home *** CD-ROM | disk | FTP | other *** search
/ PC World Komputer 2010 April / PCWorld0410.iso / WindowsServerTrial / server.iso / sources / offline.xml < prev    next >
Text File  |  2008-01-19  |  32KB  |  512 lines
  1. <migration urlid="http://www.microsoft.com/migration/1.0/migxmlext/offlineupgrade">
  2.   <component type="System" context="System">
  3.     <displayName>offlineUpgrade</displayName>
  4.     <paths>
  5.       <path type="File">%WINDIR%\offlineUpgrade</path>
  6.     </paths>
  7.     <role role="Settings">
  8.       <rules>
  9.  
  10.         <excludeAttributes attributes="Security">
  11.           <objectSet>
  12.             <pattern type="File">* [*]</pattern>
  13.             <pattern type="Registry">* [*]</pattern>
  14.           </objectSet>
  15.         </excludeAttributes>
  16.  
  17.         <include>
  18.           <objectSet>
  19.             <pattern type="File">%WINDIR%\Security [edb*.log]</pattern>
  20.             <pattern type="File">%WINDIR%\Security [edb.chk]</pattern>
  21.             <pattern type="File">%WINDIR%\Security\Database [secedit.sdb]</pattern>
  22.             <pattern type="Registry">HKLM\SYSTEM\MountedDevices [*]</pattern>
  23.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\* [*]</pattern>
  24.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters [HostName]</pattern>
  25.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters [NV HostName]</pattern>
  26.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters [Domain]</pattern>
  27.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters [NV Domain]</pattern>
  28.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\ComputerName\* [*]</pattern>
  29.  
  30.             <pattern type="Registry">HKLM\SYSTEM\Setup\Upgrade\* [*]</pattern>
  31.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NDIS\IfTypes\* [*]</pattern>
  32.  
  33.             <pattern type="Registry">HKLM\SYSTEM\WPA\8DEC0AF1-0341-4b93-85CD-72606C2DF94C$\* [*]</pattern>
  34.             <pattern type="File">%WINDIR%\System32 [*.C7483456-A289-439d-8115-601632D005A0]</pattern>
  35.  
  36.             <pattern type="File">%WINDIR% [WindowsUpdate.log]</pattern>
  37.             <pattern type="File">%WINDIR%\SoftwareDistribution\* [*]</pattern>
  38.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\* [*]</pattern>
  39.           </objectSet>
  40.         </include>
  41.         <exclude>
  42.           <objectSet>
  43.             <pattern type="File">%WINDIR%\SoftwareDistribution\DataStore\* [*]</pattern>
  44.             <pattern type="File">%WINDIR%\SoftwareDistribution\Download\* [*]</pattern>
  45.             <pattern type="File">%WINDIR%\SoftwareDistribution\ScanFile\* [*]</pattern>
  46.             <pattern type="File">%WINDIR%\SoftwareDistribution\SelfUpdate\* [*]</pattern>
  47.             <pattern type="File">%WINDIR%\SoftwareDistribution\WebSetup\* [*]</pattern>
  48.             <pattern type="File">%WINDIR%\SoftwareDistribution\WuRedir\* [*]</pattern>
  49.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup\* [*]</pattern>
  50.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [SetupWizardLaunchTime]</pattern>
  51.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [FirstDetectionFailureTime]</pattern>
  52.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [BalloonType]</pattern>
  53.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [BalloonTime]</pattern>
  54.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [ScheduledInstallDate]</pattern>
  55.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [ShowUnableToDetectUI]</pattern>
  56.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [OfflineDetectionPending]</pattern>
  57.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [UnableToDetectTime]</pattern>
  58.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [DownloadExpirationTime]</pattern>
  59.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [NextDetectionTime]</pattern>
  60.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results [*]</pattern>
  61.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [ResetAU]</pattern>
  62.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update [SelfUpdateTime]</pattern>
  63.           </objectSet>
  64.         </exclude>
  65.  
  66.         <include>
  67.           <objectSet>
  68.             <pattern type="File">%WINDIR%\debug [sam.log]</pattern>
  69.  
  70.             <pattern type="Registry">HKLM\SECURITY\Policy\PolAcDmS []</pattern>
  71.  
  72.             <pattern type="File">%WINDIR%\system32\Microsoft\Protect\*[*]</pattern>
  73.             <pattern type="File">%WINDIR%\system32\Microsoft\Protect\*\User[*]</pattern>
  74.  
  75.             <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\* [*]</pattern>
  76.  
  77.           </objectSet>
  78.         </include>
  79.         <exclude>
  80.           <objectSet>
  81.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa [FIPSAlgorithmPolicy]</pattern>
  82.             <pattern type="Registry">HKLM\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft Primitive Provider\UM\*[*]</pattern>
  83.             <pattern type="Registry">HKLM\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft Primitive Provider\KM\*[*]</pattern>
  84.             <pattern type="Registry">HKLM\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft Software Key Storage Provider\Properties\*</pattern>
  85.             <pattern type="Registry">HKLM\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft Software Key Storage Provider\UM\*[*]</pattern>
  86.             <pattern type="Registry">HKLM\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft SSL Protocol Provider\UM\*[*]</pattern>
  87.         <pattern type="Registry">HKLM\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft SSL Protocol Provider\KM\*[*]</pattern>
  88.           </objectSet>
  89.         </exclude>
  90.  
  91.         <include>
  92.           <objectSet>
  93.             <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [*]</pattern>
  94.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Configuration Manager [RegDebugBreaksEnabled]</pattern>
  95.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography[MachineGuid]</pattern>
  96.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\*[*]</pattern>
  97.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\*[*]</pattern>
  98.             <pattern type="File">%SYSTEM32%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern>
  99.             <pattern type="File">%SYSTEM32%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern>
  100.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\RSA\*[*]</pattern>
  101.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\DSS\*[*]</pattern>
  102.  
  103.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Cryptography\*[*]</pattern>
  104.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\Keys[*]</pattern>
  105.             <pattern type="File">%SYSTEMROOT%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern>
  106.             <pattern type="File">%SYSTEMROOT%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern>
  107.  
  108.           </objectSet>
  109.         </include>
  110.         <exclude>
  111.           <objectSet>
  112.             <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [VerifierDlls]</pattern>
  113.             <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [GlobalFlag]</pattern>
  114.             <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [VerifierFlags]</pattern>
  115.             <pattern type="Registry">HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe [PageHeapFlags]</pattern>
  116.           </objectSet>
  117.         </exclude>
  118.  
  119.         <contentModify script="MigXmlHelper.MergeMultiSzContent('Add','tspkg')">
  120.           <objectSet>
  121.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa [Security Packages]</pattern>
  122.           </objectSet>
  123.         </contentModify>
  124.  
  125.         <merge script="MigXmlHelper.FindFilePlaceByPattern('<F> (<N>).<E>')">
  126.           <objectSet>
  127.             <pattern type="File">%WINDIR% [WindowsUpdate.log]</pattern>
  128.           </objectSet>
  129.         </merge>
  130.  
  131.         <merge script="MigXmlHelper.SourcePriority()">
  132.           <objectSet>
  133.             <pattern type="Registry">HKLM\SYSTEM\WPA\8DEC0AF1-0341-4b93-85CD-72606C2DF94C$\* [*]</pattern>
  134.             <pattern type="File">%WINDIR%\System32 [*.C7483456-A289-439d-8115-601632D005A0]</pattern>
  135.  
  136.             <pattern type="File">%WINDIR%\SoftwareDistribution\* [*]</pattern>
  137.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\* [*]</pattern>
  138.  
  139.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography[MachineGuid]</pattern>
  140.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\*[*]</pattern>
  141.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\*[*]</pattern>
  142.             <pattern type="File">%SYSTEM32%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern>
  143.             <pattern type="File">%SYSTEM32%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern>
  144.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern>
  145.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern>
  146.  
  147.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Cryptography\*[*]</pattern>
  148.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\Keys[*]</pattern>
  149.             <pattern type="File">%SYSTEMROOT%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern>
  150.             <pattern type="File">%SYSTEMROOT%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern>
  151.  
  152.           </objectSet>
  153.         </merge>
  154.  
  155.         <contentModify script="MigXmlHelper.KeepExisting('Security','FileAttrib:HSRI')">
  156.           <objectSet>
  157.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\RSA\MachineKeys</pattern>
  158.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\DSS\MachineKeys</pattern>
  159.           </objectSet>
  160.         </contentModify>
  161.  
  162.         <include>
  163.           <objectSet>
  164.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation\* [*]</pattern>
  165.           </objectSet>
  166.         </include>
  167.  
  168.         <exclude>
  169.           <objectSet>
  170.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation [ActiveTimeBias]</pattern>
  171.           </objectSet>
  172.         </exclude>
  173.  
  174.         <destinationCleanup>
  175.           <objectSet>
  176.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation\* [*]</pattern>
  177.           </objectSet>
  178.         </destinationCleanup>        
  179.  
  180.         <merge script="MigXmlHelper.SourcePriority()">              
  181.           <objectSet>
  182.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation\* [*]</pattern>
  183.           </objectSet>
  184.         </merge>
  185.  
  186.         <includeAttributes attributes="Security">
  187.           <objectSet>
  188.  
  189.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography[MachineGuid]</pattern>
  190.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\*[*]</pattern>
  191.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\*[*]</pattern>
  192.             <pattern type="File">%SYSTEM32%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern>
  193.             <pattern type="File">%SYSTEM32%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern>
  194.  
  195.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Cryptography\*[*]</pattern>
  196.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\Keys[*]</pattern>
  197.             <pattern type="File">%SYSTEMROOT%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern>
  198.             <pattern type="File">%SYSTEMROOT%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Crypto\Keys[*]</pattern>
  199.  
  200.           </objectSet>
  201.         </includeAttributes>
  202.  
  203.         <includeAttributes attributes="Security,CopyInheritedDaclEntries">
  204.           <objectSet>
  205.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\RSA\MachineKeys[*]</pattern>
  206.             <pattern type="File">%ALLUSERSAPPDATA%\Microsoft\Crypto\DSS\MachineKeys[*]</pattern>
  207.           </objectSet>
  208.         </includeAttributes>
  209.  
  210.         <locationModify script="MigXmlHelper.ExactMove('HKLM\System\Setup\SetupCl [NewSid]')">
  211.           <objectSet>
  212.             <pattern type="Registry">HKLM\SECURITY\Policy\PolAcDmS []</pattern>
  213.           </objectSet>
  214.         </locationModify>
  215.  
  216.  
  217.         <destinationCleanup>
  218.           <objectSet>
  219.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Lsa\* [*]</pattern>
  220.             <pattern type="File">%WINDIR%\Security [edb*.log]</pattern>
  221.             <pattern type="File">%WINDIR%\Security [edb.chk]</pattern>
  222.             <pattern type="File">%WINDIR%\Security\Database [secedit.sdb]</pattern>
  223.  
  224.             <pattern type="File">%WINDIR%\debug [sam.log]</pattern>
  225.  
  226.             <pattern type="File">%WINDIR%\system32\Microsoft\Protect\*[*]</pattern>
  227.             <pattern type="File">%WINDIR%\system32\Microsoft\Protect\*\User[*]</pattern>
  228.  
  229.             <pattern type="Registry">HKLM\SYSTEM\WPA\8DEC0AF1-0341-4b93-85CD-72606C2DF94C$\* [*]</pattern>
  230.             <pattern type="File">%WINDIR%\System32 [*.C7483456-A289-439d-8115-601632D005A0]</pattern>
  231.  
  232.             <!-- NDIS staged upgrade cleanup -->
  233.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\$ [NetLuidIndex]</pattern>
  234.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Class\{6BDD1FC5-810F-11D0-BEC7-08002BE2092F}\$ [NetLuidIndex]</pattern>
  235.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002bE10318}\{* [*]</pattern>
  236.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a11-9b1a-11d4-9123-0050047759bc}\10\* [*]</pattern>
  237.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a11-9b1a-11d4-9123-0050047759bc}\7\* [*]</pattern>
  238.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a11-9b1a-11d4-9123-0050047759bc}\6\* [*]</pattern>
  239.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NDIS\IfTypes\$ [IfType]</pattern>
  240.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NDIS\IfTypes\$ [IfUsedNetLuidIndices]</pattern>
  241.  
  242.           </objectSet>
  243.         </destinationCleanup>
  244.  
  245.       </rules>
  246.  
  247.       <rules>
  248.         <detects>
  249.           <detect>
  250.             <condition>MigXmlHelper.IsOSEarlierThan("NT","6.0.0.0")</condition>
  251.           </detect>
  252.         </detects>
  253.  
  254.         <include>
  255.           <objectSet>
  256.             <!-- Eventlog machine specific settings (owner:MichaelM)-->
  257.             <pattern type="File">%WINDIR%\system32\config [*.evt]</pattern>
  258.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\* [*]</pattern>     
  259.           </objectSet>
  260.         </include>
  261.  
  262.     <exclude>
  263.           <objectSet>
  264.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WinRM\* [*]</pattern>
  265.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\EventLog\System\WinRM\* [*]</pattern>
  266.           </objectSet>
  267.         </exclude>
  268.  
  269.         <includeAttributes attributes="Security">
  270.           <objectSet>
  271.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\ADAM*</pattern>
  272.           </objectSet>
  273.         </includeAttributes>
  274.         
  275.         <exclude>
  276.           <objectSet>
  277.             <!-- Event log path -->
  278.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [File]</pattern>
  279.           </objectSet>
  280.         </exclude>
  281.  
  282.         <merge script="MigXmlHelper.DestinationPriority()">
  283.           <objectSet>
  284.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\* [*]</pattern>
  285.             
  286.             <!-- Svchost settings -->
  287.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog [*]</pattern>        
  288.           </objectSet>
  289.         </merge>        
  290.  
  291.         <merge script="MigXmlHelper.SourcePriority()">
  292.           <objectSet>
  293.             <!-- Event log files -->
  294.             <pattern type="File">%WINDIR%\system32\config [*.evt]</pattern>
  295.  
  296.             <!-- Classic event log settings -->
  297.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [CustomSD]</pattern>
  298.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [Isolation]</pattern>                       
  299.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [Retention]</pattern> 
  300.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [AutoBackupLogFiles]</pattern>          
  301.           </objectSet>
  302.         </merge>
  303.  
  304.         <merge script="MigXmlHelper.HigherValue()">
  305.           <objectSet>
  306.              <!-- Event log size -->
  307.              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [MaxSize]</pattern>
  308.           </objectSet>
  309.         </merge>
  310.       </rules>
  311.  
  312.       <rules>
  313.         <detects>
  314.           <detect>
  315.             <condition negation="Yes">MigXmlHelper.IsOSEarlierThan("NT","6.0.0.0")</condition>
  316.           </detect>
  317.         </detects>
  318.  
  319.         <include>
  320.           <objectSet>
  321.             <!-- Eventlog machine specific settings (owner:MichaelM)-->
  322.             <pattern type="File">%WINDIR%\system32\winevt\logs [*]</pattern>
  323.             <pattern type="File">%WINDIR%\system32\config [*.evt]</pattern>
  324.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\* [*]</pattern>
  325.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\* [*]</pattern>     
  326.           </objectSet>
  327.         </include>
  328.             
  329.         <includeAttributes attributes="Security">
  330.           <objectSet>
  331.             <pattern type="File">%WINDIR%\system32\winevt\logs [Microsoft-Windows-TerminalServices-PnPDevices%4Analytic.etl]</pattern>
  332.           </objectSet>
  333.         </includeAttributes>
  334.             
  335.         <merge script="MigXmlHelper.DestinationPriority()">
  336.           <objectSet>
  337.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\* [*]</pattern>
  338.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\* [*]</pattern>
  339.             
  340.             <!-- Svchost settings -->
  341.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog [*]</pattern>        
  342.           </objectSet>
  343.         </merge>        
  344.  
  345.         <merge script="MigXmlHelper.SourcePriority()">
  346.           <objectSet>
  347.             <!-- Event log files and paths -->
  348.             <pattern type="File">%WINDIR%\system32\winevt\logs [*]</pattern>
  349.             <pattern type="File">%WINDIR%\system32\config [*.evt]</pattern>
  350.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [File]</pattern>
  351.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [File]</pattern>
  352.  
  353.             <!-- Eventlog global settings -->
  354.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt [*]</pattern>
  355.  
  356.             <!-- Event log settings -->
  357.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [Enabled]</pattern>
  358.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [ChannelAccess]</pattern>
  359.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [Retention]</pattern>
  360.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [AutoBackupLogFiles]</pattern>
  361.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [BufferSize]</pattern>
  362.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [MinBuffers]</pattern>
  363.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [MaxBuffers]</pattern>
  364.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [Latency]</pattern>
  365.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [ClockType]</pattern>
  366.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [SidType]</pattern>
  367.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [Level]</pattern>
  368.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [KeywordsLower]</pattern>
  369.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [KeywordsUpper]</pattern>
  370.             <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\filters\* [*]</pattern>
  371.  
  372.             <!-- Classic event log settings -->
  373.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [CustomSD]</pattern>
  374.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [Isolation]</pattern>             
  375.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [Flags]</pattern>             
  376.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [Retention]</pattern> 
  377.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [AutoBackupLogFiles]</pattern>   
  378.           </objectSet>
  379.         </merge>
  380.  
  381.         <merge script="MigXmlHelper.HigherValue()">
  382.           <objectSet>
  383.              <!-- Event log size -->
  384.              <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [MaxSize]</pattern>
  385.              <pattern type="Registry">HKLM\Software\Microsoft\Windows\CurrentVersion\winevt\channels\$ [MaxSizeUpper]</pattern>
  386.              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [MaxSize]</pattern>
  387.              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\$ [MaxSizeUpper]</pattern>
  388.           </objectSet>
  389.         </merge>
  390.       </rules>
  391.  
  392.  
  393.       <rules context="System">
  394.         <include>
  395.           <objectSet>
  396.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\partmgr\Parameters [SanPolicy]</pattern>
  397.               <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\mountmgr [NoAutoMount]</pattern>
  398.           </objectSet>
  399.         </include>
  400.       </rules>
  401.  
  402.       <rules context="System">
  403.         <conditions>
  404.           <condition negation="Yes">MigXmlHelper.DoesObjectExist("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\partmgr\Parameters [SanPolicy]")</condition>
  405.         </conditions>
  406.         <contentModify script="MigXmlHelper.SetValueByTable('0,1', '1,2', '1')">
  407.           <objectSet>
  408.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\mountmgr [NoAutoMount]</pattern>
  409.           </objectSet>
  410.         </contentModify>
  411.         <locationModify script="MigXmlHelper.ExactMove('HKLM\SYSTEM\CurrentControlSet\Services\partmgr\Parameters [SanPolicy]')">
  412.           <objectSet>
  413.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\mountmgr [NoAutoMount]</pattern>
  414.               </objectSet>
  415.         </locationModify>
  416.       </rules>
  417.  
  418.     </role>
  419.   </component>
  420.  
  421.   <component type="System" context="System">
  422.     <displayName>DCRoleOfflineUpgrade</displayName>
  423.     <paths>
  424.       <path type="File">%WINDIR%\DCRoleOfflineUpgrade</path>
  425.     </paths>
  426.  
  427.     <role role="Settings">
  428.       <detects>
  429.         <detect context="System">
  430.           <condition>MigXmlHelper.DoesStringContentEqual("Registry", "HKLM\SYSTEM\CurrentControlSet\control\ProductOptions [ProductType]", "LanManNT")</condition>
  431.         </detect>
  432.       </detects>
  433.  
  434.       <environment context="System">
  435.         <variable name="DSA_WORKING_DIR">
  436.           <script>MigXmlHelper.GetStringContent("Registry","HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]")</script>
  437.         </variable>
  438.         <variable name="DATABASE_LOG_FILES_PATH">
  439.           <script>MigXmlHelper.GetStringContent("Registry","HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]")</script>
  440.         </variable>
  441.       </environment>
  442.  
  443.       <rules context="System">
  444.         <addObjects>
  445.           <object>
  446.             <location type="Registry">HKLM\System\CurrentControlSet\Services\NTDS [Start]</location>
  447.             <attributes>Dword</attributes>
  448.             <bytes>02000000</bytes>
  449.           </object>
  450.         </addObjects>
  451.  
  452.         <include>
  453.           <objectSet>
  454.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics\* [*]</pattern>
  455.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\rid\* [*]</pattern>
  456.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\* [*]</pattern>
  457.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NTDS\RID Values\* [*]</pattern>
  458.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\control\ProductOptions [ProductType]</pattern>
  459.             <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters [SysVol]</pattern>
  460.             <pattern type="Registry">HKLM\SOFTWARE\Microsoft\NTDS\* [*]</pattern>
  461.             <pattern type="Registry">HKLM\System\CurrentControlSet\Services\NTDS [Start]</pattern>
  462.           </objectSet>
  463.         </include>
  464.         
  465.       </rules>
  466.       <rules context="System">
  467.         <detects>
  468.           <detect>
  469.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemRoot%")</condition>
  470.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%ProgramFiles%")</condition>
  471.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemDrive%\Program Files")</condition>
  472.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%ProgramFiles(x86)%")</condition>
  473.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemDrive%\build")</condition>
  474.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemDrive%\InstalledRepository")</condition>
  475.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%ProfilesFolder%")</condition>
  476.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%ProgramData%")</condition>
  477.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [DSA Working Directory]","%SystemDrive%\Documents and Settings")</condition>
  478.           </detect>
  479.         </detects>
  480.         <include>
  481.           <objectSet>
  482.             <pattern type="File">%DSA_WORKING_DIR%\* [*]</pattern>
  483.           </objectSet>
  484.         </include>
  485.       </rules>
  486.  
  487.       <rules context="System">
  488.         <detects>
  489.           <detect>
  490.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemRoot%")</condition>
  491.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%ProgramFiles%")</condition>
  492.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemDrive%\Program Files")</condition>
  493.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%ProgramFiles(x86)%")</condition>
  494.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemDrive%\build")</condition>
  495.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemDrive%\InstalledRepository")</condition>
  496.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%ProfilesFolder%")</condition>
  497.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%ProgramData%")</condition>
  498.             <condition>MigXmlHelper.DoesStringContentContain("Registry", "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters [Database log files path]","%SystemDrive%\Documents and Settings")</condition>
  499.           </detect>
  500.         </detects>
  501.         <include>
  502.           <objectSet>
  503.             <pattern type="File">%DATABASE_LOG_FILES_PATH%\* [*]</pattern>
  504.           </objectSet>
  505.         </include>
  506.       </rules>
  507.  
  508.     </role>
  509.   </component>
  510.  
  511. </migration>
  512.