Performance_and_Maintenance\System_Settings %windir%\system32\GroupPolicy\*[*] %windir%\system32\GroupPolicyUsers\S-1-5-32-544\*[*] %windir%\system32\GroupPolicyUsers\S-1-5-32-545\*[*] %windir%\system32\GroupPolicy\*[*] %windir%\system32\GroupPolicyUsers\S-1-5-32-544\*[*] %windir%\system32\GroupPolicyUsers\S-1-5-32-545\*[*] MigXmlHelper.IsUpgrade() %windir%\system32\GroupPolicyUsers\*[*] %ALLUSERSPROFILE% [ntuser.pol] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideStartupScripts] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideShutdownScripts] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RunStartupScriptSync] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GpNetworkStartTimeoutPolicyValue] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DenyUsersFromMachGP] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DisableBkGndGroupPolicy] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [SyncForegroundPolicy] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DisableLGPOProcessing] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DenyRsopToInteractiveUser] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RSoPGarbageCollectionInterval] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GroupPolicyMinTransferRate] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [WaitForNetwork] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [UserenvDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RsopDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [gpsvcDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [RunDiagnosticLoggingGlobal] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [RunDiagnosticLoggingGroupPolicy] HKLM\Software\Policies\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\* [*] HKLM\System\CurrentControlSet\Policies\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System [EnableLUA] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System [ConsentPromptBehaviorAdmin] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System [ConsentPromptBehaviorUser] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System [PromptOnSecureDesktop] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Servicing\* [*] HKLM\Software\Policies\Microsoft\Windows Defender [DisableAntiSpyware] %windir%\system32\GroupPolicyUsers\*[*] %ALLUSERSPROFILE% [ntuser.pol] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideStartupScripts] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideShutdownScripts] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RunStartupScriptSync] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GpNetworkStartTimeoutPolicyValue] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DenyUsersFromMachGP] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DisableBkGndGroupPolicy] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [SyncForegroundPolicy] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DisableLGPOProcessing] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DenyRsopToInteractiveUser] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RSoPGarbageCollectionInterval] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GroupPolicyMinTransferRate] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [WaitForNetwork] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [UserenvDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RsopDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [gpsvcDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [RunDiagnosticLoggingGlobal] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [RunDiagnosticLoggingGroupPolicy] HKLM\Software\Policies\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\* [*] HKLM\System\CurrentControlSet\Policies\* [*] MigXmlHelper.IsUpgrade() HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideLogonScripts] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideLogoffScripts] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RunLogonScriptSync] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GroupPolicyMinTransferRate] HKCU\Software\Policies\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\* [*] HKCU\System\CurrentControlSet\Policies\* [*] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideLogonScripts] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideLogoffScripts] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RunLogonScriptSync] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GroupPolicyMinTransferRate] HKCU\Software\Policies\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\* [*] HKCU\System\CurrentControlSet\Policies\* [*] %windir%\system32\GroupPolicy\*[*] %windir%\system32\GroupPolicyUsers\S-1-5-32-544\*[*] %windir%\system32\GroupPolicyUsers\S-1-5-32-545\*[*] MigXmlHelper.IsUpgrade() HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System [EnableLUA] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System [ConsentPromptBehaviorAdmin] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System [ConsentPromptBehaviorUser] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System [PromptOnSecureDesktop] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Servicing\* [*] HKLM\Software\Policies\Microsoft\Windows Defender [DisableAntiSpyware] %windir%\system32\GroupPolicyUsers\*[*] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideStartupScripts] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideShutdownScripts] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RunStartupScriptSync] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GpNetworkStartTimeoutPolicyValue] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DenyUsersFromMachGP] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DisableBkGndGroupPolicy] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [SyncForegroundPolicy] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DisableLGPOProcessing] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DenyRsopToInteractiveUser] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RSoPGarbageCollectionInterval] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GroupPolicyMinTransferRate] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [WaitForNetwork] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [UserenvDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RsopDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [gpsvcDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [RunDiagnosticLoggingGlobal] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [RunDiagnosticLoggingGroupPolicy] HKLM\Software\Policies\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\* [*] HKLM\System\CurrentControlSet\Policies\* [*] MigXmlHelper.IsUpgrade() HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideLogonScripts] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideLogoffScripts] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RunLogonScriptSync] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GroupPolicyMinTransferRate] HKCU\Software\Policies\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\* [*] HKCU\System\CurrentControlSet\Policies\* [*] %windir%\system32\GroupPolicy\*[*] %windir%\system32\GroupPolicyUsers\S-1-5-32-544\*[*] %windir%\system32\GroupPolicyUsers\S-1-5-32-545\*[*] MigXmlHelper.IsUpgrade() HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\* [EnableFirewall] HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\* [EnableFirewall] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Servicing\* [*] HKLM\Software\Policies\Microsoft\Windows Defender [DisableAntiSpyware] %windir%\system32\GroupPolicyUsers\*[*] %ALLUSERSPROFILE% [ntuser.pol] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideStartupScripts] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideShutdownScripts] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RunStartupScriptSync] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GpNetworkStartTimeoutPolicyValue] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DenyUsersFromMachGP] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DisableBkGndGroupPolicy] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [SyncForegroundPolicy] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DisableLGPOProcessing] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [DenyRsopToInteractiveUser] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RSoPGarbageCollectionInterval] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GroupPolicyMinTransferRate] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [WaitForNetwork] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [UserenvDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RsopDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [gpsvcDebugLevel] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [RunDiagnosticLoggingGlobal] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics [RunDiagnosticLoggingGroupPolicy] HKLM\Software\Policies\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\* [*] HKLM\System\CurrentControlSet\Policies\* [*] MigXmlHelper.IsUpgrade() HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideLogonScripts] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [HideLogoffScripts] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [RunLogonScriptSync] HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon [GroupPolicyMinTransferRate] HKCU\Software\Policies\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\* [*] HKCU\System\CurrentControlSet\Policies\* [*]