KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT SERVER-PC 10.0 build 26200 (Windows 11) AMD64
User : ServerPC ( 0)
PHP Version : 8.2.12
Disable Function : NONE
Directory :  C:/Windows/security/database/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : C:/Windows/security/database/secedit.sdb
gE�ͫ� [�Ў45
zEP#}y#}aN#}yP��$#}Y
�e ��������45
zEof�7#}y#�b�#}ygE�ͫ� [�Ў45
zEP#}y#}aN#}yP��$#}Y
�e ��������45
zEof�7#}y#�b�#}ys���I����Y���I�#���
��e�9~;�#(�v
3bL�m�m9��
(
���� P��MSysObjects
���	�#�*��
ObjidTable
���	�#�*��Type
���	�#�*��Id
������
���Name
���	�#�*��ColtypOrPgnoFDP
���	�#�*��
SpaceUsage
���	�#�*��Flags
���	�#�*��
PagesOrLocale
������	���Stats
���	�#�*��RootFlag
������
���
TemplateTable
���		�#	�*��RecordOffset
������	���DefaultValue
������	���	KeyFldIDs
������	���	VarSegMac
������	���ConditionalColumns
���
	�#
�*��
LCMapFlags
���	�#�*��KeyMost
������	���TupleLimits
������	���Version
������	���SortID
������CallbackData
������CallbackDependencies
������
SeparateLV
������
SpaceHints
������SpaceDeferredLVHints
������
LocaleName
���	�#�*��
LVChunkMax
���� P��MSysObjectsShadow
���	�#�*��
ObjidTable
���	�#�*��Type
���	�#�*��Id
������
���Name
���	�#�*��ColtypOrPgnoFDP
���	�#�*��
SpaceUsage
���	�#�*��Flags
���	�#�*��
PagesOrLocale
������	���Stats
���	�#�*��RootFlag
������
���
TemplateTable
���		�#	�*��RecordOffset
������	���DefaultValue
������	���	KeyFldIDs
������	���	VarSegMac
������	���ConditionalColumns
���
���*��
LCMapFlags
���	�#�*��KeyMost
������	���TupleLimits
������	���Version7�+;J+B�*9V*9*<�)=d)5�(4�';+>�*@�)<()A�(9y(>;(C�'6�'8V'>'B�&:^&D&:�%:�%Db%<&%6�$7�$;~$B�#9�#9Q#<#=�"5'"4� >�&;C$>$@�"<\"A�!9�!>o!C,!6� �
�
�
�3~S�#�
�2o�6�#(
��R�P��HE(��MSYSOBJECTS�����OBJIDTABLE�����TYPE�����ID�����NAME������COLTYPORPGNOFDP�����SPACEUSAGE�����FLAGS�����PAGESORLOCALE�����STATS������ROOTFLAG�����TEMPLATETABLE������RECORDOFFSET���	��DEFAULTVALUE������KEYFLDIDS������VARSEGMAC������CONDITIONALCOLUMNS������LCMAPFLAGS���
��KEYMOST�����TUPLELIMITS������VERSION������SORTID������CALLBACKDATA�����CALLBACKDEPENDENCIES�����SEPARATELV�����SPACEHINTS�����SPACEDEFERREDLVHINTS�����LOCALENAME�����LVCHUNKMAX�����MSYSOBJECTSSHADOW�����OBJIDTABLE�����TYPE�����ID�����NAME������COLTYPORPGNOFDP�����SPACEUSAGE�����FLAGS�����PAGESORLOCALE�����STATS������ROOTFLAG�����TEMPLATETABLE������RECORDOFFSET���	��DEFAULTVALUE������KEYFLDIDS������VARSEGMAC������CONDITIONALCOLUMNS������LCMAPFLAGS���
��KEYMOST�����TUPLELIMITS������VERSION������SORTID������CALLBACKDATA�����CALLBACKDEPENDENCIES�����SEPARATELV�����SPACEHINTS�����SPACEDEFERREDLVHINTS�����LOCALENAME�����LVCHUNKMAX�����ID�����ID�����NAME�����ROOTOBJECTS�����MSYSOBJIDS�����OBJID�����OBJIDTABLE�����TYPE�����PRIMARY�����MSYSLOCALES���
��KEY������TYPE�����IVALUE�����KEYPRIMARY�����SMTBLVERSION�����VERSION�����ANALYZETIMESTAMP������CONFIGTIMESTAMP������LASTUSEDMERGETABLE�����PROFILEDESCRIPTION����	�SMTBLSECTION�	��	�	�SECTIONID�	���	�NAME�	����	�SECTIONKEY�	��	�
�	��
#+4+"�*�*%�* �)+�*+W*(/*)*%�)#�)b)F))$") )�(#�(�(#�(%( �&"&W$$�&&z%;%#�$#t'-�'�&#Q'!Y%%�%&%#4$�$#�'#�'#Y& |&"�%t$�$%�%+.&(�$-$'%�&*
$$](@(
( �"""W $�"&z!;!#� #t#-�#�"#Q#!Y!%�!&!#4 � #�##�##Y" |""�!t � %�!+."(� -$#4:1/
���$c(	

.4	�~��c(
��׆\|�2RVC(�MSYSOBJECTS����MSYSOBJECTSSHADOW����MSYSOBJIDS����MSYSLOCALES����SMTBLVERSION����SMTBLSECTION�	��	�SMTBLSCP����SMTBLSMP�
��

�SMTBLSCP2����SMTBLGPO����SMTBLTATTOO���� 8!� � !� !R $. o ��,�q�c�
ߧ=~�q�c���E�;g;g7�<������ P��MSysObjects
	�#�*��
ObjidTable	�#�*��Type	�#�*��Id	�#�*��ColtypOrPgnoFDP	�#�*��
SpaceUsage	�#�*��Flags	�#�*��
PagesOrLocale	�#�*��RootFlag		�#	�*��RecordOffset
	�#
�*��
LCMapFlags	�#�*��KeyMost	�#�*��
LVChunkMax���
���Name���	���Stats���
���
TemplateTable���	���DefaultValue���	���	KeyFldIDs���	���	VarSegMac���	���ConditionalColumns���	���TupleLimits���	���Version���	���SortID���CallbackData���CallbackDependencies���
SeparateLV���
SpaceHints���SpaceDeferredLVHints���
LocaleName	��� P��MSysObjectsShadow	��	�#�*��
ObjidTable	��	�#�*��Type	��	�#�*��Id	��	�#�*��ColtypOrPgnoFDP	��	�#�*��
SpaceUsage	��	�#�*��Flags	��	�#�*��
PagesOrLocale	��	�#�*��RootFlag	��		�#	�*��RecordOffset	��
	�#
�*��
LCMapFlags	��	�#�*��KeyMost	�����
���Name	�����	���Stats	�����
���
TemplateTable	�����	���DefaultValue	�����	���	KeyFldIDs	�����	���	VarSegMac	�����	���ConditionalColumns	�����	���TupleLimits	�����	���Version	�����	���SortID	�����CallbackData	�����CallbackDependencies	�����
SeparateLV	�����
SpaceHints	��	�#�*��
LVChunkMax�
�'P1***�����Id@en-US�
�'P***�����Name�@en-US�
�'
P	***�����RootObjects�@en-US8_�8'�B�:��4w�5B�9	�@ɩ7��7[�:!�;�3��2��<��9H�<�>Χ:��?U�7�<�A��4m�67�<��@��]��Z+�Xӫ1��;O�1�1�;��3�,S�-&�1��8��/��/_�2-�3��+Ϣ*��4q�1@�4�6֡2��7m�/>�4
�9Ѡ,��.w�3D�7
�
a3��JJ

2����
���SpaceDeferredLVHints���
LocaleName�
�'P1***�����Id@en-US	��� d��
MSysObjids	����objid	����
objidTable	����type	��
�'d/***�����primary@en-US	��� \��MSysLocales	�����	��Key	��	�#*��Type	��	�#0*����
iValue	��
�'\/@***��

�
�
�KeyPrimary�@en-US	��� Z�SmTblVersion	��	�#*��Version	�����	�AnalyzeTimeStamp	�����	�ConfigTimeStamp	��	�#*��LastUsedMergeTable	����ProfileDescription		��	� 		 P
�SmTblSection		��	�#	*��	SectionID		����	�	��Name		��	
�'		 P/***��

�
�
�SectionKey�@en-US		��

�'	
!P***�����	SecID@en-US	��� *2�SmTblScp	��	�#*��	SectionID	����Name	�������Value	��	�#*��GpoID	��
�'+2***��

�
�
�SectionKey@en-US	
��
� 

>2�SmTblSmp	
��	�#
*��	SectionID	
���
�Name	
���
����Value	
��
�'
?2***��

�
�
�SectionKey@en-US	��� R2�	SmTblScp2	��	�#*��	SectionID	����Name	�������Value	��	�#*��GpoID	��
�'S2***��

�
�
�SectionKey@en-US	��� fP
�SmTblGpo	��	�#*��GpoID	�����	��Name	�����	��DisplayName	��
�'fP/***��

�
�
�SectionKey@en-US	��
�'gP***�����GpoName�@en-US	��� p2�SmTblTattoo	
���
@d�LV:��XK�[�9��2��7N�7�_��3N�2�7��;�8��0ݫ_J�3�2�;��7s�_�3��2x�7݆;=�7�V��[U�2#�;�;��@m�=�>��D)�9u�;:�[߂16�B��6g�:��X��2r�8:�3�9΀Xv�0F�9
�
F�j�Y�&�7)^B(��SPACEUSAGEMSYSOBJECTS���	
CALLBACKDATA���	CALLBACKDEPENDENCIES���	COLTYPORPGNOFDP���	CONDITIONALCOLUMNS����	
DEFAULTVALUE����	FLAGS���	ID���	
KEYFLDIDS����	KEYMOST���	LCMAPFLAGS���
	LOCALENAME���	LVCHUNKMAX���	NAME����	OBJIDTABLE���	PAGESORLOCALE���	
RECORDOFFSET���			ROOTFLAG���

EPARATELV���
ORTID����DEFERREDLVHINTS���HINTS������
TATS����	TEMPLATETABLE����	TUPLELIMITS����	TYPE���	
VARSEGMAC����	VERSION����ID���NAME���ROOTOBJECTS����MSYSOBJECTSSHADOW����CALLBACKDATA����CALLBACKDEPENDENCIES����COLTYPORPGNOFDP����CONDITIONALCOLUMNS�����DEFAULTVALUE�����FLAGS����ID����KEYFLDIDS����
�KEYMOST����LCMAPFLAGS���
�LOCALENAME����LVCHUNKMAX���
�NAME�����OBJIDTABLE����PAGESORLOCALE����RECORDOFFSET���	�ROOTFLAG����SEPARATELV����SORTID�����SPACEDEFERREDLVHINTS����SPACEHINTS����SPACEUSAGE����STATS�����TEMPLATETABLE�����TUPLELIMITS����
�TYPE����VARSEGMAC����
�VERSION�����ID����MSYSOBJIDS����OBJID����OBJIDTABLE���
�TYPE���
�PRIMARY����MSYSLOCALES����IVALUE���	�KEY����
�TYPE����KEYPRIMARY����SMTBLVERSION����ANALYZETIMESTAMP�����CONFIGTIMESTAMP�����LASTUSEDMERGETABLE����PROFILEDESCRIPTION���
�VERSION���	�SMTBLSECTION�	��	
	�NAME�	���	�SECTIONID�	��	�SECID�	��
	�SECTIONKEY�	��	�SMTBLSCP����SECTIONID���
�NAME����VALUE����GPOID����SECTIONKEY���
�SMTBLSMP�
��

�SECTIONID�
��

�NAME�
��
�VALUE�
��
� Ҫ���!��Z� �?�v��!ߩé ����#e�G�)�)��&Ϩ'��#��!d�I�/��"�ҧ��!��z�!Y�@�"� ��"Ŧ$����!d�!C�+���!ڥ��#��$t�!S�8�!�!��!դ�� ��~�b�#?�)�&�+ţ#��(z�[�C�-�����Ƣ������i�!H�1����ޡ������q�U�9� ���ڠ��$��!w�&Q�3���pA}A}H
@B��
�SECTIONKEY�
���SMTBLSCP2����SECTIONID���
�NAME����VALUE����GPOID����SECTIONKEY����SMTBLGPO����GPOID���
�NAME�����DISPLAYNAME�����SECTIONKEY���
�GPONAME����SMTBLTATTOO����SECTIONID���
�NAME����VALUE����SECTIONKEY���LV�
��!	�� ��ҁ"��!Q�r����"/�ـ!���� E�e��� %�*���[�;;K��(���
	�#*��	SectionID��Name�����Value�
�'q2***��

�
�
�SectionKey@en-US\��,j�+?�2
�
l3t�'c'cA��
(
���� P��MSysObjects
���	�#�*��
ObjidTable
���	�#�*��Type
���	�#�*��Id
������
���Name
���	�#�*��ColtypOrPgnoFDP
���	�#�*��
SpaceUsage
���	�#�*��Flags
���	�#�*��
PagesOrLocale
������	���Stats
���	�#�*��RootFlag
������
���
TemplateTable
���		�#	�*��RecordOffset
������	���DefaultValue
������	���	KeyFldIDs
������	���	VarSegMac
������	���ConditionalColumns
���
	�#
�*��
LCMapFlags
���	�#�*��KeyMost
������	���TupleLimits
������	���Version
������	���SortID
������CallbackData
������CallbackDependencies
������
SeparateLV
������
SpaceHints
������SpaceDeferredLVHints
������
LocaleName
���	�#�*��
LVChunkMax
���� P��MSysObjectsShadow
���	�#�*��
ObjidTable
���	�#�*��Type
���	�#�*��Id
������
���Name
���	�#�*��ColtypOrPgnoFDP
���	�#�*��
SpaceUsage
���	�#�*��Flags
���	�#�*��
PagesOrLocale
������	���Stats
���	�#�*��RootFlag
������
���
TemplateTable
���		�#	�*��RecordOffset
������	���DefaultValue
������	���	KeyFldIDs
������	���	VarSegMac
������	���ConditionalColumns�
������*��
LCMapFlags
���	�#�*��KeyMost
������	���TupleLimits
������	���Version7�+;J+B�*9V*9*<�)=d)5�(4�';+>�*@�)<()A�(9y(>;(C�'6�'8V'>'B�&:^&D&:�%:�%Db%<&%6�$7�$;~$B�#9�#9Q#<#=�"5'"4� >�&;C$>$@�"<\"A�!9�!>o!C,!6� �
�
�
�9	�}}<�$#(�

�9
�//>�$#(�

@��E��g�g9�<������ P��MSysObjects
	�#�*��
ObjidTable	�#�*��Type	�#�*��Id	�#�*��ColtypOrPgnoFDP	�#�*��
SpaceUsage	�#�*��Flags	�#�*��
PagesOrLocale	�#�*��RootFlag		�#	�*��RecordOffset
	�#
�*��
LCMapFlags	�#�*��KeyMost	�#�*��
LVChunkMax���
���Name���	���Stats���
���
TemplateTable���	���DefaultValue���	���	KeyFldIDs���	���	VarSegMac���	���ConditionalColumns���	���TupleLimits���	���Version���	���SortID���CallbackData���CallbackDependencies���
SeparateLV���
SpaceHints���SpaceDeferredLVHints���
LocaleName	��� P��MSysObjectsShadow	��	�#�*��
ObjidTable	��	�#�*��Type	��	�#�*��Id	��	�#�*��ColtypOrPgnoFDP	��	�#�*��
SpaceUsage	��	�#�*��Flags	��	�#�*��
PagesOrLocale	��	�#�*��RootFlag	��		�#	�*��RecordOffset	��
	�#
�*��
LCMapFlags	��	�#�*��KeyMost	�����
���Name	�����	���Stats	�����
���
TemplateTable	�����	���DefaultValue	�����	���	KeyFldIDs	�����	���	VarSegMac	�����	���ConditionalColumns	�����	���TupleLimits	�����	���Version	�����	���SortID	�����CallbackData	�����CallbackDependencies	�����
SeparateLV	�����
SpaceHints	��	�#�*��
LVChunkMax�
�'P1***�����Id@en-US�
�'P***�����Name�@en-US�
�'
P	***�����RootObjects�@en-US8_�8'�B�:��4w�5B�9	�@ɩ7��7[�:!�;�3��2��<��9H�<�>Χ:��?U�7�<�A��4m�67�<��@��]��Z+�Xӫ1��;O�1�1�;��3�,S�-&�1��8��/��/_�2-�3��+Ϣ*��4q�1@�4�6֡2��7m�/>�4
�9Ѡ,��.w�3D�7
�
�3���J�J�
2����
���SpaceDeferredLVHints���
LocaleName�
�'P1***�����Id@en-US	��� d��
MSysObjids	����objid	����
objidTable	����type	��
�'d/***�����primary@en-US	��� \��MSysLocales	�����	��Key	��	�#*��Type	��	�#0*����
iValue	��
�'\/@***��

�
�
�KeyPrimary�@en-US	��� Z�SmTblVersion	��	�#*��Version	�����	�AnalyzeTimeStamp	�����	�ConfigTimeStamp	��	�#*��LastUsedMergeTable	����ProfileDescription		��	� 		 P
�SmTblSection		��	�#	*��	SectionID		����	�	��Name		��	
�'		 P/***��

�
�
�SectionKey�@en-US		��

�'	
!P***�����	SecID@en-US	��� *2�SmTblScp	��	�#*��	SectionID	����Name	�������Value	��	�#*��GpoID	��
�'+2***��

�
�
�SectionKey@en-US	
��
� 

>2�SmTblSmp	
��	�#
*��	SectionID	
���
�Name	
���
����Value	
��
�'
?2***��

�
�
�SectionKey@en-US	��� R2�	SmTblScp2	��	�#*��	SectionID	����Name	�������Value	��	�#*��GpoID	��
�'S2***��

�
�
�SectionKey@en-US	��� fP
�SmTblGpo	��	�#*��GpoID	�����	��Name	�����	��DisplayName	��
�'fP/***��

�
�
�SectionKey@en-US	��
�'gP***�����GpoName�@en-US	��� p2�SmTblTattoo	
���
@d�LV:��XK�[�9��2��7N�7�_��3N�2�7��;�8��0ݫ_J�3�2�;��7s�_�3��2x�7݆;=�7�V��[U�2#�;�;��@m�=�>��D)�9u�;:�[߂16�B��6g�:��X��2r�8:�3�9΀Xv�0F�9
�
���� ��(��������			�

	���


�
�������
!�!b!A! !�!�!�!�!{!Z!9!!�!�!�!�!R!1!s!��ic�l�ll�7�7.Sch	ema\	Inte	rnal	\Maj	or�
�..Schema\Internal\Major7.Sch	ema\	Inte	rnal	\Min	or�
�..Schema\Internal\Minor7.Sch	ema\	Inte	rnal	\Upd	ate�
�0.Schema\Internal\Update7.Sch	ema\	Exte	rnal	\Maj	or�
�..Schema\External\Major7.Sch	ema\	Exte	rnal	\Min	or�
�..Schema\External\Minor7.Sch	ema\	Exte	rnal	\Upd	ate�
�0.Schema\External\Update7MSys	Loca	lesC	onsi	sten	t�
�,MSysLocalesConsistentq�u�s�suQs�sk��M]Y�x[D���	���?��29)Y\���E)Y\�@Security applied to upgraded workstations | Lߨf��	�
��
�%syst	em a	cces	s�
�?�system access%priv	ileg	e ri	ghts�
@� privilege rights%grou	p me	mber	ship�
@� group membership%acco	unt 	prof	iles�
@� account profiles%regi	stry	 key	s�
@�registry keys%file	 sec	urit	y�
@�file securityds s	ecur	ity�
@�ds securitysyst	em l	og�
 @�system logsecu	rity	 log�
"@�security log%appl	icat	ion 	log�
$@�application logeven	t au	dit�
&@�event audituser	 lis	t�
(@�user list%kerb	eros	 pol	icy�
*@�kerberos policy7serv	ice 	gene	ral 	sett	ing�
,@�.service general setting%regi	stry	 val	ues�
.@�registry values?bAEPv�E�TkPbV`T�V�P�CCT�V��v�
��C� 	��syst	em a	cces	s	�priv	ileg	e ri	ghts	�grou	p me	mber	ship	�acco	unt 	prof	iles	�regi	stry	 key	s	�file	 sec	urit	y	�ds s	ecur	ity	� syst	em l	og	�"secu	rity	 log	�$appl	icat	ion 	log	�&even	t au	dit	�(user	 lis	t	�*kerb	eros	 pol	icy	�,serv	ice 	gene	ral 	sett	ing	�.regi	stry	 val	ues0�BS0#'�'�0�'~'W'000�0�0p0@0�Y�}�����Q��!��C�*��QA�iS
f�(�M@"A+F4GBHKAE F)GKAE F)G0H<Ikup0
�?�@-@enableguestaccount0
�?�@-@enableadminaccount0
 @�@/@restrictguestaccess1
"@�@/@restrictguestaccess1
$@�@/@restrictguestaccess1
.@�@�@machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon41
.@�@�@machine\system\currentcontrolset\control\lsa\disabledomaincreds40	
.@�@�@machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous40

.@�@�@machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled40
.@�@w@machine\system\currentcontrolset\control\lsa\forceguest40
.@�@�@machine\system\currentcontrolset\control\lsa\restrictanonymoussam41

.@�@�@machine\system\currentcontrolset\control\securepipeservers\winreg\allowedpaths\machine�W&��%Go%O %E�$G�$OE$E$G�#�>&��%�%�I$��#��"v
�
�
�
�
�
|P�߅/&/&9��E,>B@��lsaa	nony	mous	name	look	up7��enab	legu	esta	ccou	nt7��enab	lead	mina	ccou	nt7� rest	rict	gues	tacc	ess7�"rest	rict	gues	tacc	ess7�$rest	rict	gues	tacc	ess��.mach	ine\	soft	ware	\mic	roso	ft\w	indo	ws\c	urre	ntve	rsio	n\po	lici	es\s	yste	m\un	dock	with	outl	ogon��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\dis	able	doma	incr	eds��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\eve	ryon	einc	lude	sano	nymo	us	��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\fip	salg	orit	hmpo	licy	\ena	bled
��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\for	cegu	est��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\res	tric	tano	nymo	ussa	m��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\sec	urep	ipes	erve	rs\w	inre	g\al	lowe	dpat	hs\m	achi	ne
J�.mach	ine\	syD\c	urre	ntco	ntro	lset	\con	trol	\sec	urep	ipes	erve	rs\w	inre	g\al	lowe	dexa	ctpa	ths\	mach	ine�.mach	ine\	soft	ware	\mic	roso	ft\w	indo	ws\c	urre	ntve	rsio	n\po	lici	es\s	yste	m\un	dock	with	outl	ogon��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\dis	able	doma	incr	eds��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\eve	ryon	einc	lude	sano	nymo	us	��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\fip	salg	orit	hmpo	licy	\ena	bled
��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\for	cegu	est��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\res	tric	tano	nymo	ussa	m��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\sec	urep	ipes	erve	rs\w	inre	g\al	lowe	dpat	hs\m	achi	ne
@��lsaa	nony	mous	name	look	up7��enab	legu	esta	ccou	nt7��enab	lead	mina	ccou	nt7� rest	rict	gues	tacc	ess7�"rest	rict	gues	tacc	ess7�$rest	rict	gues	tacc	ess��.mach	ine\	soft	ware	\mic	roso	ft\w	indo	ws\c	urre	ntve	rsio	n\po	lici	es\s	yste	m\un	dock	with	outl	ogon��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\lsa	\dis	able	doma	incr	eds�/&��%��$=�$48$Fl$=�#4�#F�#��%�e&��$�X$��#��"�T"��!=J!=
!=� F e%k�L�-yR�<���>7System\CurrentControlSet\Control\Print\PrintersSystem\CurrentControlSet\Services\EventlogSoftware\Microsoft\OLAP ServerSoftware\Microsoft\Windows NT\CurrentVersion\PrintSoftware\Microsoft\Windows NT\CurrentVersion\WindowsSystem\CurrentControlSet\Control\ContentIndexSystem\CurrentControlSet\Control\Terminal ServerSystem\CurrentControlSet\Control\Terminal Server\UserConfigSystem\CurrentControlSet\Control\Terminal Server\DefaultUserConfigurationSoftware\Microsoft\Windows NT\CurrentVersion\PerflibSystem\CurrentControlSet\Services\SysmonLogV7System\CurrentControlSet\Control\Print\PrintersSystem\CurrentControlSet\Services\EventlogSoftware\Microsoft\OLAP ServerSoftware\Microsoft\Windows NT\CurrentVersion\PrintSoftware\Microsoft\Windows NT\CurrentVersion\WindowsSystem\CurrentControlSet\Control\ContentIndexSystem\CurrentControlSet\Control\Terminal ServerSystem\CurrentControlSet\Control\Terminal Server\UserConfigSystem\CurrentControlSet\Control\Terminal Server\DefaultUserConfigurationSoftware\Microsoft\Windows NT\CurrentVersion\PerflibSystem\CurrentControlSet\Services\SysmonLogV`~$�(pD{�gf���E
�(
�?�@5@lsaanonymousnamelookup0
�?�@-@enableguestaccount0
�?�@-@enableadminaccount0
 @�@/@restrictguestaccess1
"@�@/@restrictguestaccess1
$@�@/@restrictguestaccess1
.@�@�@machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon41
.@�@�@machine\system\currentcontrolset\control\lsa\disabledomaincreds40	
.@�@�@machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous40

.@�@�@machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled40
.@�@w@machine\system\currentcontrolset\control\lsa\forceguest40
.@�@�@machine\system\currentcontrolset\control\lsa\restrictanonymoussam41

.@�@�@machine\system\currentcontrolset\control\securepipeservers\winreg\allowedpaths\machine
.@�@�@machine\system\currentcontrolset\control\securepipeservers\winreg\allowedexactpaths\machine7System\CurrentControlSet\Control\ProductOptionsSystem\CurrentControlSet\Control\Server ApplicationsSoftware\Microsoft\Windows NT\CurrentVersion������������ͣ���w����Fc�F�FנD��CP�L��f>vll4�.c,D?JIL
8
.
$

�`
ee6�c,DJ

@�t�$TTZJ�m2B,7��enab	lead	mina	ccou	nt7��enab	legu	esta	ccou	nt@��lsaa	nony	mous	name	look	up7� rest	rict	gues	tacc	ess7�"rest	rict	gues	tacc	ess7�$rest	rict	gues	tacc	ess��mach	ine\	syst	em\c	urre	ntco	ntro	lset	\ser	vice	s\sy	smon	log\	log 	quer	iesp	erfl	ogs�p	rogr	am f	iles	\com	mon 	file	s\sp	eech	engi	nes\	micr	osof	t\tt	sKp	rogr	amda	ta\m	icro	soft	\win	dows	\drm]p	rogr	amda	ta\m	icro	soft	\win	dows	\drm	\cac	he"Bs	ervi	cepr	ofil	es\l	ocal	serv	ice"Ks	ervi	cepr	ofil	es\n	etwo	rkse	rvic	e"'s	yste	m32\	wbem	\mof"'s	yste	m32\	appm	gmt"9s	yste	m32\	wind	ows 	medi	a"'s	yswo	w64\	expo	rt 2de	faul	t!2nt	user	.dat"4a	m#4e	curi	ty$4o	ftwa	re%@&�,brow	ser'�,dmse	rver(�,ntms	svc)�,sams	s*%�,sysm	onlo	g+�,clip	srv,�,netd	de-%�,netd	deds	dm.R�seas	sign	prim	aryt	oken	priv	ileg	e/��.mach	ine\	soft	ware	\mic	roso	ft\w	indo	ws\c	urre	ntve	rsio	n\po	lici	es\s	yste	m\un	dock	with	outl	ogon�c:\w	indo	ws\r	epai	r\sy	stem.�seau	ditp	rivi	lege07�seba	tchl	ogon	righ	t1@�sech	ange	noti	fypr	ivil	ege2@�secr	eate	glob	alpr	ivil	ege3R�secr	eate	symb	olic	link	priv	ileg	e4@�seim	pers	onat	epri	vile	ge5R�sein	crea	seba	sepr	iori	typr	ivil	ege6@�sein	crea	sequ	otap	rivi	lege7R�sein	crea	sewo	rkin	gset	priv	ileg	e8@�sema	nage	volu	mepr	ivil	ege9R�sere	mote	inte	ract	ivel	ogon	righ	t:@�sesy	stem	prof	ilep	rivi	lege;@�sesy	stem	time	priv	ileg	e<7�seti	mezo	nepr	ivil	ege=7�seun	dock	priv	ileg	e>7�sese	rvic	elog	onri	ght?	ws\r	epai	r\sa	m#4e	curi	ty$	ws\r	epai	r\se	curi	ty$4o	ftwa	re%	ws\r	epai	r\so	ftwa	re%@&c:\w	indo	ws\r	epai	r\sy	stem&�,brow	ser'�,dmse	rver(�,ntms	svc)�,sams	s*%�,sysm	onlo	g+�,clip	srv,�,netd	de-%�,netd	deds	dm.R�seas	sign	prim	aryt	oken	priv	ileg	e/��&+�%"�%"�%+k&"I&"�%"'&"t%=:!=� =� /��Ap�/�/A�S��Ju�l�O�2�����e�S���4���w!=�+=�+Fp+F*+=0,X�*F�*X4*F�)X�)FP)X�(F�(Fl(=/(4�'X�&Fz == = @��+�H�H�AF
��
(
.@�@�@machine\system\currentcontrolset\control\session manager\kernel\obcaseinsensitive41
.@�@�@machine\system\currentcontrolset\control\session manager\protectionmode41
.@�@�@machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess41
.@�@�@machine\system\currentcontrolset\services\ldap\ldapclientintegrity41
.@�@�@machine\system\currentcontrolset\services\ldap\ldapclientconfidentiality41
.@�@�@machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal41
.@�@�@machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes7
@�@�@machine\system\currentcontrolset\services\sysmonlog\log queries1D:(A;CI;GA;;;NS)(A;CI;CCDCLCSWSDRC;;;LU)
@�@@c:\perflogs1D:P(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OI;0x1200af;;;LU)�/��?��y��������U����ˠ���<�	*vEG
=w	(
@�@{@c:\program files\common files\speechengines\microsoft\tts1D:P(A;CIOI;GRGX;;;BU)(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)
@�@Q@c:\programdata\microsoft\windows\drm1D:P(D;CIOI;GA;;;BG)(D;CIOI;GA;;;LG)(A;;0x1e01ff;;;WD)(A;OICIIO;GA;;;WD)(A;;GA;;;SY)S:(ML;;0x1;;;LW)
@�@]@c:\programdata\microsoft\windows\drm\cache1D:P(D;CIOI;GA;;;BG)(D;CIOI;GA;;;LG)(A;;0x1e01ff;;;WD)(A;OICIIO;GA;;;WD)(A;;GA;;;SY)S:(ML;;0x1;;;LW)
@�@W@c:\windows\serviceprofiles\localservice1D:P(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;LS)
@�@[@c:\windows\serviceprofiles\networkservice1D:P(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;NS)
@�@A@c:\windows\system32\wbem\mof1D:P(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)
@�@?@c:\windows\system32\appmgmt1D:AR
@�@K@c:\windows\system32\windows media1D:P(A;CIOI;GRGX;;;BU)(A;CIOI;GRGWGXSD;;;NS)(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)]�`���=��c����<Q�0!��gL��6|I!FH
+	�
( 
@�@=@c:\windows\syswow64\export1D:P(A;CIOI;GRGX;;;BU)(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)!
@�@;@c:\windows\repair\default1D:P(A;;GA;;;BA)(A;;GA;;;SY)"
@�@A@c:\windows\repair\ntuser.dat1D:P(A;;GA;;;BA)(A;;GA;;;SY)#
@�@3@c:\windows\repair\sam1D:P(A;;GA;;;BA)(A;;GA;;;SY)$
@�@=@c:\windows\repair\security1D:P(A;;GA;;;BA)(A;;GA;;;SY)%
@�@=@c:\windows\repair\software1D:P(A;;GA;;;BA)(A;;GA;;;SY)&
@�@9@c:\windows\repair\system1D:P(A;;GA;;;BA)(A;;GA;;;SY)'
,@�@@browserD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)(
,@�@@dmserverD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)4Q�2������������m�������kE�:2GI
={()
,@�@@ntmssvcD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)*
,@�@@samssD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLO;;;IU)(A;;CCLCSWLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)+
,@�@@sysmonlogD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCRPLOCR;;;LU)S:AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD),
,@�@@clipsrvD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)-
,@�@@netddeD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD).
,@�@@netddedsdmD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)/
@�@C@seassignprimarytokenprivilege*S-1-5-19*S-1-5-20~��$٥����0o�:5�1��jc''SHK
�
(0
@�@)@seauditprivilege*S-1-5-19*S-1-5-201
@�@+@sebatchlogonright*S-1-5-32-544*S-1-5-32-551*S-1-5-32-5592
@�@7@sechangenotifyprivilege*S-1-1-0*S-1-5-19*S-1-5-20*S-1-5-32-544*S-1-5-32-545*S-1-5-32-551*S-1-5-32-5843
@�@7@secreateglobalprivilege*S-1-5-19*S-1-5-20*S-1-5-32-544*S-1-5-64
@�@C@secreatesymboliclinkprivilege*S-1-5-32-544*S-1-5-83-05
@�@5@seimpersonateprivilege*S-1-5-19*S-1-5-20*S-1-5-32-544*S-1-5-6*S-1-5-99-216390572-1995538116-3857911515-2404958512-26238872296
@�@G@seincreasebasepriorityprivilege*S-1-5-32-544*S-1-5-90-07
@�@9@seincreasequotaprivilege*S-1-5-19*S-1-5-20*S-1-5-32-5448
@�@C@seincreaseworkingsetprivilege*S-1-5-32-5459
@�@7@semanagevolumeprivilege*S-1-5-32-544:
@�@C@seremoteinteractivelogonright*S-1-5-32-544*S-1-5-32-555;
@�@9@sesystemprofileprivilege*S-1-5-32-544*S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420����+�fťrS��ä�5�����������g�c��
Ͽs@9Ds
)B,�.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\con	trol	\sec	urep	ipes	erve	rs\w	inre	g\al	lowe	dpat	hs\m	achi	nef4lsa	\dis	able	doma	incr	edsfFlsa	\eve	ryon	einc	lude	sano	nymo	us	fFlsa	\fip	salg	orit	hmpo	licy	\ena	bled
f"lsa	\for	cegu	estf=lsa	\res	tric	tano	nymo	ussa	m�+exa	ctpa	ths\	mach	ine�
j]s	sion	 man	ager	\ker	nel\	obca	sein	sens	itiv	ejBs	sion	 man	ager	\pro	tect	ionm	odeTsser	vice	s\la	nman	serv	er\p	aram	eter	s\nu	llse	ssio	npip	esT|ser	vice	s\la	nman	serv	er\p	aram	eter	s\re	stri	ctnu	llse	ssac	cessTXser	vice	s\ld	ap\l	dapc	lien	tcon	fide	ntia	lityTOser	vice	s\ld	ap\l	dapc	lien	tint	egri	tyTjser	vice	s\ne	tlog	on\p	aram	eter	s\re	quir	esig	nors	ealr��W`�`��|�{�J��eR�J�3�Eҡ*��NZ�N�<Р��
08r�
YI
�
(<
@�@3@sesystemtimeprivilege*S-1-5-19*S-1-5-32-544=
@�@/@setimezoneprivilege*S-1-5-19*S-1-5-32-544*S-1-5-32-545>
@�@+@seundockprivilege*S-1-5-32-544*S-1-5-32-545?
@�@/@seservicelogonright*S-1-5-80-0*S-1-5-83-0*S-1-5-99-0�}�v��y�u�5�IZoo�DI�J,�.mach	ine\	soft	ware	\mic	roso	ft\w	indo	ws n	t\cu	rren	tver	sion	\set	up\r	ecov	eryc	onso	le\s	etco	mman	d@� audi	tlog	rete	ntio	nper	iod
.� maxi	muml	ogsi	ze7� rest	rict	gues	tacc	ess@�"audi	tlog	rete	ntio	nper	iod.�"maxi	muml	ogsi	ze7�"rest	rict	gues	tacc	ess@�$audi	tlog	rete	ntio	nper	iod.�$maxi	muml	ogsi	ze7�$rest	rict	gues	tacc	ess�cur	ityl	evel2�3�4win	logo	n\sc	remo	veop	tion4V�\c	urre	ntve	rsio	n\po	lici	es\s	yste	m\do	ntdi	spla	ylas	tuse	rnam	e,Vq\c	urre	ntve	rsio	n\po	lici	es\s	yste	m\le	galn	otic	ecap	tion-y��Z�<��!��=�b4�bF>b=b4�aF�a=Ja4aF�`�Y����
�
(b
@�@5@*s-1-5-32-545__members*S-1-5-11*S-1-5-4�}Z�������X��C�Rb��'��
����~)�C�f9S�tsts�(��
.@�@�@machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature40`�qy�77���C,p��.mach	ine\	syst	em\c	urre	ntco	ntro	lset	\ser	vice	s\la	nman	work	stat	ion\	para	mete	rs\r	equi	rese	curi	tysi	gnat	ure�`b�[��zM��(���
	�#*��	SectionID��Name�����Value�
�'q2***��

�
�
�SectionKey@en-US\��,j�+?�2
�

Anon7 - 2021