1 <migration urlid="http://www.microsoft.com/migration/1.0/migxmlext/frameworkupgrade"> 2 <component type="System" context="System"> 3 <displayName>UpgradeFramework</displayName> 4 <role role="Settings"> 5 6 <rules> 7 <conditions> 8 <condition>MigXmlHelper.IsMigrationScope("FrameworkBasic")</condition> 9 </conditions> 10 11 <include> 12 <objectSet> 13 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\SQMClient [MachineId]</pattern> 14 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\SQMClient\$ [StudyId]</pattern> 15 </objectSet> 16 </include> 17 <include> 18 <objectSet> 19 <pattern type="Registry">HKLM\SYSTEM\MountedDevices [\DosDevices\*]</pattern> 20 </objectSet> 21 <objectSet> 22 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters\*[*]</pattern> 23 </objectSet> 24 <objectSet> 25 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\FVEAutoUnlock\* [*]</pattern> 26 </objectSet> 27 </include> 28 29 <include> 30 <objectSet> 31 <pattern type="Registry">HKLM\SYSTEM\Setup\Source OS (*\* [*]</pattern> 32 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion [*]</pattern> 33 </objectSet> 34 </include> 35 <locationModify script="MigXmlHelper.RelativeMove('HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion','HKLM\SYSTEM\Setup\Source OS (Updated on %MIG_SCENARIO_DATETIME%)')"> 36 <objectSet> 37 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion [*]</pattern> 38 </objectSet> 39 </locationModify> 40 </rules> 41 42 <rules> 43 <conditions> 44 <condition>MigXmlHelper.IsMigrationScope("FrameworkFull")</condition> 45 </conditions> 46 47 <excludeAttributes attributes="Security"> 48 <objectSet> 49 <pattern type="File">* [*]</pattern> 50 <pattern type="Registry">* [*]</pattern> 51 </objectSet> 52 </excludeAttributes> 53 54 <include> 55 <objectSet> 56 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\SQMClient [MachineId]</pattern> 57 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\SQMClient\$ [StudyId]</pattern> 58 </objectSet> 59 </include> 60 61 <include> 62 <objectSet> 63 <pattern type="Registry">HKLM\SYSTEM\Setup\Upgrade\* [*]</pattern> 64 </objectSet> 65 </include> 66 67 <include> 68 <objectSet> 69 <pattern type="Registry">HKLM\SYSTEM\Setup\Source OS (*\* [*]</pattern> 70 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion [*]</pattern> 71 </objectSet> 72 </include> 73 <locationModify script="MigXmlHelper.RelativeMove('HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion','HKLM\SYSTEM\Setup\Source OS (Updated on %MIG_SCENARIO_DATETIME%)')"> 74 <objectSet> 75 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion [*]</pattern> 76 </objectSet> 77 </locationModify> 78 79 <rules> 80 <conditions operation="AND"> 81 <condition>MigXmlHelper.IsOSLaterThan("NT","6.2.0.0")</condition> 82 </conditions> 83 <include> 84 <objectSet> 85 <pattern type="Registry">HKU\.DEFAULT\Software\Microsoft\IdentityCRL\StoredIdentities\*[*]</pattern> 86 <pattern type="Registry">HKU\.DEFAULT\Software\Microsoft\IdentityCRL\DPAPICloudKeyVersionMappings\*[*]</pattern> 87 </objectSet> 88 </include> 89 </rules> 90 91 <include> 92 <objectSet> 93 <pattern type="File">%ProgramData%\Microsoft\Windows\SystemData\S-$\ReadOnly\LockScreen\*[*]</pattern> 94 <pattern type="File">%ProgramData%\Microsoft\Windows\SystemData\S-$\ReadOnly\PicturePassword\*[*]</pattern> 95 <pattern type="File">%ProgramData%\Microsoft\Vault\*[*]</pattern> 96 <pattern type="File">%System32%\config\systemprofile\AppData\Local\Microsoft\Vault\*[*]</pattern> 97 <pattern type="File">%System32%\config\systemprofile\AppData\Roaming\Microsoft\Vault\*[*]</pattern> 98 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\PINLogonEnrollment\*[*]</pattern> 99 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\PicturePassword\*[*]</pattern> 100 </objectSet> 101 </include> 102 103 <includeAttributes attributes="Security"> 104 <objectSet> 105 <pattern type="File">%ProgramData%\Microsoft\Windows\SystemData\S-$\ReadOnly\LockScreen\*[*]</pattern> 106 <pattern type="File">%ProgramData%\Microsoft\Windows\SystemData\S-$\ReadOnly\PicturePassword\*[*]</pattern> 107 <pattern type="File">%ProgramData%\Microsoft\Vault\*[*]</pattern> 108 <pattern type="File">%System32%\config\systemprofile\AppData\Local\Microsoft\Vault\*[*]</pattern> 109 <pattern type="File">%System32%\config\systemprofile\AppData\Roaming\Microsoft\Vault\*[*]</pattern> 110 </objectSet> 111 </includeAttributes> 112 113 <include> 114 <objectSet> 115 <pattern type="File">%WINDIR%\Security [edb*.log]</pattern> 116 <pattern type="File">%WINDIR%\Security [edb.chk]</pattern> 117 <pattern type="File">%WINDIR%\Security\Database [secedit.sdb]</pattern> 118 <pattern type="Registry">HKLM\SYSTEM\MountedDevices [*]</pattern> 119 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\* [*]</pattern> 120 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters [HostName]</pattern> 121 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters [NV HostName]</pattern> 122 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters [Domain]</pattern> 123 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters [NV Domain]</pattern> 124 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName\* [*]</pattern> 125 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Netlogon [Start]</pattern> 126 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\FVEAutoUnlock\* [*]</pattern> 127 </objectSet> 128 </include> 129 <exclude> 130 <objectSet> 131 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa [FIPSAlgorithmPolicy]</pattern> 132 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa [Security Packages]</pattern> 133 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\OSConfig\* [*]</pattern> 134 </objectSet> 135 </exclude> 136 137 <include> 138 <objectSet> 139 <pattern type="File">%WINDIR%\debug [sam.log]</pattern> 140 <pattern type="Registry">HKLM\SECURITY\Policy\PolAcDmS []</pattern> 141 142 <pattern type="File">%WINDIR%\system32\Microsoft\Protect\*[*]</pattern> 143 <pattern type="File">%WINDIR%\system32\Microsoft\Protect\*\User[*]</pattern> 144 145 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\* [*]</pattern> 146 147 </objectSet> 148 </include> 149 150 <include> 151 <objectSet> 152 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [*]</pattern> 153 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Configuration Manager [RegDebugBreaksEnabled]</pattern> 154 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography[MachineGuid]</pattern> 155 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\*[*]</pattern> 156 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\*[*]</pattern> 157 <pattern type="File">%SYSTEM32%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern> 158 <pattern type="File">%SYSTEM32%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern> 159 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\RSA\*[*]</pattern> 160 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\DSS\*[*]</pattern> 161 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\SystemKeys\*[*]</pattern> 162 163 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\Keys[*]</pattern> 164 <pattern type="File">%SYSTEMROOT%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern> 165 <pattern type="File">%SYSTEMROOT%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern> 166 167 </objectSet> 168 </include> 169 <exclude> 170 <objectSet> 171 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [VerifierDlls]</pattern> 172 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [GlobalFlag]</pattern> 173 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [VerifierFlags]</pattern> 174 <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [PageHeapFlags]</pattern> 175 </objectSet> 176 </exclude> 177 178 <merge script="MigXmlHelper.SourcePriority()"> 179 <objectSet> 180 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography[MachineGuid]</pattern> 181 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\*[*]</pattern> 182 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\*[*]</pattern> 183 <pattern type="File">%SYSTEM32%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern> 184 <pattern type="File">%SYSTEM32%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern> 185 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern> 186 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern> 187 188 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\Keys[*]</pattern> 189 <pattern type="File">%SYSTEMROOT%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern> 190 <pattern type="File">%SYSTEMROOT%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern> 191 192 </objectSet> 193 </merge> 194 195 <contentModify script="MigXmlHelper.KeepExisting('Security','FileAttrib:HSRI')"> 196 <objectSet> 197 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\RSA\MachineKeys</pattern> 198 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\DSS\MachineKeys</pattern> 199 </objectSet> 200 </contentModify> 201 202 <includeAttributes attributes="Security"> 203 <objectSet> 204 205 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography[MachineGuid]</pattern> 206 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\*[*]</pattern> 207 <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\*[*]</pattern> 208 <pattern type="File">%SYSTEM32%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern> 209 <pattern type="File">%SYSTEM32%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern> 210 211 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\Keys[*]</pattern> 212 <pattern type="File">%SYSTEMROOT%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern> 213 <pattern type="File">%SYSTEMROOT%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern> 214 215 <pattern type="File">%WINDIR%\system32\Microsoft\Protect\Recovery[*]</pattern> 216 </objectSet> 217 </includeAttributes> 218 219 <includeAttributes attributes="Security,CopyInheritedDaclEntries"> 220 <objectSet> 221 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern> 222 <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern> 223 </objectSet> 224 </includeAttributes> 225 226 <locationModify script="MigXmlHelper.ExactMove('HKLM\System\Setup\SetupCl\PendingRequest [SidAccountDomainNew]')"> 227 <objectSet> 228 <pattern type="Registry">HKLM\SECURITY\Policy\PolAcDmS []</pattern> 229 </objectSet> 230 </locationModify> 231 232 233 <destinationCleanup> 234 <objectSet> 235 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Audit\* [*]</pattern> 236 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Credssp\* [*]</pattern> 237 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Data\* [*]</pattern> 238 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy\* [*]</pattern> 239 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\GBG\* [*]</pattern> 240 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\JD\* [*]</pattern> 241 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\* [*]</pattern> 242 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\* [*]</pattern> 243 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Skew1\* [*]</pattern> 244 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\SSO\* [*]</pattern> 245 <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\* [*]</pattern> 246 247 <pattern type="File">%WINDIR%\Security [edb*.log]</pattern> 248 <pattern type="File">%WINDIR%\Security [edb.chk]</pattern> 249 <pattern type="File">%WINDIR%\Security\Database [secedit.sdb]</pattern> 250 251 <pattern type="File">%WINDIR%\debug [sam.log]</pattern> 252 253 <pattern type="File">%WINDIR%\system32\Microsoft\Protect\*[*]</pattern> 254 <pattern type="File">%WINDIR%\system32\Microsoft\Protect\*\User[*]</pattern> 255 </objectSet> 256 </destinationCleanup> 257 258 </rules> 259 260 </role> 261 </component> 262 263 </migration> 264