<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-TerminalServices-SessionEnvService" version="10.0.26100.8521" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="resources">
    <dependentAssembly>
      <assemblyIdentity name="Microsoft-Windows-TerminalServices-SessionEnvService.Resources" version="10.0.26100.8521" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
    </dependentAssembly>
  </dependency>
  <file name="SessEnv.dll" destinationPath="$(runtime.system32)\" sourceName="SessEnv.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>lR2pRmRnawMKD0c9wnDy4VC0fq4R0643Us8cQaTMnuk=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="rdvvmtransport.dll" destinationPath="$(runtime.system32)\" sourceName="rdvvmtransport.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>7DOYAOO/GBGO2/i1wiRo/lOeTHa3cTQM4rDFbwmnl+U=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <memberships>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories.Services" version="10.0.26100.8521" publicKeyToken="31bf3856ad364e35" typeName="Service" />
      <categoryInstance subcategory="SessionEnv">
        <serviceData name="SessionEnv" displayName="@%SystemRoot%\System32\SessEnv.dll,-1026" errorControl="normal" start="demand" type="win32ShareProcess" description="@%SystemRoot%\System32\SessEnv.dll,-1027" dependOnService="RPCSS, LanmanWorkstation" imagePath="%SystemRoot%\System32\svchost.exe -k netsvcs -p" objectName="localSystem" requiredPrivileges="SeBackupPrivilege,SeRestorePrivilege,SeTakeOwnershipPrivilege,SeImpersonatePrivilege,SeTcbPrivilege,SeAssignPrimaryTokenPrivilege,SeManageVolumePrivilege,SeCreateSymbolicLinkPrivilege,SeShutdownPrivilege" sidType="unrestricted">
          <failureActions resetPeriod="86400">
            <actions>
              <action delay="60000" type="restartService" />
              <action delay="60000" type="restartService" />
              <action delay="60000" type="none" />
            </actions>
          </failureActions>
          <securityDescriptor name="SESSIONENV_SERVICE_SDDL" />
        </serviceData>
      </categoryInstance>
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="SvcHost" />
      <categoryInstance subcategory="netsvcs">
        <serviceGroup position="last" serviceName="SessionEnv" />
      </categoryInstance>
    </categoryMembership>
  </memberships>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winlogon\Notifications\Components\SessionEnv">
      <registryValue name="ServiceName" valueType="REG_SZ" value="SessionEnv" />
      <registryValue name="Events" valueType="REG_SZ" value="StartShell,Logon,Logoff,Reconnect,Disconnect" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server">
      <registryValue name="RCDependentServices" valueType="REG_MULTI_SZ" value="&quot;SessionEnv&quot;" operationHint="append" />
      <securityDescriptor name="ADMIN_MS_WRITE_USERS_READ" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindLocalizedName\LocalizedNames">
      <registryValue name="Remote Desktop" valueType="REG_SZ" value="@%SystemRoot%\System32\SessEnv.dll,-101" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlset\Services\SessionEnv\Parameters">
      <registryValue name="ServiceDLL" valueType="REG_EXPAND_SZ" value="%SystemRoot%\system32\sessenv.dll" />
      <registryValue name="ServiceDllUnloadOnStop" valueType="REG_DWORD" value="0x00000001" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest">
      <registryValue name="SessionMonitor" valueType="REG_SZ" value="VmbusSessionMonitor" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlset\Services\SessionEnv">
      <overridable name="Start" scope="Microsoft" type="REG_DWORD" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
          <securityDescriptorDefinition name="SESSIONENV_SERVICE_SDDL" sddl="D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWP;;;S-1-5-80-446051430-1559341753-4161941529-1950928533-810483104)(A;;RPWP;;;S-1-5-80-4130899010-3337817248-2959896732-3640118089-1866760602)" operationHint="replace" />
          <securityDescriptorDefinition name="ADMIN_MS_WRITE_USERS_READ" sddl="D:(A;CI;GA;;;SY)(A;CI;GA;;;BA)(A;OICI;GRGX;;;AU)(A;CI;GA;;;S-1-5-32-577)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)(A;;GRGX;;;S-1-15-2-2)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description" value="Remote Desktop Services Session Environment Service" />
        <string id="displayName" value="Remote Desktop Services Session Environment Service" />
        <string id="displayName100" value="Session Environment Service" />
        <string id="description111" value="Session Environment Service" />
        <string id="displayName4" value="WRP_FILE_DEFAULT_SDDL" />
        <string id="displayName5" value="WRP_REGKEY_DEFAULT_SDDL" />
        <string id="description6" value="Default SDDL for Windows Resource Protected file" />
        <string id="description7" value="Default SDDL for Windows Resource Protected registry key" />
        <string id="displayName8" value="SDDL for SessionEnv service." />
        <string id="description8" value="SDDL for SessionEnv service. Allows TermService to start/stop the service" />
      </stringTable>
    </resources>
  </localization>
</assembly>
