<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-DeviceManagement-PolicyDefinition-Kerberos" version="10.0.26100.8521" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\RequireKerberosArmoring">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0100000000323D000000000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="RequireFast" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\KerberosClientSupportsClaimsCompoundArmor">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0100000000323D000000000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="EnableCbacAndArmor" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\RequireStrictKDCValidation">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0200000000323D000000000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="KdcValidation" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\SetMaximumContextTokenSize">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0100000000323D0000000000373D450C0000004D6178546F6B656E53697A653F3800000053797374656D5C43757272656E74436F6E74726F6C5365745C436F6E74726F6C5C4C73615C4B65726265726F735C506172616D6574657273400C0000004D6178546F6B656E53697A654C0146E02E000047FFFFFF7F000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="System\CurrentControlSet\Control\Lsa\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="EnableMaxTokenSize" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\AllowForestSearchOrder">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0100000000323D0000000000373E4510000000466F726573745365617263684C6973743F4D000000536F6674776172655C4D6963726F736F66745C57696E646F77735C43757272656E7456657273696F6E5C506F6C69636965735C53797374656D5C4B65726265726F735C506172616D65746572734C014010000000466F726573745365617263684C697374000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="UseForestSearch" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\UPNNameHints">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="value" valueType="REG_SZ" value="" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="System\CurrentControlSet\Control\Lsa\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="UPNNameHints" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000220" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\PKInitHashAlgorithmConfiguration">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000004" />
      <registryValue name="lowrange" valueType="REG_DWORD" value="0x00000000" />
      <registryValue name="highrange" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="value" valueType="REG_DWORD" value="0x00000000" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="PKInitHashAlgorithmConfigurationEnabled" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00002020" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\PKInitHashAlgorithmSHA1">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000004" />
      <registryValue name="value" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="allowedValues" valueType="REG_SZ" value="0,1,2,3" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="PKInitSHA1" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00002020" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\PKInitHashAlgorithmSHA256">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000004" />
      <registryValue name="value" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="allowedValues" valueType="REG_SZ" value="0,1,2,3" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="PKInitSHA256" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00002020" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\PKInitHashAlgorithmSHA384">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000004" />
      <registryValue name="value" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="allowedValues" valueType="REG_SZ" value="0,1,2,3" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="PKInitSHA384" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00002020" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\PKInitHashAlgorithmSHA512">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000004" />
      <registryValue name="value" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="allowedValues" valueType="REG_SZ" value="0,1,2,3" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="PKInitSHA512" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00002020" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\CloudKerberosTicketRetrievalEnabled">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000004" />
      <registryValue name="lowrange" valueType="REG_DWORD" value="0x00000000" />
      <registryValue name="highrange" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="value" valueType="REG_DWORD" value="0x00000000" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="CloudKerberosTicketRetrievalEnabled" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00002020" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\EnableTryIPSPN">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000004" />
      <registryValue name="lowrange" valueType="REG_DWORD" value="0x00000000" />
      <registryValue name="highrange" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="value" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="TryIPSPN" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00002020" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
</assembly>