<PolicyRules><ComputerConfig><Key>Software\Microsoft\Windows\CurrentVersion\Policies\Ext</Key><Value>RunThisTimeEnabled</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Microsoft\Windows\CurrentVersion\Policies\Ext</Key><Value>VersionCheckEnabled</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Download</Key><Value>RunInvalidSignatures</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Download</Key><Value>CheckExeSignatures</Value><RegType>REG_SZ</RegType><RegData>yes</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main</Key><Value>Isolation64Bit</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main</Key><Value>DisableEPMCompat</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main</Key><Value>Isolation</Value><RegType>REG_SZ</RegType><RegData>PMEM</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL</Key><Value>(Reserved)</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL</Key><Value>iexplore.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL</Key><Value>explorer.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING</Key><Value>explorer.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING</Key><Value>iexplore.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING</Key><Value>(Reserved)</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING</Key><Value>explorer.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING</Key><Value>iexplore.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING</Key><Value>(Reserved)</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL</Key><Value>(Reserved)</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL</Key><Value>explorer.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL</Key><Value>iexplore.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD</Key><Value>(Reserved)</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD</Key><Value>iexplore.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD</Key><Value>explorer.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND</Key><Value>(Reserved)</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND</Key><Value>iexplore.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND</Key><Value>explorer.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS</Key><Value>iexplore.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS</Key><Value>(Reserved)</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS</Key><Value>explorer.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION</Key><Value>(Reserved)</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION</Key><Value>explorer.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION</Key><Value>iexplore.exe</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\PhishingFilter</Key><Value>PreventOverrideAppRepUnknown</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\PhishingFilter</Key><Value>PreventOverride</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\PhishingFilter</Key><Value>EnabledV9</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Restrictions</Key><Value>NoCrashDetection</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Security</Key><Value>DisableSecuritySettingsCheck</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Security\ActiveX</Key><Value>BlockNonAdminActiveXInstall</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\AxInstaller</Key><Value>OnlyUseAXISForActiveXInstall</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</Key><Value>Security_zones_map_edit</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</Key><Value>Security_options_edit</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</Key><Value>Security_HKLM_only</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</Key><Value>CertificateRevocation</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</Key><Value>PreventIgnoreCertErrors</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</Key><Value>WarnOnBadCertRecving</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</Key><Value>EnableSSL3Fallback</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</Key><Value>SecureProtocols</Value><RegType>REG_DWORD</RegType><RegData>2560</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0</Key><Value>1C00</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1</Key><Value>1C00</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2</Key><Value>1C00</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3</Key><Value>2301</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4</Key><Value>2301</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4</Key><Value>1C00</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap</Key><Value>UNCAsIntranet</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0</Key><Value>1C00</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0</Key><Value>270C</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1</Key><Value>270C</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1</Key><Value>1201</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1</Key><Value>1C00</Value><RegType>REG_DWORD</RegType><RegData>65536</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2</Key><Value>1C00</Value><RegType>REG_DWORD</RegType><RegData>65536</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2</Key><Value>270C</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2</Key><Value>1201</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2001</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2102</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1802</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>160A</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1201</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1406</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1804</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2200</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1209</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1206</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1809</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2500</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2103</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1606</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2402</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2004</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1C00</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1001</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1A00</Value><RegType>REG_DWORD</RegType><RegData>65536</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2708</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1004</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>120b</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1407</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1409</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>270C</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1607</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2709</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2101</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>2301</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>1806</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>120c</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3</Key><Value>140C</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1608</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1201</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1001</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1607</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>120b</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1809</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1004</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1606</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1407</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>160A</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1406</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2102</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2004</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2200</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2000</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1402</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1803</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2402</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1400</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1A00</Value><RegType>REG_DWORD</RegType><RegData>196608</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2001</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2500</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1409</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1C00</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1209</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>270C</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1206</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2708</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1802</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2103</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2709</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1405</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2101</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>2301</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1200</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1804</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>1806</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>120c</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4</Key><Value>140C</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - Computer</PolicyName></ComputerConfig>
<UserConfig><Key>Software\Policies\Microsoft\Internet Explorer\Control Panel</Key><Value>FormSuggest Passwords</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{4E60D2FB-5E65-4AAB-843E-836833DEFA15}\DomainSysvol\GPO\User\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - User</PolicyName></UserConfig><UserConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main</Key><Value>FormSuggest PW Ask</Value><RegType>REG_SZ</RegType><RegData>no</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{4E60D2FB-5E65-4AAB-843E-836833DEFA15}\DomainSysvol\GPO\User\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - User</PolicyName></UserConfig><UserConfig><Key>Software\Policies\Microsoft\Internet Explorer\Main</Key><Value>FormSuggest Passwords</Value><RegType>REG_SZ</RegType><RegData>no</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{4E60D2FB-5E65-4AAB-843E-836833DEFA15}\DomainSysvol\GPO\User\registry.pol</SourceFile><PolicyName>MSFT Internet Explorer 11 - User</PolicyName></UserConfig>
<ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender</Key><Value>PUAProtection</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Real-Time Protection</Key><Value>DisableBehaviorMonitoring</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Scan</Key><Value>DisableRemovableDriveScanning</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Spynet</Key><Value>SubmitSamplesConsent</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Spynet</Key><Value>SpynetReporting</Value><RegType>REG_DWORD</RegType><RegData>2</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR</Key><Value>ExploitGuard_ASR_Rules</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>3b576869-a4ec-4529-8536-b80a7769e899</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>d4f940ab-401b-4efc-aadc-ad5f3c50688a</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>5beb7efe-fd9a-4556-801d-275e5ffc04cc</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>d3e037e1-3eb8-44c8-a917-57927947596d</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>be9ba2d9-53ea-4cdc-84e5-9b1eeee46550</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>26190899-1602-49e8-8b27-eb1d0a1ce869</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules</Key><Value>7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c</Value><RegType>REG_SZ</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection</Key><Value>EnableNetworkProtection</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6359FA45-B4E8-4B56-864A-591B4DD8642C}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Defender Antivirus</PolicyName></ComputerConfig>
<SecurityTemplate Section="System Access"><LineItem>MinimumPasswordLength=14</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6458B19A-73D5-4F93-8841-DA93A72F18F5}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Domain Security</PolicyName></SecurityTemplate><SecurityTemplate Section="System Access"><LineItem>PasswordComplexity=1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6458B19A-73D5-4F93-8841-DA93A72F18F5}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Domain Security</PolicyName></SecurityTemplate><SecurityTemplate Section="System Access"><LineItem>PasswordHistorySize=24</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6458B19A-73D5-4F93-8841-DA93A72F18F5}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Domain Security</PolicyName></SecurityTemplate><SecurityTemplate Section="System Access"><LineItem>LockoutBadCount=10</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6458B19A-73D5-4F93-8841-DA93A72F18F5}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Domain Security</PolicyName></SecurityTemplate><SecurityTemplate Section="System Access"><LineItem>ResetLockoutCount=15</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6458B19A-73D5-4F93-8841-DA93A72F18F5}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Domain Security</PolicyName></SecurityTemplate><SecurityTemplate Section="System Access"><LineItem>LockoutDuration=15</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6458B19A-73D5-4F93-8841-DA93A72F18F5}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Domain Security</PolicyName></SecurityTemplate><SecurityTemplate Section="System Access"><LineItem>ClearTextPassword=0</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{6458B19A-73D5-4F93-8841-DA93A72F18F5}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows 10 1909 and Server 1909 - Domain Security</PolicyName></SecurityTemplate>
<ComputerConfig><Key>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</Key><Value>NoDriveTypeAutoRun</Value><RegType>REG_DWORD</RegType><RegData>255</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</Key><Value>NoAutorun</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Microsoft\Windows\CurrentVersion\Policies\System</Key><Value>DisableAutomaticRestartSignOn</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters</Key><Value>AllowEncryptionOracle</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Biometrics\FacialFeatures</Key><Value>EnhancedAntiSpoofing</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Internet Explorer\Feeds</Key><Value>DisableEnclosureDownload</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\CredentialsDelegation</Key><Value>AllowProtectedCreds</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\EventLog\Application</Key><Value>MaxSize</Value><RegType>REG_DWORD</RegType><RegData>32768</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\EventLog\Security</Key><Value>MaxSize</Value><RegType>REG_DWORD</RegType><RegData>196608</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\EventLog\System</Key><Value>MaxSize</Value><RegType>REG_DWORD</RegType><RegData>32768</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Explorer</Key><Value>NoAutoplayfornonVolume</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</Key><Value>NoBackgroundPolicy</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}</Key><Value>NoGPOListChanges</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Installer</Key><Value>AlwaysInstallElevated</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Installer</Key><Value>EnableUserControl</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Kernel DMA Protection</Key><Value>DeviceEnumerationPolicy</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\LanmanWorkstation</Key><Value>AllowInsecureGuestAuth</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths</Key><Value>\\*\NETLOGON</Value><RegType>REG_SZ</RegType><RegData>RequireMutualAuthentication=1,RequireIntegrity=1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths</Key><Value>\\*\SYSVOL</Value><RegType>REG_SZ</RegType><RegData>RequireMutualAuthentication=1,RequireIntegrity=1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Personalization</Key><Value>NoLockScreenCamera</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Personalization</Key><Value>NoLockScreenSlideshow</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging</Key><Value>EnableScriptBlockLogging</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging</Key><Value>**del.EnableScriptBlockInvocationLogging</Value><RegType>REG_SZ</RegType><RegData></RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Safer</Key><Value></Value><RegType>REG_NONE</RegType><RegData></RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Appx</Key><Value>EnforcementMode</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Appx\a9e18c21-ff8f-43cf-b9fc-db40eed693ba</Key><Value>Value</Value><RegType>REG_SZ</RegType><RegData>&lt;FilePublisherRule Id="a9e18c21-ff8f-43cf-b9fc-db40eed693ba" Name="(Default Rule) All signed packaged apps" Description="Allows members of the Everyone group to run packaged apps that are signed." UserOrGroupSid="S-1-1-0" Action="Allow"&gt;&lt;Conditions&gt;&lt;FilePublisherCondition PublisherName="*" ProductName="*" BinaryName="*"&gt;&lt;BinaryVersionRange LowSection="0.0.0.0" HighSection="*"/&gt;&lt;/FilePublisherCondition&gt;&lt;/Conditions&gt;&lt;/FilePublisherRule&gt;\r\n</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Dll</Key><Value></Value><RegType>REG_NONE</RegType><RegData></RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Exe</Key><Value>EnforcementMode</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Exe\5e3ec135-b5af-4961-ae4d-cde98710afc9</Key><Value>Value</Value><RegType>REG_SZ</RegType><RegData>&lt;FilePublisherRule Id="5e3ec135-b5af-4961-ae4d-cde98710afc9" Name="Block Google Chrome" Description="" UserOrGroupSid="S-1-1-0" Action="Deny"&gt;&lt;Conditions&gt;&lt;FilePublisherCondition PublisherName="O=GOOGLE INC, L=MOUNTAIN VIEW, S=CALIFORNIA, C=US" ProductName="GOOGLE CHROME" BinaryName="CHROME.EXE"&gt;&lt;BinaryVersionRange LowSection="*" HighSection="*"/&gt;&lt;/FilePublisherCondition&gt;&lt;/Conditions&gt;&lt;/FilePublisherRule&gt;\r\n</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Exe\6db6c8f3-cf7c-4754-a438-94c95345bb53</Key><Value>Value</Value><RegType>REG_SZ</RegType><RegData>&lt;FilePublisherRule Id="6db6c8f3-cf7c-4754-a438-94c95345bb53" Name="Block Mozilla Firefox" Description="" UserOrGroupSid="S-1-1-0" Action="Deny"&gt;&lt;Conditions&gt;&lt;FilePublisherCondition PublisherName="O=MOZILLA CORPORATION, L=MOUNTAIN VIEW, S=CA, C=US" ProductName="FIREFOX" BinaryName="FIREFOX.EXE"&gt;&lt;BinaryVersionRange LowSection="*" HighSection="*"/&gt;&lt;/FilePublisherCondition&gt;&lt;/Conditions&gt;&lt;/FilePublisherRule&gt;\r\n</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Exe\881d54fe-3848-4d6a-95fd-42d48ebe60b8</Key><Value>Value</Value><RegType>REG_SZ</RegType><RegData>&lt;FilePublisherRule Id="881d54fe-3848-4d6a-95fd-42d48ebe60b8" Name="Block Internet Explorer" Description="" UserOrGroupSid="S-1-1-0" Action="Deny"&gt;&lt;Conditions&gt;&lt;FilePublisherCondition PublisherName="O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US" ProductName="INTERNET EXPLORER" BinaryName="IEXPLORE.EXE"&gt;&lt;BinaryVersionRange LowSection="*" HighSection="*"/&gt;&lt;/FilePublisherCondition&gt;&lt;/Conditions&gt;&lt;/FilePublisherRule&gt;\r\n</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Exe\921cc481-6e17-4653-8f75-050b80acca20</Key><Value>Value</Value><RegType>REG_SZ</RegType><RegData>&lt;FilePathRule Id="921cc481-6e17-4653-8f75-050b80acca20" Name="(Default Rule) All files located in the Program Files folder" Description="Allows members of the Everyone group to run applications that are located in the Program Files folder." UserOrGroupSid="S-1-1-0" Action="Allow"&gt;&lt;Conditions&gt;&lt;FilePathCondition Path="%PROGRAMFILES%\*"/&gt;&lt;/Conditions&gt;&lt;/FilePathRule&gt;\r\n</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Exe\a61c8b2c-a319-4cd0-9690-d2177cad7b51</Key><Value>Value</Value><RegType>REG_SZ</RegType><RegData>&lt;FilePathRule Id="a61c8b2c-a319-4cd0-9690-d2177cad7b51" Name="(Default Rule) All files located in the Windows folder" Description="Allows members of the Everyone group to run applications that are located in the Windows folder." UserOrGroupSid="S-1-1-0" Action="Allow"&gt;&lt;Conditions&gt;&lt;FilePathCondition Path="%WINDIR%\*"/&gt;&lt;/Conditions&gt;&lt;/FilePathRule&gt;\r\n</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Exe\fd686d83-a829-4351-8ff4-27c7de5755d2</Key><Value>Value</Value><RegType>REG_SZ</RegType><RegData>&lt;FilePathRule Id="fd686d83-a829-4351-8ff4-27c7de5755d2" Name="(Default Rule) All files" Description="Allows members of the local Administrators group to run all applications." UserOrGroupSid="S-1-5-32-544" Action="Allow"&gt;&lt;Conditions&gt;&lt;FilePathCondition Path="*"/&gt;&lt;/Conditions&gt;&lt;/FilePathRule&gt;\r\n</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Msi</Key><Value></Value><RegType>REG_NONE</RegType><RegData></RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\SrpV2\Script</Key><Value></Value><RegType>REG_NONE</RegType><RegData></RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\System</Key><Value>EnableSmartScreen</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\System</Key><Value>ShellSmartScreenLevel</Value><RegType>REG_SZ</RegType><RegData>Block</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\Windows Search</Key><Value>AllowIndexingEncryptedStoresOrItems</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\WinRM\Client</Key><Value>AllowBasic</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\WinRM\Client</Key><Value>AllowUnencryptedTraffic</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\WinRM\Client</Key><Value>AllowDigest</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\WinRM\Service</Key><Value>AllowBasic</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\WinRM\Service</Key><Value>AllowUnencryptedTraffic</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows\WinRM\Service</Key><Value>DisableRunAs</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows NT\DNSClient</Key><Value>EnableMulticast</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows NT\Terminal Services</Key><Value>DisablePasswordSaving</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows NT\Terminal Services</Key><Value>fDisableCdm</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows NT\Terminal Services</Key><Value>fPromptForPassword</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows NT\Terminal Services</Key><Value>fEncryptRPCTraffic</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\Windows NT\Terminal Services</Key><Value>MinEncryptionLevel</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall</Key><Value>PolicyVersion</Value><RegType>REG_DWORD</RegType><RegData>538</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall\DomainProfile</Key><Value>DefaultOutboundAction</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall\DomainProfile</Key><Value>DefaultInboundAction</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall\DomainProfile</Key><Value>EnableFirewall</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall\PrivateProfile</Key><Value>EnableFirewall</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall\PrivateProfile</Key><Value>DefaultInboundAction</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall\PrivateProfile</Key><Value>DefaultOutboundAction</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall\PublicProfile</Key><Value>EnableFirewall</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall\PublicProfile</Key><Value>DefaultOutboundAction</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsFirewall\PublicProfile</Key><Value>DefaultInboundAction</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>Software\Policies\Microsoft\WindowsInkWorkspace</Key><Value>AllowWindowsInkWorkspace</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest</Key><Value>UseLogonCredential</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Control\Session Manager\kernel</Key><Value>DisableExceptionChainValidation</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Policies\EarlyLaunch</Key><Value>DriverLoadPolicy</Value><RegType>REG_DWORD</RegType><RegData>3</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters</Key><Value>SMB1</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Services\MrxSmb10</Key><Value>Start</Value><RegType>REG_DWORD</RegType><RegData>4</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Services\Netbt\Parameters</Key><Value>NoNameReleaseOnDemand</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Services\Netbt\Parameters</Key><Value>NodeType</Value><RegType>REG_DWORD</RegType><RegData>2</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Services\NTDS\Parameters</Key><Value>LdapEnforceChannelBinding</Value><RegType>REG_DWORD</RegType><RegData>2</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Services\Tcpip\Parameters</Key><Value>EnableICMPRedirect</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Services\Tcpip\Parameters</Key><Value>DisableIPSourceRouting</Value><RegType>REG_DWORD</RegType><RegData>2</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><ComputerConfig><Key>SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters</Key><Value>DisableIPSourceRouting</Value><RegType>REG_DWORD</RegType><RegData>2</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></ComputerConfig><SecurityTemplate Section="System Access"><LineItem>LSAAnonymousNameLookup=0</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Service General Setting"><LineItem>"AppIDSvc",2,""</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeCreateTokenPrivilege=</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeTrustedCredManAccessPrivilege=</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeRemoteInteractiveLogonRight=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeCreatePagefilePrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeRemoteShutdownPrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeLoadDriverPrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeRestorePrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeCreateGlobalPrivilege=*S-1-5-32-544,*S-1-5-6,*S-1-5-19,*S-1-5-20</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeManageVolumePrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeInteractiveLogonRight=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeEnableDelegationPrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeCreatePermanentPrivilege=</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeDebugPrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeProfileSingleProcessPrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeBackupPrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeNetworkLogonRight=*S-1-5-32-544,*S-1-5-11,*S-1-5-9</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeImpersonatePrivilege=*S-1-5-32-544,*S-1-5-6,*S-1-5-19,*S-1-5-20</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeSystemEnvironmentPrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeLockMemoryPrivilege=</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeTcbPrivilege=</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Privilege Rights"><LineItem>SeTakeOwnershipPrivilege=*S-1-5-32-544</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\allownullsessionfallback=4,0</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\InactivityTimeoutSecs=4,900</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption=1,"1"</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Lsa\SCENoApplyLegacyAuditPolicy=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableVirtualization=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorToken=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableInstallerDetection=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin=4,2</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser=4,0</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableSecureUIAPaths=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel=4,5</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec=4,537395200</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\sealsecurechannel=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec=4,537395200</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\requiresignorseal=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\signsecurechannel=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\RequireSecuritySignature=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\requiresecuritysignature=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\requirestrongkey=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RestrictNullSessAccess=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash=4,1</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword=4,0</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><SecurityTemplate Section="Registry Values"><LineItem>MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity=4,2</LineItem><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></SecurityTemplate><AuditSubcategory><GUID>{0cce923f-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Credential Validation</Name><Setting>2</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9242-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Kerberos Authentication Service</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9240-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Kerberos Service Ticket Operations</Name><Setting>2</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9236-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Computer Account Management</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce923a-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Other Account Management Events</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9237-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Security Group Management</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9235-69ae-11d9-bed3-505054503030}</GUID><Name>Audit User Account Management</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9248-69ae-11d9-bed3-505054503030}</GUID><Name>Audit PNP Activity</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce922b-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Process Creation</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce923b-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Directory Service Access</Name><Setting>2</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce923c-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Directory Service Changes</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9217-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Account Lockout</Name><Setting>2</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9249-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Group Membership</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9215-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Logon</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce921c-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Other Logon/Logoff Events</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce921b-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Special Logon</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9244-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Detailed File Share</Name><Setting>2</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9224-69ae-11d9-bed3-505054503030}</GUID><Name>Audit File Share</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9227-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Other Object Access Events</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9245-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Removable Storage</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce922f-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Audit Policy Change</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9230-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Authentication Policy Change</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9232-69ae-11d9-bed3-505054503030}</GUID><Name>Audit MPSSVC Rule-Level Policy Change</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9234-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Other Policy Change Events</Name><Setting>2</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9228-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Sensitive Privilege Use</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9214-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Other System Events</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9210-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Security State Change</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9211-69ae-11d9-bed3-505054503030}</GUID><Name>Audit Security System Extension</Name><Setting>1</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory><AuditSubcategory><GUID>{0cce9212-69ae-11d9-bed3-505054503030}</GUID><Name>Audit System Integrity</Name><Setting>3</Setting><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{ABC66265-8884-49F9-9621-0213E3566A6B}\DomainSysvol\GPO\Machine\microsoft\windows nt\Audit\audit.csv</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller</PolicyName></AuditSubcategory>
<ComputerConfig><Key>SOFTWARE\Policies\Microsoft\Windows\DeviceGuard</Key><Value>EnableVirtualizationBasedSecurity</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{C9E694FF-5E05-4838-8692-5A3F575F3BFC}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller Virtualization Based Security</PolicyName></ComputerConfig><ComputerConfig><Key>SOFTWARE\Policies\Microsoft\Windows\DeviceGuard</Key><Value>RequirePlatformSecurityFeatures</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{C9E694FF-5E05-4838-8692-5A3F575F3BFC}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller Virtualization Based Security</PolicyName></ComputerConfig><ComputerConfig><Key>SOFTWARE\Policies\Microsoft\Windows\DeviceGuard</Key><Value>HypervisorEnforcedCodeIntegrity</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{C9E694FF-5E05-4838-8692-5A3F575F3BFC}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller Virtualization Based Security</PolicyName></ComputerConfig><ComputerConfig><Key>SOFTWARE\Policies\Microsoft\Windows\DeviceGuard</Key><Value>HVCIMATRequired</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{C9E694FF-5E05-4838-8692-5A3F575F3BFC}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller Virtualization Based Security</PolicyName></ComputerConfig><ComputerConfig><Key>SOFTWARE\Policies\Microsoft\Windows\DeviceGuard</Key><Value>LsaCfgFlags</Value><RegType>REG_DWORD</RegType><RegData>0</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{C9E694FF-5E05-4838-8692-5A3F575F3BFC}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller Virtualization Based Security</PolicyName></ComputerConfig><ComputerConfig><Key>SOFTWARE\Policies\Microsoft\Windows\DeviceGuard</Key><Value>ConfigureSystemGuardLaunch</Value><RegType>REG_DWORD</RegType><RegData>1</RegData><SourceFile>C:\GPOs\Windows-10-1909-Security-Baseline-FINAL\GPOs\{C9E694FF-5E05-4838-8692-5A3F575F3BFC}\DomainSysvol\GPO\Machine\registry.pol</SourceFile><PolicyName>MSFT Windows Server 1909 - Domain Controller Virtualization Based Security</PolicyName></ComputerConfig>
</PolicyRules>
