<?xml version="1.0" encoding="UTF-8"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-Winlogon-SysNtfy" version="6.1.7600.16385" processorArchitecture="x86" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <file name="sysntfy.dll" destinationPath="$(runtime.system32)\" sourceName="sysntfy.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <signatureInfo xmlns="urn:schemas-microsoft-com:asm.v3">
      <signatureDescriptor PETrust="true" pageHash="true" />
    </signatureInfo>
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">z3NIdckbbFR6Xwumj7EOzf1f8kFmoNaTCcJ9xxLCL0s=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <memberships>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
    </categoryMembership>
  </memberships>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winlogon\Notifications" owner="false">
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winlogon\Notifications\Components" owner="false">
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winlogon\Notifications\Components\TermSrv" owner="false">
      <registryValue name="Events" valueType="REG_SZ" value="CreateSession,StartShell,EndShell,Logon,Logoff,Lock,Unlock,StartSSAsUser,StopSSAsUser,TerminateSession" operationHint="replace" owner="true" />
      <registryValue name="ServiceName" valueType="REG_SZ" value="System-LSM" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winlogon\Notifications\Configurations" owner="false">
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winlogon\Notifications\Configurations\Default" owner="false">
      <registryValue name="CreateSession" valueType="REG_SZ" value="TrustedInstaller,*" operationHint="replace" owner="true" />
      <registryValue name="Disconnect" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <registryValue name="EndShell" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <registryValue name="Lock" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <registryValue name="Logoff" valueType="REG_SZ" value="*,TermSrv,GPClient,Profiles,Wlansvc,Dot3svc" operationHint="replace" owner="true" />
      <registryValue name="Logon" valueType="REG_SZ" value="Profiles,Dot3svc,Wlansvc,GPClient,TermSrv,*" operationHint="replace" owner="true" />
      <registryValue name="Reconnect" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <registryValue name="StartShell" valueType="REG_SZ" value="SessionEnv,*" operationHint="replace" owner="true" />
      <registryValue name="StartSSAsNoone" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <registryValue name="StartSSAsUser" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <registryValue name="StopSSAsNoone" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <registryValue name="StopSSAsUser" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <registryValue name="TerminateSession" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <registryValue name="Unlock" valueType="REG_SZ" value="*" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description" value="Windows Logon Notifications Subscriber Side Component" />
        <string id="displayName" value="Windows Logon Notifications Subscriber Side Component" />
      </stringTable>
    </resources>
  </localization>
</assembly>