibit non-administrators from applying vendor signed updates">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:453000" version="1" datatype="int" comment="Prevent Automatic Updates">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:453900" version="1" datatype="string" comment="Built-in Guest">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:453901" item_field="trustee_name" />
    </local_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:453901" version="1" datatype="boolean" comment="Status of Guest Account">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454000" version="1" datatype="int" comment="Accounts: Limit local account use to blank passwords to console logon only">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:454100" version="1" datatype="string" comment="Built-in Administrator">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:454101" item_field="trustee_name" />
    </local_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454300" version="1" datatype="int" comment="Audit: Audit the access of global system objects">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454400" version="1" datatype="binary" comment="Audit: Audit the use of Backup and Restore privilege">
      <possible_value hint="disabled">00</possible_value>
      <possible_value hint="enabled">01</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454500" version="1" datatype="int" comment="Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454600" version="1" datatype="int" comment="Devices: Allow only administrators to format and eject removable media">
      <possible_value hint="administrator_only">0</possible_value>
      <possible_value hint="administrator_and_powerusers_only">1</possible_value>
      <possible_value hint="administrator_and_interactiveuser_only">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454700" version="1" datatype="int" comment="Domain member: Digitally encrypt or sign secure channel data (always)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454800" version="1" datatype="int" comment="Domain member: Digitally encrypt secure channel data (when possible)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:454900" version="1" datatype="int" comment="Domain member: Digitally sign secure channel data (when possible)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455000" version="1" datatype="int" comment="Domain member: Disable machine account password changes">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455100" version="1" datatype="int" comment="Maximum Machine Account Password Age">
      <possible_value hint="7_days">7</possible_value>
      <possible_value hint="30_days">30</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455200" version="1" datatype="int" comment="Require Strong Session Key">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455300" version="1" datatype="int" comment="Interactive logon: Do not display last user name">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455400" version="1" datatype="int" comment="Interactive logon: Do not require CTRL+ALT+DEL">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455500" version="1" datatype="int" comment="Prompt User to Change Password Before Expiration">
      <possible_value hint="14_days">14</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455700" version="1" datatype="int" comment="Client Digitally Sign Communications (Always)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455800" version="1" datatype="int" comment="Microsoft network client: Digitally sign communications (if server agrees)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:455900" version="1" datatype="int" comment="Microsoft network client: Send unencrypted password to third-party SMB servers">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456000" version="1" datatype="int" comment="Amount of Idle Time Required Before Suspending Session">
      <possible_value hint="15_minutes">15</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456100" version="1" datatype="int" comment="Microsoft network server: Digitally sign communications (always)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456200" version="1" datatype="int" comment="Microsoft network server: Digitally sign communications (if client agrees)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456300" version="1" datatype="int" comment="Microsoft network server: Disconnect clients when logon hours expire">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456400" version="1" datatype="int" comment="Microsoft network server: SPN Target name validation">
      <possible_value hint="off">0</possible_value>
      <possible_value hint="accept_if_provided_by_client">1</possible_value>
      <possible_value hint="required_from_client">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456600" version="1" datatype="int" comment="MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)">
      <possible_value hint="No_additional_protection">0</possible_value>
      <possible_value hint="Medium_protection">1</possible_value>
      <possible_value hint="Highest_protection">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456700" version="1" datatype="int" comment="MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)">
      <possible_value hint="source_routing_packets_allowed">0</possible_value>
      <possible_value hint="source_routing_packets_ignored">1</possible_value>
      <possible_value hint="source_routing_packets_disabled">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456800" version="1" datatype="int" comment="MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:456900" version="1" datatype="int" comment="MSS: (KeepAliveTime)How often keep-alive packets are sent in milliseconds">
      <possible_value hint="300000_seconds">300000</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457000" version="1" datatype="int" comment="MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic">
      <possible_value hint="multicast_broadcast_rsvp_kerberos_isakmp_exempt">0</possible_value>
      <possible_value hint="multicast_broadcast_isakmp_exempt">1</possible_value>
      <possible_value hint="rsvp_kerberos_isakmp_exempt">2</possible_value>
      <possible_value hint="isakmp_exempt">3</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457100" version="1" datatype="int" comment="MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457200" version="1" datatype="int" comment="MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure DefaultGateway addresses (could lead to DoS)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
      <possible_value hint="enabled_only_if_dhcp_sends_perform_router_discovery_option">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457300" version="1" datatype="int" comment="MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457400" version="1" datatype="int" comment="MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)">
      <possible_value hint="zero_seconds">0</possible_value>
      <possible_value hint="5_seconds">5</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457500" version="1" datatype="int" comment="MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457600" version="1" datatype="int" comment="MSS: (TCPMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457700" version="1" datatype="int" comment="MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning">
      <possible_value hint="90_percent">90</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457800" version="1" datatype="int" comment="Network access: Do not allow anonymous enumeration of SAM accounts">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:457900" version="1" datatype="int" comment="Network access: Do not allow anonymous enumeration of SAM accounts and shares">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458000" version="1" datatype="int" comment="Network access: Do not allow storage of credentials or .NET Passports for network authentication">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458100" version="1" datatype="int" comment="Network access: Let Everyone permissions apply to anonymous users">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458400" version="1" datatype="int" comment="Network access: Restrict anonymous access to Named Pipes and Shares">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458600" version="1" datatype="int" comment="Network access: Sharing and security model for local accounts">
      <possible_value hint="classic">0</possible_value>
      <possible_value hint="guests_only">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458700" version="1" datatype="int" comment="Network security: Allow Local System to use computer identity for NTLM">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458800" version="1" datatype="int" comment="Network security: Allow LocalSystem NULL session fallback">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:458900" version="1" datatype="int" comment="Network Security: Allow PKU2U authentication requests to this computer to use online identities">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459100" version="1" datatype="int" comment="Network security: Do not store LAN Manager hash value on next password change">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459200" version="1" datatype="int" comment="Network security: Force logoff when logon hours expire">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459300" version="1" datatype="int" comment="Network Security: LAN Manager Authentication Level">
      <possible_value hint="send_LM_and_NTLM_responses">0</possible_value>
      <possible_value hint="send_LM_and_NTLM_use_NTLMv2_session_security_if_negotiated">1</possible_value>
      <possible_value hint="send_NTLM_response_only">2</possible_value>
      <possible_value hint="send_NTLMv2_response_only">3</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM">4</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM_and_NTLM">5</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459400" version="1" datatype="int" comment="Network Security: LDAP client signing requirements">
      <possible_value hint="none">0</possible_value>
      <possible_value hint="negotiate_signing">1</possible_value>
      <possible_value hint="require_signing">2</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:459900" version="1" datatype="int" comment="Shutdown: Allow System to be Shut Down Without Having to Log On">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460000" version="1" datatype="int" comment="System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460100" version="1" datatype="int" comment="System objects: Require case insensitivity for non-Windows subsystems">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460200" version="1" datatype="int" comment="System objects: Strengthen default permissions of internal system objects">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460300" version="1" datatype="int" comment="Admin Approval Mode for the Built-in Administrator account">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460500" version="1" datatype="int" comment="Behavior of the elevation prompt for standard users">
      <possible_value hint="automatically_deny">0</possible_value>
      <possible_value hint="prompt_for_credentials_on_the_secure_desktop">1</possible_value>
      <possible_value hint="prompt_for_credentials">3</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460600" version="1" datatype="int" comment="Detect application installations and prompt for elevation">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460700" version="1" datatype="int" comment="Only elevate executables that are signed and validated">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460800" version="1" datatype="int" comment="Only elevate UIAccess applications that are installed in secure locations">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:460900" version="1" datatype="int" comment="Run all administrators in Admin Approval Mode">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:461000" version="1" datatype="int" comment="Switch to the secure desktop when prompting for elevation">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable id="oval:mil.disa.fso.windows:var:461100" version="1" datatype="int" comment="Virtualize file and registry write failures to per-user locations">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:461300" version="1" datatype="string" comment="All 'local disk' volumes, in X:\ format">
      <end character="\">
        <object_component object_ref="oval:mil.disa.fso.windows:obj:461301" item_field="result" />
      </end>
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:498100" version="1" datatype="string" comment="Database log files path">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:498100" item_field="value" />
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:498101" version="1" datatype="string" comment="DSA Database file">
      <object_component object_ref="oval:mil.disa.fso.windows:obj:498101" item_field="value" />
    </local_variable>
    <local_variable id="oval:mil.disa.fso.windows:var:498401" version="1" datatype="string" comment="SystemRoot\System32">
      <concat>
        <object_component object_ref="oval:mil.disa.fso.windows:obj:388601" item_field="value" />
        <literal_component>\System32</literal_component>
      </concat>
    </local_variable>
  </variables>
</oval_definitions>

