<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-EnrollEngine" version="10.0.26100.8521" processorArchitecture="wow64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <file name="dmenrollengine.dll" destinationPath="$(runtime.system32)\" sourceName="dmenrollengine.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>4vzCUcqJ12v3scXTZsP1JGTKNvxYIfpwCIw9Gb+bJqc=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="enrollmentapi.dll" destinationPath="$(runtime.system32)\" sourceName="enrollmentapi.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>tGLMIYkR54GuloF1b9VcTYZSUJcteubYNhk1pY2ZTzQ=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <registryKeys>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{4A6F23B2-B8D6-4CBE-959A-054716902320}">
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
      <registryValue name="" valueType="REG_SZ" value="EnrollUserProfileNotifyHandler" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{4A6F23B2-B8D6-4CBE-959A-054716902320}\InProcServer32">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\dmenrollengine.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\ValidNodePaths">
      <registryValue name="NodePath1" valueType="REG_SZ" value="certificatestore" />
      <registryValue name="NodePath2" valueType="REG_SZ" value="application" />
      <registryValue name="NodePath3" valueType="REG_SZ" value="registry" />
      <registryValue name="NodePath4" valueType="REG_SZ" value="dmclient" />
      <registryValue name="NodePath5" valueType="REG_SZ" value="enterpriseappmanagement" />
      <registryValue name="NodePath6" valueType="REG_SZ" value="PolicyManager" />
      <registryValue name="NodePath7" valueType="REG_SZ" value="Policy" />
      <registryValue name="NodePath8" valueType="REG_SZ" value="PassportForWork" />
      <registryValue name="NodePath9" valueType="REG_SZ" value="EnterpriseModernAppManagement" />
      <registryValue name="NodePath10" valueType="REG_SZ" value="EnrollmentStatusTracking" />
      <registryValue name="NodePath11" valueType="REG_SZ" value="DeviceManageability" />
      <registryValue name="NodePath12" valueType="REG_SZ" value="DevicePreparation" />
      <registryValue name="NodePath13" valueType="REG_SZ" value="WindowsBackupAndRestore" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileNotification\DeviceMgmt">
      <registryValue name="" valueType="REG_SZ" value="EnrollmentNotifyHandler" />
      <registryValue name="CLSID" valueType="REG_SZ" value="{4A6F23B2-B8D6-4CBE-959A-054716902320}" />
      <registryValue name="Events" valueType="REG_DWORD" value="0x00000002" />
      <registryValue name="Flags" valueType="REG_DWORD" value="0x00000001" />
      <overridable name="Events" scope="Microsoft" type="REG_DWORD" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7909AD9E-09EE-4247-BAB9-7029D5F0A278}">
      <registryValue name="" valueType="REG_SZ" value="MDM Policy" />
      <registryValue name="DllName" valueType="REG_EXPAND_SZ" value="dmenrollengine.dll" />
      <registryValue name="ProcessGroupPolicy" valueType="REG_SZ" value="AutoEnrollMDM" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
  </registryKeys>
  <imaging>
    <sysprepInformation>
      <sysprepProvider stage="generalize">
        <sysprepOrder order="0x3E00" />
        <registryActions>
          <deleteKey path="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\OMADM\MDMDeviceID" />
        </registryActions>
        <sysprepModule methodName="SysprepGeneralize" moduleName="$(runtime.system32)\dmenrollengine.dll" />
      </sysprepProvider>
    </sysprepInformation>
  </imaging>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)(A;;GRGX;;;S-1-15-2-2)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
</assembly>