<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-DeviceManagement-PolicyDefinition-ADMXKerberos" version="10.0.26100.8521" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\ADMX_Kerberos\AlwaysSendCompoundId">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0100000000323D000000000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="AlwaysSendCompoundId" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\ADMX_Kerberos\HostToRealm">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30374F450B000000686F7374746F7265616C6D3F4F000000536F6674776172655C4D6963726F736F66745C57696E646F77735C43757272656E7456657273696F6E5C506F6C69636965735C53797374656D5C4B65726265726F735C646F6D61696E5F7265616C6D51015001000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="domain_realm_Enabled" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\ADMX_Kerberos\MitRealms">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30374F45090000004D69745265616C6D733F4C000000536F6674776172655C4D6963726F736F66745C57696E646F77735C43757272656E7456657273696F6E5C506F6C69636965735C53797374656D5C4B65726265726F735C4D69745265616C6D7351015001000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="MitRealms_Enabled" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\ADMX_Kerberos\KdcProxyDisableServerRevocationCheck">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0100000000323D000000000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="NoRevocationCheck" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\ADMX_Kerberos\StrictTarget">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0100000000323D000000000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="StrictTargetContext" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\ADMX_Kerberos\KdcProxyServer">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30374F450E0000004B646350726F78795365727665723F58000000536F6674776172655C4D6963726F736F66745C57696E646F77735C43757272656E7456657273696F6E5C506F6C69636965735C53797374656D5C4B65726265726F735C4B646350726F78795C50726F78795365727665727351015001000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="KdcProxyServer_Enabled" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\ADMX_Kerberos\ServerAcceptsCompound">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0000000000323D0100000000374E4511000000436F6D706F756E644964456E61626C65643F2F000000536F6674776172655C506F6C69636965735C4D6963726F736F66745C4E65746C6F676F6E5C506172616D65746572734011000000436F6D706F756E644964456E61626C65644C0135363D00000000000035363D01000000000035363D020000000000000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Policies\Microsoft\Netlogon\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="CompoundIdDisabled" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\ADMX_Kerberos\DevicePKInitEnabled">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0100000000323D0000000000374E4514000000446576696365504B496E69744265686176696F724014000000446576696365504B496E69744265686176696F7235363D00000000000035363D010000000000000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="DevicePKInitEnabled" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\ADMX_Kerberos\EnableTryIPSPN">
      <registryValue name="policytype" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="mergealgorithm" valueType="REG_DWORD" value="0x00000003" />
      <registryValue name="admxMetadataDevice" valueType="REG_BINARY" value="30313D0100000000323D000000000000" />
      <registryValue name="RegKeyPathRedirect" valueType="REG_SZ" value="Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" />
      <registryValue name="RegValueNameRedirect" valueType="REG_SZ" value="TryIPSPN" />
      <registryValue name="Behavior" valueType="REG_DWORD" value="0x00000060" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
</assembly>