<?xml version="1.0" encoding="UTF-8"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-RootSecurity" version="6.1.7600.16385" processorArchitecture="x86" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <directories>
    <directory destinationPath="$(runtime.bootDrive)\" owner="true">
      <securityDescriptor name="WRP_ROOT_OFFLINE_DIR_DEFAULT_SDDL" offline="true" />
    </directory>
  </directories>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE" owner="false">
      <securityDescriptor name="defaultOfflineKeySddl" offline="true" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM" owner="false">
      <securityDescriptor name="defaultOfflineKeySddl" offline="true" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SECURITY" owner="false">
      <securityDescriptor name="defaultOfflineKeySddl" offline="true" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SAM" owner="false">
      <securityDescriptor name="defaultOfflineKeySddl" offline="true" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\COMPONENTS" owner="false">
      <securityDescriptor name="defaultOfflineKeySddl" offline="true" />
    </registryKey>
    <registryKey keyName="HKEY_CURRENT_USER\" owner="false">
      <securityDescriptor name="defaultOfflineKeySddl" offline="true" />
    </registryKey>
    <registryKey keyName="HKEY_USERS\.DEFAULT" owner="false">
      <securityDescriptor name="defaultOfflineKeySddl" offline="true" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="defaultOfflineKeySddl" sddl="O:BAG:SYD:PAI(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_ROOT_OFFLINE_DIR_DEFAULT_SDDL" sddl="O:BAG:BAD:P(A;CIOI;GA;;;SY)(A;CIOI;GA;;;BA)(A;OICI;0x1200a9;;;BU)(A;OICIIO;GA;;;CO)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description" value="Provide default security for offline image" />
        <string id="displayName" value="Provide default security for offline image" />
      </stringTable>
    </resources>
  </localization>
</assembly>