1 <migration urlid="http://www.microsoft.com/migration/1.0/migxmlext/offlineupgrade"> 2 <component type="System" context="System"> 3 <displayName>offlineUpgrade</displayName> 4 <paths> 5 <path type="File">%WINDIR%\offlineUpgrade</path> 6 </paths> 7 <role role="Settings"> 8 <rules> 9 10 <excludeAttributes attributes="Security"> 11 <objectSet> 12 <pattern type="File">* [*]</pattern> 13 <pattern type="Registry">* [*]</pattern> 14 </objectSet> 15 </excludeAttributes> 16 17 <include> 18 <objectSet> 19 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa [Security Packages]</pattern> 20 </objectSet> 21 </include> 22 23 <include> 24 <objectSet> 25 26 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NDIS\IfTypes\* [*]</pattern> 27 28 <pattern type="File">%WINDIR% [WindowsUpdate.log]</pattern> 29 <pattern type="File">%WINDIR%\SoftwareDistribution\* [*]</pattern> 30 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\* [*]</pattern> 31 </objectSet> 32 </include> 33 <exclude> 34 <objectSet> 35 <pattern type="File">%WINDIR%\SoftwareDistribution\DataStore\* [*]</pattern> 36 <pattern type="File">%WINDIR%\SoftwareDistribution\DeliveryOptimization\* [*]</pattern> 37 <pattern type="File">%WINDIR%\SoftwareDistribution\Download\* [*]</pattern> 38 <pattern type="File">%WINDIR%\SoftwareDistribution\ScanFile\* [*]</pattern> 39 <pattern type="File">%WINDIR%\SoftwareDistribution\SelfUpdate\* [*]</pattern> 40 <pattern type="File">%WINDIR%\SoftwareDistribution\WebSetup\* [*]</pattern> 41 <pattern type="File">%WINDIR%\SoftwareDistribution\WuRedir\* [*]</pattern> 42 <pattern type="File">%WINDIR%\SoftwareDistribution\Featured\* [*]</pattern> 43 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdateSysprepInProgress\* [*]</pattern> 44 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup\* [*]</pattern> 45 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [SetupWizardLaunchTime]</pattern> 46 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [FirstDetectionFailureTime]</pattern> 47 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [BalloonType]</pattern> 48 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [BalloonTime]</pattern> 49 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [ScheduledInstallDate]</pattern> 50 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [ScheduledInstallDay]</pattern> 51 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [ScheduledInstallTime]</pattern> 52 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [ShowUnableToDetectUI]</pattern> 53 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [OfflineDetectionPending]</pattern> 54 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [UnableToDetectTime]</pattern> 55 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [DownloadExpirationTime]</pattern> 56 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [NextDetectionTime]</pattern> 57 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [NextFeaturedUpdatesNotificationTime]</pattern> 58 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [FeaturedUpdatesNotificationSeqNumGenTime]</pattern> 59 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [FeaturedUpdatesNotificationSeqNum]</pattern> 60 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\* [*]</pattern> 61 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired\* [*]</pattern> 62 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\UAS\* [*]</pattern> 63 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Volatile\* [*]</pattern> 64 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\UXFirmwareInstallsAllowed\* [*]</pattern> 65 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\AutoFirmwareInstallsAllowedAtShutdown\* [*]</pattern> 66 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\RebootWatch\* [*]</pattern> 67 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\RebootNotCompleted\* [*]</pattern> 68 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\RebootCompletionReported\* [*]</pattern> 69 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\DontExpirePolledEvents\* [*]</pattern> 70 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache.v2\* [*]</pattern> 71 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [ResetAU]</pattern> 72 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [SelfUpdateTime]</pattern> 73 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate [UpdateId]</pattern> 74 </objectSet> 75 </exclude> 76 77 <merge script="MigXmlHelper.FindFilePlaceByPattern('<F> (<N>).<E>')"> 78 <objectSet> 79 <pattern type="File">%WINDIR% [WindowsUpdate.log]</pattern> 80 </objectSet> 81 </merge> 82 83 <merge script="MigXmlHelper.SourcePriority()"> 84 <objectSet> 85 86 <pattern type="File">%WINDIR%\SoftwareDistribution\* [*]</pattern> 87 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\* [*]</pattern> 88 89 </objectSet> 90 </merge> 91 92 <include> 93 <objectSet> 94 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications [*]</pattern> 95 </objectSet> 96 </include> 97 98 <merge script="MigXmlHelper.SourcePriority()"> 99 <objectSet> 100 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications [*]</pattern> 101 </objectSet> 102 </merge> 103 104 <destinationCleanup> 105 <objectSet> 106 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\* [*]</pattern> 107 </objectSet> 108 </destinationCleanup> 109 110 <include> 111 <objectSet> 112 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation\* [*]</pattern> 113 </objectSet> 114 </include> 115 116 <exclude> 117 <objectSet> 118 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation [ActiveTimeBias]</pattern> 119 </objectSet> 120 </exclude> 121 122 <destinationCleanup> 123 <objectSet> 124 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation\* [*]</pattern> 125 </objectSet> 126 </destinationCleanup> 127 128 <merge script="MigXmlHelper.SourcePriority()"> 129 <objectSet> 130 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation\* [*]</pattern> 131 </objectSet> 132 </merge> 133 134 <destinationCleanup> 135 <objectSet> 136 <!-- NDIS staged upgrade cleanup --> 137 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\$ [NetLuidIndex]</pattern> 138 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Class\{6BDD1FC5-810F-11D0-BEC7-08002BE2092F}\$ [NetLuidIndex]</pattern> 139 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002bE10318}\{* [*]</pattern> 140 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a11-9b1a-11d4-9123-0050047759bc}\10\* [*]</pattern> 141 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a11-9b1a-11d4-9123-0050047759bc}\7\* [*]</pattern> 142 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a11-9b1a-11d4-9123-0050047759bc}\6\* [*]</pattern> 143 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NDIS\IfTypes\$ [IfType]</pattern> 144 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NDIS\IfTypes\$ [IfUsedNetLuidIndices]</pattern> 145 146 </objectSet> 147 </destinationCleanup> 148 149 </rules> 150 151 <rules> 152 <detects> 153 <detect> 154 <condition>MigXmlHelper.IsOSEarlierThan("NT","6.0.0.0")</condition> 155 </detect> 156 </detects> 157 158 <include> 159 <objectSet> 160 <!-- Eventlog machine specific settings (owner:MichaelM)--> 161 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\* [*]</pattern> 162 </objectSet> 163 </include> 164 165 <exclude> 166 <objectSet> 167 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WinRM\* [*]</pattern> 168 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\EventLog\System\WinRM\* [*]</pattern> 169 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Security\AD FS 2.0 Auditing\*[*]</pattern> 170 </objectSet> 171 </exclude> 172 173 <includeAttributes attributes="Security"> 174 <objectSet> 175 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\ADAM*</pattern> 176 </objectSet> 177 </includeAttributes> 178 179 <exclude> 180 <objectSet> 181 <!-- Event log path --> 182 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [File]</pattern> 183 </objectSet> 184 </exclude> 185 186 <merge script="MigXmlHelper.DestinationPriority()"> 187 <objectSet> 188 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\* [*]</pattern> 189 190 <!-- Svchost settings --> 191 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog [*]</pattern> 192 </objectSet> 193 </merge> 194 195 <merge script="MigXmlHelper.SourcePriority()"> 196 <objectSet> 197 <!-- Classic event log settings --> 198 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [CustomSD]</pattern> 199 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [Isolation]</pattern> 200 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [Retention]</pattern> 201 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [AutoBackupLogFiles]</pattern> 202 </objectSet> 203 </merge> 204 205 <merge script="MigXmlHelper.HigherValue()"> 206 <objectSet> 207 <!-- Event log size --> 208 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [MaxSize]</pattern> 209 </objectSet> 210 </merge> 211 </rules> 212 213 <rules> 214 <detects> 215 <detect> 216 <condition negation="Yes">MigXmlHelper.IsOSEarlierThan("NT","6.0.0.0")</condition> 217 </detect> 218 </detects> 219 220 <include> 221 <objectSet> 222 <!-- Eventlog machine specific settings (owner:MichaelM)--> 223 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\* [*]</pattern> 224 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\* [*]</pattern> 225 </objectSet> 226 </include> 227 228 <exclude> 229 <objectSet> 230 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Security\AD FS 2.0 Auditing\*[*]</pattern> 231 </objectSet> 232 </exclude> 233 234 <includeAttributes attributes="Security"> 235 <objectSet> 236 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\ADAM*</pattern> 237 </objectSet> 238 </includeAttributes> 239 240 241 <exclude> 242 <objectSet> 243 <!-- Event log publisher key path --> 244 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{832d43c6-2e88-4be7-a4d1-61fc2430ff07}\* [*]</pattern> 245 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{d6795c62-6f24-4363-99ce-2ff3f4b1faba}\* [*]</pattern> 246 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{f863cf1c-c759-4dc0-98bb-81a109974cdf}\* [*]</pattern> 247 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{fb5e81f8-9a5c-4c9e-8144-6b9123e078df}\* [*]</pattern> 248 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{d2dd58ba-3ed4-4d5a-9987-af473bb6d0b0}\* [*]</pattern> 249 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{1be39648-5678-4fae-839b-10da2c4cf234}\* [*]</pattern> 250 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{cd75048f-1233-4f58-b9ed-98ba2097ac7e}\* [*]</pattern> 251 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{4153360c-6259-4e56-900c-818532b7897d}\* [*]</pattern> 252 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{5b33145c-1c66-49f3-b4ca-f563c165f2c0}\* [*]</pattern> 253 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{13e8b4f7-4d1c-4f65-95a2-39c6b26a3012}\* [*]</pattern> 254 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{986329a0-a1d5-46cf-8801-595d646c271f}\* [*]</pattern> 255 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{1fd7c1d2-d037-4620-8d29-b2c7e5fcc13a}\* [*]</pattern> 256 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{560b2594-7530-4c77-8998-f067ae1e2918}\* [*]</pattern> 257 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{a58d520f-c444-4982-bb61-8db7f0a5f217}\* [*]</pattern> 258 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{4d5ae6a1-c7c8-4e6d-b840-4d8080b42e1b}\* [*]</pattern> 259 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{eea178e3-e9d4-41ca-bb56-cede1a476629}\* [*]</pattern> 260 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{4b3efc0a-e514-4022-bd50-532620d2d9fb}\* [*]</pattern> 261 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{67beaf60-484b-4078-a99b-95cf827c553b}\* [*]</pattern> 262 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{2129b945-09ed-4965-820e-032243a31578}\* [*]</pattern> 263 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e4c60dfa-ecc5-4889-b406-e9ddd38463c8}\* [*]</pattern> 264 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{565bbeca-5b04-49bb-81c6-3e21527fcc8a}\* [*]</pattern> 265 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e98754d0-883b-11db-b606-0800200c9a66}\* [*]</pattern> 266 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{95353826-4fbe-41d4-9c42-f521c6e86360}\* [*]</pattern> 267 268 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{bc2eeeec-b77a-4a52-b6a4-dffb1b1370cb}\* [*]</pattern> 269 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{57e0b31d-de8c-4181-bcd1-f70e880b49fc}\* [*]</pattern> 270 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{8c9dd1ad-e6e5-4b07-b455-684a9d879900}\* [*]</pattern> 271 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}\* [*]</pattern> 272 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{98583af0-fc93-4e71-96d5-9f8da716c6b8}\* [*]</pattern> 273 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{92ae46d7-6d9c-4727-9ed5-e49af9c24cbf}\* [*]</pattern> 274 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{01979c6a-42fa-414c-b8aa-eee2c8202018}\* [*]</pattern> 275 276 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{3df0c2c1-5a04-4966-9790-df6ef0ccde9c}\* [*]</pattern> 277 278 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{b43979bf-6596-4d15-944f-cd89b2b935ca}\* [*]</pattern> 279 280 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{788fda79-b68a-40df-b409-8778a3fa6edd}\* [*]</pattern> 281 282 <!-- Event log channel key path --> 283 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\winevt\Channels\Microsoft-Windows-DxpTaskRingtone/Analytic\* [*]</pattern> 284 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\Microsoft-Windows-MeetingSpace/Operational [*]</pattern> 285 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\Microsoft-Windows-Security-Licensing-SLC/Perf [*]</pattern> 286 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\Microsoft-Windows-TerminalServices-Gateway/* [*]</pattern> 287 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\Microsoft-Windows-Diagnosis-MSDT* [*]</pattern> 288 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\Microsoft-Windows-PrintSpooler* [*]</pattern> 289 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\Microsoft-Windows-Eventlog-ForwardPlugin/Debug [*]</pattern> 290 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\Microsoft-Windows-OfflineFiles* [*]</pattern> 291 </objectSet> 292 </exclude> 293 294 <merge script="MigXmlHelper.DestinationPriority()"> 295 <objectSet> 296 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\* [*]</pattern> 297 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\* [*]</pattern> 298 299 <!-- Svchost settings --> 300 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog [*]</pattern> 301 302 <!-- Event log files and paths --> 303 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [File]</pattern> 304 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [File]</pattern> 305 306 <!-- Eventlog global settings --> 307 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt [*]</pattern> 308 309 <!-- Event log settings --> 310 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [*]</pattern> 311 <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\filters\* [*]</pattern> 312 </objectSet> 313 </merge> 314 </rules> 315 316 <rules context="System"> 317 <include> 318 <objectSet> 319 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\partmgr\Parameters [SanPolicy]</pattern> 320 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\mountmgr [NoAutoMount]</pattern> 321 </objectSet> 322 </include> 323 </rules> 324 325 <rules context="System"> 326 <conditions> 327 <condition negation="Yes">MigXmlHelper.DoesObjectExist("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\partmgr\Parameters [SanPolicy]")</condition> 328 </conditions> 329 <contentModify script="MigXmlHelper.SetValueByTable('0,1', '1,2', '1')"> 330 <objectSet> 331 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\mountmgr [NoAutoMount]</pattern> 332 </objectSet> 333 </contentModify> 334 <locationModify script="MigXmlHelper.ExactMove('HKLM\SYSTEM\CurrentControlSet\Services\partmgr\Parameters [SanPolicy]')"> 335 <objectSet> 336 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\mountmgr [NoAutoMount]</pattern> 337 </objectSet> 338 </locationModify> 339 </rules> 340 341 342 343 <rules context="System"> 344 <include> 345 <objectSet> 346 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Print\PrinterMigration\* [*]</pattern> 347 </objectSet> 348 </include> 349 </rules> 350 351 <rules context="System"> 352 <include> 353 <objectSet> 354 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\$[Security]</pattern> 355 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\$\PnPData[HardwareID]</pattern> 356 </objectSet> 357 </include> 358 <locationModify script="MigXmlHelper.RelativeMove('HKLM\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers','HKLM\Software\Microsoft\Windows NT\CurrentVersion\Print\SecurityDescriptors')"> 359 <objectSet> 360 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\*[*]</pattern> 361 </objectSet> 362 </locationModify> 363 </rules> 364 365 </role> 366 </component> 367 368 <component type="System" context="System"> 369 <displayName>DCRoleOfflineUpgrade</displayName> 370 <paths> 371 <path type="File">%WINDIR%\DCRoleOfflineUpgrade</path> 372 </paths> 373 374 <role role="Settings"> 375 <detects> 376 <detect context="System"> 377 <condition>MigXmlHelper.DoesStringContentEqual("Registry", "HKLM\SYSTEM\CurrentControlSet\control\ProductOptions [ProductType]", "LanManNT")</condition> 378 </detect> 379 </detects> 380 381 <environment context="System"> 382 <variable name="DSA_WORKING_DIR"> 383 <script>MigXmlHelper.GetStringContent("Registry","HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]")</script> 384 </variable> 385 <variable name="DATABASE_LOG_FILES_PATH"> 386 <script>MigXmlHelper.GetStringContent("Registry","HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]")</script> 387 </variable> 388 </environment> 389 390 <rules context="System"> 391 <addObjects> 392 <object> 393 <location type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS [DirectoryServiceExtPt]</location> 394 <attributes>ExpandString</attributes> 395 <bytes string="YES" expand="NO">%SystemRoot%\system32\ntdsa.dll</bytes> 396 </object> 397 <object> 398 <location type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS [LsaDbExtPt]</location> 399 <attributes>ExpandString</attributes> 400 <bytes string="YES" expand="NO">%SystemRoot%\system32\lsadb.dll</bytes> 401 </object> 402 <object> 403 <location type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [ServiceDll]</location> 404 <attributes>ExpandString</attributes> 405 <bytes string="YES" expand="NO">%SystemRoot%\system32\ntdsa.dll</bytes> 406 </object> 407 </addObjects> 408 409 <include> 410 <objectSet> 411 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS [DirectoryServiceExtPt]</pattern> 412 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS [LsaDbExtPt]</pattern> 413 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [ServiceDll]</pattern> 414 </objectSet> 415 </include> 416 </rules> 417 418 <rules context="System"> 419 <addObjects> 420 <object> 421 <location type="Registry">HKLM\System\CurrentControlSet\Services\NTDS [Start]</location> 422 <attributes>Dword</attributes> 423 <bytes>02000000</bytes> 424 </object> 425 </addObjects> 426 427 <include> 428 <objectSet> 429 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics\* [*]</pattern> 430 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\rid\* [*]</pattern> 431 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\* [*]</pattern> 432 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\RID Values\* [*]</pattern> 433 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\control\ProductOptions [ProductType]</pattern> 434 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters [SysVol]</pattern> 435 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\NTDS\* [*]</pattern> 436 <pattern type="Registry">HKLM\System\CurrentControlSet\Services\NTDS [Start]</pattern> 437 </objectSet> 438 </include> 439 440 </rules> 441 <rules context="System"> 442 <detects> 443 <detect> 444 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemRoot%")</condition> 445 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%ProgramFiles%")</condition> 446 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemDrive%\Program Files")</condition> 447 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%ProgramFiles(x86)%")</condition> 448 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemDrive%\build")</condition> 449 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemDrive%\InstalledRepository")</condition> 450 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%ProfilesFolder%")</condition> 451 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%ProgramData%")</condition> 452 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemDrive%\Documents and Settings")</condition> 453 </detect> 454 </detects> 455 <include> 456 <objectSet> 457 <pattern type="File">%DSA_WORKING_DIR%\* [*]</pattern> 458 </objectSet> 459 </include> 460 </rules> 461 462 <rules context="System"> 463 <detects> 464 <detect> 465 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemRoot%")</condition> 466 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%ProgramFiles%")</condition> 467 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemDrive%\Program Files")</condition> 468 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%ProgramFiles(x86)%")</condition> 469 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemDrive%\build")</condition> 470 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemDrive%\InstalledRepository")</condition> 471 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%ProfilesFolder%")</condition> 472 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%ProgramData%")</condition> 473 <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemDrive%\Documents and Settings")</condition> 474 </detect> 475 </detects> 476 <include> 477 <objectSet> 478 <pattern type="File">%DATABASE_LOG_FILES_PATH%\* [*]</pattern> 479 </objectSet> 480 </include> 481 </rules> 482 483 </role> 484 </component> 485 486 <component type="System" context="System"> 487 488 <displayName>DiagTrack</displayName> 489 490 <role role="Settings"> 491 492 <rules context="System"> 493 <include> 494 <objectSet> 495 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack [DiagTrackDbVersion]</pattern> 496 <pattern type="File">%ProgramData%\Microsoft\Diagnosis [*.rbs]</pattern> 497 </objectSet> 498 </include> 499 <merge script="MigXmlHelper.SourcePriority()"> 500 <objectSet> 501 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack [DiagTrackDbVersion]</pattern> 502 <pattern type="File">%ProgramData%\Microsoft\Diagnosis [*.rbs]</pattern> 503 </objectSet> 504 </merge> 505 </rules> 506 507 </role> 508 </component> 509 510 511 </migration> 512