Skip to content

Instantly share code, notes, and snippets.

@bohops

bohops/Application_Guard_WDAC_Policy.xml

Created July 21, 2021 03:17
Show Gist options
  • Save bohops/8fdbae2324105ad7c8f7177b3c4bbcdc to your computer and use it in GitHub Desktop.
Save bohops/8fdbae2324105ad7c8f7177b3c4bbcdc to your computer and use it in GitHub Desktop.
Download ZIP
Microsoft Defender Application Guard WDAC policy (for Edge). Converted using @mattifestation's ConvertTo-CIPolicy PowerShell Script [https://gist.github.com/mattifestation/92e545bf1ee5b68eeb71d254cec2f78e]
Raw
Application_Guard_WDAC_Policy.xml
<?xml version="1.0"?>
<SiPolicy xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="urn:schemas-microsoft-com:sipolicy">
<VersionEx>10.0.3.14</VersionEx>
<PlatformID>{2E07F7E4-194C-4D20-B7C9-6F44A6C5A234}</PlatformID>
<PolicyID>{A244370E-44C9-4C06-B551-F6016E563076}</PolicyID>
<BasePolicyID>{A244370E-44C9-4C06-B551-F6016E563076}</BasePolicyID>
<Rules>
<Rule>
<Option>Enabled:UMCI</Option>
</Rule>
<Rule>
<Option>Enabled:Unsigned System Integrity Policy</Option>
</Rule>
<Rule>
<Option>Enabled:Advanced Boot Options Menu</Option>
</Rule>
<Rule>
<Option>Required:Enforce Store Applications</Option>
</Rule>
</Rules>
<EKUs>
<EKU ID="ID_EKU_E_0001" Value="010A2B0601040182370A0306" FriendlyName="Windows System Component Verification" />
<EKU ID="ID_EKU_E_0002" Value="010A2B0601040182373D0401" FriendlyName="Early Launch Antimalware Driver" />
<EKU ID="ID_EKU_E_0003" Value="010A2B0601040182373D0501" FriendlyName="HAL Extension" />
<EKU ID="ID_EKU_E_0004" Value="010A2B0601040182370A0305" FriendlyName="Windows Hardware Driver Verification" />
<EKU ID="ID_EKU_E_0005" Value="010A2B0601040182374C0301" FriendlyName="Windows Store" />
<EKU ID="ID_EKU_E_0006" Value="010A2B0601040182370A0315" FriendlyName="Windows RT Verification" />
<EKU ID="ID_EKU_E_0007" Value="010A2B0601040182374C0501" FriendlyName="Dynamic Code Generator" />
<EKU ID="ID_EKU_E_0008" Value="010A2B0601040182374C0B01" FriendlyName="1.3.6.1.4.1.311.76.11.1" />
<EKU ID="ID_EKU_E_0009" Value="010A2B0601040182374C0801" FriendlyName="Microsoft Publisher" />
</EKUs>
<FileRules>
<Deny ID="ID_DENY_D_0001" PackageFamilyName="Microsoft.Windows.SecHealthUI_cw5n1h2txyewy" PackageVersion="65535.65535.65535.65535" />
<Deny ID="ID_DENY_D_0002" PackageFamilyName="windows.immersivecontrolpanel_cw5n1h2txyewy" PackageVersion="65535.65535.65535.65535" />
<Deny ID="ID_DENY_D_0003" FileName="AT.EXE" />
<Deny ID="ID_DENY_D_0004" FileName="bash.exe" />
<Deny ID="ID_DENY_D_0005" FileName="BitLockerWizard.exe" />
<Deny ID="ID_DENY_D_0006" FileName="BitLockerWizardElev.exe" />
<Deny ID="ID_DENY_D_0007" FileName="Bubbles" />
<Deny ID="ID_DENY_D_0008" FileName="calc.exe" />
<Deny ID="ID_DENY_D_0009" FileName="CDB.Exe" />
<Deny ID="ID_DENY_D_000A" FileName="CertUtil.exe" />
<Deny ID="ID_DENY_D_000B" FileName="charmap.exe" />
<Deny ID="ID_DENY_D_000C" FileName="CLEANMGR.DLL" />
<Deny ID="ID_DENY_D_000D" FileName="ClientConsole.EXE" />
<Deny ID="ID_DENY_D_000E" FileName="Cmd.Exe" />
<Deny ID="ID_DENY_D_000F" FileName="CMDL32.EXE" />
<Deny ID="ID_DENY_D_0010" FileName="colorcpl.exe" />
<Deny ID="ID_DENY_D_0011" FileName="ComputerDefaults.EXE" />
<Deny ID="ID_DENY_D_0012" FileName="CONTROL.EXE" />
<Deny ID="ID_DENY_D_0013" FileName="Credwiz.exe" />
<Deny ID="ID_DENY_D_0014" FileName="CryptExt.dll" />
<Deny ID="ID_DENY_D_0015" FileName="Csc.Exe" />
<Deny ID="ID_DENY_D_0016" FileName="cscript.exe" />
<Deny ID="ID_DENY_D_0017" FileName="csi.Exe" />
<Deny ID="ID_DENY_D_0018" FileName="dccw.exe" />
<Deny ID="ID_DENY_D_0019" FileName="DeviceEject.EXE" />
<Deny ID="ID_DENY_D_001A" FileName="DeviceParing.exe" />
<Deny ID="ID_DENY_D_001B" FileName="DeviceParing.exe" />
<Deny ID="ID_DENY_D_001C" FileName="DeviceProperties.exe" />
<Deny ID="ID_DENY_D_001D" FileName="dfshim.dll" />
<Deny ID="ID_DENY_D_001E" FileName="DIALER.EXE" />
<Deny ID="ID_DENY_D_001F" FileName="DISKPERF.EXE" />
<Deny ID="ID_DENY_D_0020" FileName="dnx.Exe" />
<Deny ID="ID_DENY_D_0021" FileName="DOSKEY.EXE" />
<Deny ID="ID_DENY_D_0022" FileName="dsquery.dll" />
<Deny ID="ID_DENY_D_0023" FileName="dvdplay" />
<Deny ID="ID_DENY_D_0024" FileName="eventvwr.exe" />
<Deny ID="ID_DENY_D_0025" FileName="expand" />
<Deny ID="ID_DENY_D_0026" FileName="FC.EXE" />
<Deny ID="ID_DENY_D_0027" FileName="FIND.EXE" />
<Deny ID="ID_DENY_D_0028" FileName="FINDSTR.EXE" />
<Deny ID="ID_DENY_D_0029" FileName="finger.exe" />
<Deny ID="ID_DENY_D_002A" FileName="FONTVIEW.EXE" />
<Deny ID="ID_DENY_D_002B" FileName="forfiles.exe" />
<Deny ID="ID_DENY_D_002C" FileName="format.com" />
<Deny ID="ID_DENY_D_002D" FileName="fsi.exe" />
<Deny ID="ID_DENY_D_002E" FileName="FXSSVC.EXE" />
<Deny ID="ID_DENY_D_002F" FileName="gprslt.exe" />
<Deny ID="ID_DENY_D_0030" FileName="GPSCRIPT.EXE" />
<Deny ID="ID_DENY_D_0031" FileName="GPUpdate.exe" />
<Deny ID="ID_DENY_D_0032" FileName="Help.Exe" />
<Deny ID="ID_DENY_D_0033" FileName="HH.exe" />
<Deny ID="ID_DENY_D_0034" FileName="HWRREG.EXE" />
<Deny ID="ID_DENY_D_0035" FileName="iexplore.exe" />
<Deny ID="ID_DENY_D_0036" FileName="infdefaultinstall.exe" />
<Deny ID="ID_DENY_D_0037" FileName="irftp.exe" />
<Deny ID="ID_DENY_D_0038" FileName="iscsicli.exe" />
<Deny ID="ID_DENY_D_0039" FileName="iscsicpl.exe" />
<Deny ID="ID_DENY_D_003A" FileName="ISOBURN.EXE" />
<Deny ID="ID_DENY_D_003B" FileName="Journal.exe" />
<Deny ID="ID_DENY_D_003C" FileName="kd.Exe" />
<Deny ID="ID_DENY_D_003D" FileName="LaunchTM.exe" />
<Deny ID="ID_DENY_D_003E" FileName="lxrun.exe" />
<Deny ID="ID_DENY_D_003F" FileName="lxssmanager.dll" />
<Deny ID="ID_DENY_D_0040" FileName="lxssmanager.exe" />
<Deny ID="ID_DENY_D_0041" FileName="manage-bde.exe" />
<Deny ID="ID_DENY_D_0042" FileName="mip.exe" />
<Deny ID="ID_DENY_D_0043" FileName="mmc.exe" />
<Deny ID="ID_DENY_D_0044" FileName="mobsync.exe" />
<Deny ID="ID_DENY_D_0045" FileName="MORE.COM" />
<Deny ID="ID_DENY_D_0046" FileName="MSBuild.Exe" />
<Deny ID="ID_DENY_D_0047" FileName="msconfig.EXE" />
<Deny ID="ID_DENY_D_0048" FileName="msdt.exe" />
<Deny ID="ID_DENY_D_0049" FileName="mshta.exe" />
<Deny ID="ID_DENY_D_004A" FileName="msiexec.exe" />
<Deny ID="ID_DENY_D_004B" FileName="mspaint.exe" />
<Deny ID="ID_DENY_D_004C" FileName="msra.exe" />
<Deny ID="ID_DENY_D_004D" FileName="MSRATING.DLL" />
<Deny ID="ID_DENY_D_004E" FileName="mstsc.exe" />
<Deny ID="ID_DENY_D_004F" FileName="Mystify" />
<Deny ID="ID_DENY_D_0050" FileName="nbtinfo.exe" />
<Deny ID="ID_DENY_D_0051" FileName="NETPLWIZ.EXE" />
<Deny ID="ID_DENY_D_0052" FileName="netstat.exe" />
<Deny ID="ID_DENY_D_0053" FileName="nslookup.exe" />
<Deny ID="ID_DENY_D_0054" FileName="ntprint.exe" />
<Deny ID="ID_DENY_D_0055" FileName="ntsd.Exe" />
<Deny ID="ID_DENY_D_0056" FileName="odbcad32.exe" />
<Deny ID="ID_DENY_D_0057" FileName="odbcconf.exe" />
<Deny ID="ID_DENY_D_0058" FileName="OneDriveSetup.exe" />
<Deny ID="ID_DENY_D_0059" FileName="OpenWith.exe" />
<Deny ID="ID_DENY_D_005A" FileName="OptionalFeatures.EXE" />
<Deny ID="ID_DENY_D_005B" FileName="pcalua.exe" />
<Deny ID="ID_DENY_D_005C" FileName="pcaui.exe" />
<Deny ID="ID_DENY_D_005D" FileName="pcwrun.exe" />
<Deny ID="ID_DENY_D_005E" FileName="phoneactivate.exe" />
<Deny ID="ID_DENY_D_005F" FileName="PhotoScreensaver.scr.mui" />
<Deny ID="ID_DENY_D_0060" FileName="PhotoViewer.dll" />
<Deny ID="ID_DENY_D_0061" FileName="ping.exe" />
<Deny ID="ID_DENY_D_0062" FileName="PnPutil.exe" />
<Deny ID="ID_DENY_D_0063" FileName="PowerCfg.exe" />
<Deny ID="ID_DENY_D_0064" FileName="powershell.exe" />
<Deny ID="ID_DENY_D_0065" FileName="powershellcustomhost.exe" />
<Deny ID="ID_DENY_D_0066" FileName="powershell_ise.exe" />
<Deny ID="ID_DENY_D_0067" FileName="PresentationHost.exe" />
<Deny ID="ID_DENY_D_0068" FileName="Print.Exe" />
<Deny ID="ID_DENY_D_0069" FileName="PrintBrmUi.exe" />
<Deny ID="ID_DENY_D_006A" FileName="printui.exe" />
<Deny ID="ID_DENY_D_006B" FileName="proquota.exe" />
<Deny ID="ID_DENY_D_006C" FileName="psr.exe" />
<Deny ID="ID_DENY_D_006D" FileName="Pwcreator.exe" />
<Deny ID="ID_DENY_D_006E" FileName="Pwlauncher.exe" />
<Deny ID="ID_DENY_D_006F" FileName="qappsrv.exe" />
<Deny ID="ID_DENY_D_0070" FileName="qprocess.exe" />
<Deny ID="ID_DENY_D_0071" FileName="query.exe" />
<Deny ID="ID_DENY_D_0072" FileName="QuickAssist.exe" />
<Deny ID="ID_DENY_D_0073" FileName="quser.exe" />
<Deny ID="ID_DENY_D_0074" FileName="qwinsta.exe" />
<Deny ID="ID_DENY_D_0075" FileName="RASDIAL.EXE" />
<Deny ID="ID_DENY_D_0076" FileName="rasdlui.exe" />
<Deny ID="ID_DENY_D_0077" FileName="raserver.exe" />
<Deny ID="ID_DENY_D_0078" FileName="rasphone.exe" />
<Deny ID="ID_DENY_D_0079" FileName="rcsi.Exe" />
<Deny ID="ID_DENY_D_007A" FileName="regedit.exe" />
<Deny ID="ID_DENY_D_007B" FileName="regedt32.exe" />
<Deny ID="ID_DENY_D_007C" FileName="regini.exe" />
<Deny ID="ID_DENY_D_007D" FileName="REPLACE.EXE" />
<Deny ID="ID_DENY_D_007E" FileName="reset.exe" />
<Deny ID="ID_DENY_D_007F" FileName="resmon.exe" />
<Deny ID="ID_DENY_D_0080" FileName="Ribbons" />
<Deny ID="ID_DENY_D_0081" FileName="robocopy.exe" />
<Deny ID="ID_DENY_D_0082" FileName="route.exe" />
<Deny ID="ID_DENY_D_0083" FileName="RpcPing.exe" />
<Deny ID="ID_DENY_D_0084" FileName="rrinstaller.exe" />
<Deny ID="ID_DENY_D_0085" FileName="RUNAS.EXE" />
<Deny ID="ID_DENY_D_0086" FileName="RunLegacyCPLElevated.EXE" />
<Deny ID="ID_DENY_D_0087" FileName="RUNONCE.EXE" />
<Deny ID="ID_DENY_D_0088" FileName="runscripthelper.exe" />
<Deny ID="ID_DENY_D_0089" FileName="samlock.exe" />
<Deny ID="ID_DENY_D_008A" FileName="schtasks.exe" />
<Deny ID="ID_DENY_D_008B" FileName="ScriptRunner.exe" />
<Deny ID="ID_DENY_D_008C" FileName="scrnsave" />
<Deny ID="ID_DENY_D_008D" FileName="sdbinst.exe" />
<Deny ID="ID_DENY_D_008E" FileName="sdchange.exe" />
<Deny ID="ID_DENY_D_008F" FileName="sdclt.exe" />
<Deny ID="ID_DENY_D_0090" FileName="SessionMsg.exe" />
<Deny ID="ID_DENY_D_0091" FileName="SetupPrep.exe" />
<Deny ID="ID_DENY_D_0092" FileName="shrpubw.exe" />
<Deny ID="ID_DENY_D_0093" FileName="SndVol.exe" />
<Deny ID="ID_DENY_D_0094" FileName="SnippingTool.exe" />
<Deny ID="ID_DENY_D_0095" FileName="SpaceAgent.exe" />
<Deny ID="ID_DENY_D_0096" FileName="SSystemPropertiesProtection.EXE" />
<Deny ID="ID_DENY_D_0097" FileName="StikyNot.exe" />
<Deny ID="ID_DENY_D_0098" FileName="SystemPropertiesAdvanced.EXE" />
<Deny ID="ID_DENY_D_0099" FileName="SystemPropertiesComputerName.EXE" />
<Deny ID="ID_DENY_D_009A" FileName="SystemPropertiesDataExecutionPrevention.EXE" />
<Deny ID="ID_DENY_D_009B" FileName="SystemPropertiesHardware.EXE" />
<Deny ID="ID_DENY_D_009C" FileName="SystemPropertiesPerformance.EXE" />
<Deny ID="ID_DENY_D_009D" FileName="SystemPropertiesRemote.EXE" />
<Deny ID="ID_DENY_D_009E" FileName="Taskmgr.exe" />
<Deny ID="ID_DENY_D_009F" FileName="TCMSETUP.EXE" />
<Deny ID="ID_DENY_D_00A0" FileName="Text3D" />
<Deny ID="ID_DENY_D_00A1" FileName="unregmp2.exe" />
<Deny ID="ID_DENY_D_00A2" FileName="WAB.EXE" />
<Deny ID="ID_DENY_D_00A3" FileName="wbemtest.exe" />
<Deny ID="ID_DENY_D_00A4" FileName="WIAACMGR.EXE" />
<Deny ID="ID_DENY_D_00A5" FileName="windbg.Exe" />
<Deny ID="ID_DENY_D_00A6" FileName="WINHLP32.EXE" />
<Deny ID="ID_DENY_D_00A7" FileName="WinSAT.exe" />
<Deny ID="ID_DENY_D_00A8" FileName="wksprt.exe" />
<Deny ID="ID_DENY_D_00A9" FileName="WmiApSrv.exe" />
<Deny ID="ID_DENY_D_00AA" FileName="wmic.exe" />
<Deny ID="ID_DENY_D_00AB" FileName="wmicookr.dll" />
<Deny ID="ID_DENY_D_00AC" FileName="wmplayer.exe" />
<Deny ID="ID_DENY_D_00AD" FileName="WorkFolders.exe" />
<Deny ID="ID_DENY_D_00AE" FileName="WpcMon.exe" />
<Deny ID="ID_DENY_D_00AF" FileName="write" />
<Deny ID="ID_DENY_D_00B0" FileName="wscript.exe" />
<Deny ID="ID_DENY_D_00B1" FileName="wsl.exe" />
<Deny ID="ID_DENY_D_00B2" FileName="wslconfig.exe" />
<Deny ID="ID_DENY_D_00B3" FileName="wslhost.exe" />
<Deny ID="ID_DENY_D_00B4" FileName="XCOPY.EXE" />
<Deny ID="ID_DENY_D_00B5" FileName="xpsrchvw.exe" />
</FileRules>
<Signers>
<Signer Name="Signer 1" ID="ID_SIGNER_S_0001">
<CertRoot Type="Wellknown" Value="06" />
<CertEKU ID="ID_EKU_E_0001" />
</Signer>
<Signer Name="Signer 2" ID="ID_SIGNER_S_0002">
<CertRoot Type="Wellknown" Value="06" />
<CertEKU ID="ID_EKU_E_0002" />
</Signer>
<Signer Name="Signer 3" ID="ID_SIGNER_S_0003">
<CertRoot Type="Wellknown" Value="06" />
<CertEKU ID="ID_EKU_E_0003" />
</Signer>
<Signer Name="Signer 4" ID="ID_SIGNER_S_0004">
<CertRoot Type="Wellknown" Value="06" />
<CertEKU ID="ID_EKU_E_0004" />
</Signer>
<Signer Name="Signer 5" ID="ID_SIGNER_S_0005">
<CertRoot Type="Wellknown" Value="05" />
<CertEKU ID="ID_EKU_E_0004" />
</Signer>
<Signer Name="Signer 6" ID="ID_SIGNER_S_0006">
<CertRoot Type="Wellknown" Value="04" />
<CertEKU ID="ID_EKU_E_0004" />
</Signer>
<Signer Name="Signer 7" ID="ID_SIGNER_S_0007">
<CertRoot Type="Wellknown" Value="0E" />
<CertEKU ID="ID_EKU_E_0001" />
</Signer>
<Signer Name="Signer 8" ID="ID_SIGNER_S_0008">
<CertRoot Type="Wellknown" Value="0E" />
<CertEKU ID="ID_EKU_E_0002" />
</Signer>
<Signer Name="Signer 9" ID="ID_SIGNER_S_0009">
<CertRoot Type="Wellknown" Value="0E" />
<CertEKU ID="ID_EKU_E_0003" />
</Signer>
<Signer Name="Signer 10" ID="ID_SIGNER_S_000A">
<CertRoot Type="Wellknown" Value="0E" />
<CertEKU ID="ID_EKU_E_0004" />
</Signer>
<Signer Name="Signer 11" ID="ID_SIGNER_S_000B">
<CertRoot Type="Wellknown" Value="0A" />
</Signer>
<Signer Name="Signer 12" ID="ID_SIGNER_S_000C">
<CertRoot Type="TBS" Value="121AF4B922A74247EA49DF50DE37609CC1451A1FE06B2CB7E1E079B492BD8195" />
</Signer>
<Signer Name="Signer 13" ID="ID_SIGNER_S_000D">
<CertRoot Type="TBS" Value="FC9EDE3DCCA09186B2D3BF9B738A2050CB1A554DA2DCADB55F3F72EE17721378" />
<CertEKU ID="ID_EKU_E_0005" />
</Signer>
<Signer Name="Signer 14" ID="ID_SIGNER_S_000E">
<CertRoot Type="Wellknown" Value="06" />
<CertEKU ID="ID_EKU_E_0006" />
</Signer>
<Signer Name="Signer 15" ID="ID_SIGNER_S_000F">
<CertRoot Type="Wellknown" Value="0C" />
</Signer>
<Signer Name="Signer 16" ID="ID_SIGNER_S_0010">
<CertRoot Type="Wellknown" Value="06" />
<CertEKU ID="ID_EKU_E_0007" />
</Signer>
<Signer Name="Signer 17" ID="ID_SIGNER_S_0011">
<CertRoot Type="Wellknown" Value="07" />
<CertEKU ID="ID_EKU_E_0008" />
</Signer>
<Signer Name="Signer 18" ID="ID_SIGNER_S_0012">
<CertRoot Type="Wellknown" Value="0E" />
<CertEKU ID="ID_EKU_E_0006" />
</Signer>
<Signer Name="Signer 19" ID="ID_SIGNER_S_0013">
<CertRoot Type="Wellknown" Value="07" />
<CertEKU ID="ID_EKU_E_0006" />
</Signer>
<Signer Name="Signer 20" ID="ID_SIGNER_S_0014">
<CertRoot Type="TBS" Value="068D49F5D48557C8F705BB066B9EC6C8AC82FF62F1B5E2E96AD4165501815181" />
</Signer>
<Signer Name="Signer 21" ID="ID_SIGNER_S_0015">
<CertRoot Type="Wellknown" Value="07" />
<CertEKU ID="ID_EKU_E_0009" />
</Signer>
</Signers>
<SigningScenarios>
<SigningScenario ID="ID_SIGNINGSCENARIO_DRIVERS_1" Value="131">
<ProductSigners>
<AllowedSigners>
<AllowedSigner SignerId="ID_SIGNER_S_0001" />
<AllowedSigner SignerId="ID_SIGNER_S_0002" />
<AllowedSigner SignerId="ID_SIGNER_S_0003" />
<AllowedSigner SignerId="ID_SIGNER_S_0004" />
<AllowedSigner SignerId="ID_SIGNER_S_0005" />
<AllowedSigner SignerId="ID_SIGNER_S_0006" />
<AllowedSigner SignerId="ID_SIGNER_S_0007" />
<AllowedSigner SignerId="ID_SIGNER_S_0008" />
<AllowedSigner SignerId="ID_SIGNER_S_0009" />
<AllowedSigner SignerId="ID_SIGNER_S_000A" />
<AllowedSigner SignerId="ID_SIGNER_S_000B" />
<AllowedSigner SignerId="ID_SIGNER_S_000C" />
</AllowedSigners>
</ProductSigners>
<TestSigners />
<TestSigningSigners />
</SigningScenario>
<SigningScenario ID="ID_SIGNINGSCENARIO_WINDOWS" Value="12">
<ProductSigners>
<AllowedSigners>
<AllowedSigner SignerId="ID_SIGNER_S_0001" />
<AllowedSigner SignerId="ID_SIGNER_S_0002" />
<AllowedSigner SignerId="ID_SIGNER_S_0003" />
<AllowedSigner SignerId="ID_SIGNER_S_0004" />
<AllowedSigner SignerId="ID_SIGNER_S_0005" />
<AllowedSigner SignerId="ID_SIGNER_S_0006" />
<AllowedSigner SignerId="ID_SIGNER_S_0007" />
<AllowedSigner SignerId="ID_SIGNER_S_0008" />
<AllowedSigner SignerId="ID_SIGNER_S_0009" />
<AllowedSigner SignerId="ID_SIGNER_S_000A" />
<AllowedSigner SignerId="ID_SIGNER_S_000D" />
<AllowedSigner SignerId="ID_SIGNER_S_000E" />
<AllowedSigner SignerId="ID_SIGNER_S_000F" />
<AllowedSigner SignerId="ID_SIGNER_S_0010" />
<AllowedSigner SignerId="ID_SIGNER_S_0011" />
<AllowedSigner SignerId="ID_SIGNER_S_0012" />
<AllowedSigner SignerId="ID_SIGNER_S_0013" />
<AllowedSigner SignerId="ID_SIGNER_S_0014" />
<AllowedSigner SignerId="ID_SIGNER_S_0015" />
<AllowedSigner SignerId="ID_SIGNER_S_000B" />
<AllowedSigner SignerId="ID_SIGNER_S_000C" />
</AllowedSigners>
<FileRulesRef>
<FileRuleRef RuleID="ID_DENY_D_0001" />
<FileRuleRef RuleID="ID_DENY_D_0002" />
<FileRuleRef RuleID="ID_DENY_D_0003" />
<FileRuleRef RuleID="ID_DENY_D_0004" />
<FileRuleRef RuleID="ID_DENY_D_0005" />
<FileRuleRef RuleID="ID_DENY_D_0006" />
<FileRuleRef RuleID="ID_DENY_D_0007" />
<FileRuleRef RuleID="ID_DENY_D_0008" />
<FileRuleRef RuleID="ID_DENY_D_0009" />
<FileRuleRef RuleID="ID_DENY_D_000A" />
<FileRuleRef RuleID="ID_DENY_D_000B" />
<FileRuleRef RuleID="ID_DENY_D_000C" />
<FileRuleRef RuleID="ID_DENY_D_000D" />
<FileRuleRef RuleID="ID_DENY_D_000E" />
<FileRuleRef RuleID="ID_DENY_D_000F" />
<FileRuleRef RuleID="ID_DENY_D_0010" />
<FileRuleRef RuleID="ID_DENY_D_0011" />
<FileRuleRef RuleID="ID_DENY_D_0012" />
<FileRuleRef RuleID="ID_DENY_D_0013" />
<FileRuleRef RuleID="ID_DENY_D_0014" />
<FileRuleRef RuleID="ID_DENY_D_0015" />
<FileRuleRef RuleID="ID_DENY_D_0016" />
<FileRuleRef RuleID="ID_DENY_D_0017" />
<FileRuleRef RuleID="ID_DENY_D_0018" />
<FileRuleRef RuleID="ID_DENY_D_0019" />
<FileRuleRef RuleID="ID_DENY_D_001A" />
<FileRuleRef RuleID="ID_DENY_D_001B" />
<FileRuleRef RuleID="ID_DENY_D_001C" />
<FileRuleRef RuleID="ID_DENY_D_001D" />
<FileRuleRef RuleID="ID_DENY_D_001E" />
<FileRuleRef RuleID="ID_DENY_D_001F" />
<FileRuleRef RuleID="ID_DENY_D_0020" />
<FileRuleRef RuleID="ID_DENY_D_0021" />
<FileRuleRef RuleID="ID_DENY_D_0022" />
<FileRuleRef RuleID="ID_DENY_D_0023" />
<FileRuleRef RuleID="ID_DENY_D_0024" />
<FileRuleRef RuleID="ID_DENY_D_0025" />
<FileRuleRef RuleID="ID_DENY_D_0026" />
<FileRuleRef RuleID="ID_DENY_D_0027" />
<FileRuleRef RuleID="ID_DENY_D_0028" />
<FileRuleRef RuleID="ID_DENY_D_0029" />
<FileRuleRef RuleID="ID_DENY_D_002A" />
<FileRuleRef RuleID="ID_DENY_D_002B" />
<FileRuleRef RuleID="ID_DENY_D_002C" />
<FileRuleRef RuleID="ID_DENY_D_002D" />
<FileRuleRef RuleID="ID_DENY_D_002E" />
<FileRuleRef RuleID="ID_DENY_D_002F" />
<FileRuleRef RuleID="ID_DENY_D_0030" />
<FileRuleRef RuleID="ID_DENY_D_0031" />
<FileRuleRef RuleID="ID_DENY_D_0032" />
<FileRuleRef RuleID="ID_DENY_D_0033" />
<FileRuleRef RuleID="ID_DENY_D_0034" />
<FileRuleRef RuleID="ID_DENY_D_0035" />
<FileRuleRef RuleID="ID_DENY_D_0036" />
<FileRuleRef RuleID="ID_DENY_D_0037" />
<FileRuleRef RuleID="ID_DENY_D_0038" />
<FileRuleRef RuleID="ID_DENY_D_0039" />
<FileRuleRef RuleID="ID_DENY_D_003A" />
<FileRuleRef RuleID="ID_DENY_D_003B" />
<FileRuleRef RuleID="ID_DENY_D_003C" />
<FileRuleRef RuleID="ID_DENY_D_003D" />
<FileRuleRef RuleID="ID_DENY_D_003E" />
<FileRuleRef RuleID="ID_DENY_D_003F" />
<FileRuleRef RuleID="ID_DENY_D_0040" />
<FileRuleRef RuleID="ID_DENY_D_0041" />
<FileRuleRef RuleID="ID_DENY_D_0042" />
<FileRuleRef RuleID="ID_DENY_D_0043" />
<FileRuleRef RuleID="ID_DENY_D_0044" />
<FileRuleRef RuleID="ID_DENY_D_0045" />
<FileRuleRef RuleID="ID_DENY_D_0046" />
<FileRuleRef RuleID="ID_DENY_D_0047" />
<FileRuleRef RuleID="ID_DENY_D_0048" />
<FileRuleRef RuleID="ID_DENY_D_0049" />
<FileRuleRef RuleID="ID_DENY_D_004A" />
<FileRuleRef RuleID="ID_DENY_D_004B" />
<FileRuleRef RuleID="ID_DENY_D_004C" />
<FileRuleRef RuleID="ID_DENY_D_004D" />
<FileRuleRef RuleID="ID_DENY_D_004E" />
<FileRuleRef RuleID="ID_DENY_D_004F" />
<FileRuleRef RuleID="ID_DENY_D_0050" />
<FileRuleRef RuleID="ID_DENY_D_0051" />
<FileRuleRef RuleID="ID_DENY_D_0052" />
<FileRuleRef RuleID="ID_DENY_D_0053" />
<FileRuleRef RuleID="ID_DENY_D_0054" />
<FileRuleRef RuleID="ID_DENY_D_0055" />
<FileRuleRef RuleID="ID_DENY_D_0056" />
<FileRuleRef RuleID="ID_DENY_D_0057" />
<FileRuleRef RuleID="ID_DENY_D_0058" />
<FileRuleRef RuleID="ID_DENY_D_0059" />
<FileRuleRef RuleID="ID_DENY_D_005A" />
<FileRuleRef RuleID="ID_DENY_D_005B" />
<FileRuleRef RuleID="ID_DENY_D_005C" />
<FileRuleRef RuleID="ID_DENY_D_005D" />
<FileRuleRef RuleID="ID_DENY_D_005E" />
<FileRuleRef RuleID="ID_DENY_D_005F" />
<FileRuleRef RuleID="ID_DENY_D_0060" />
<FileRuleRef RuleID="ID_DENY_D_0061" />
<FileRuleRef RuleID="ID_DENY_D_0062" />
<FileRuleRef RuleID="ID_DENY_D_0063" />
<FileRuleRef RuleID="ID_DENY_D_0064" />
<FileRuleRef RuleID="ID_DENY_D_0065" />
<FileRuleRef RuleID="ID_DENY_D_0066" />
<FileRuleRef RuleID="ID_DENY_D_0067" />
<FileRuleRef RuleID="ID_DENY_D_0068" />
<FileRuleRef RuleID="ID_DENY_D_0069" />
<FileRuleRef RuleID="ID_DENY_D_006A" />
<FileRuleRef RuleID="ID_DENY_D_006B" />
<FileRuleRef RuleID="ID_DENY_D_006C" />
<FileRuleRef RuleID="ID_DENY_D_006D" />
<FileRuleRef RuleID="ID_DENY_D_006E" />
<FileRuleRef RuleID="ID_DENY_D_006F" />
<FileRuleRef RuleID="ID_DENY_D_0070" />
<FileRuleRef RuleID="ID_DENY_D_0071" />
<FileRuleRef RuleID="ID_DENY_D_0072" />
<FileRuleRef RuleID="ID_DENY_D_0073" />
<FileRuleRef RuleID="ID_DENY_D_0074" />
<FileRuleRef RuleID="ID_DENY_D_0075" />
<FileRuleRef RuleID="ID_DENY_D_0076" />
<FileRuleRef RuleID="ID_DENY_D_0077" />
<FileRuleRef RuleID="ID_DENY_D_0078" />
<FileRuleRef RuleID="ID_DENY_D_0079" />
<FileRuleRef RuleID="ID_DENY_D_007A" />
<FileRuleRef RuleID="ID_DENY_D_007B" />
<FileRuleRef RuleID="ID_DENY_D_007C" />
<FileRuleRef RuleID="ID_DENY_D_007D" />
<FileRuleRef RuleID="ID_DENY_D_007E" />
<FileRuleRef RuleID="ID_DENY_D_007F" />
<FileRuleRef RuleID="ID_DENY_D_0080" />
<FileRuleRef RuleID="ID_DENY_D_0081" />
<FileRuleRef RuleID="ID_DENY_D_0082" />
<FileRuleRef RuleID="ID_DENY_D_0083" />
<FileRuleRef RuleID="ID_DENY_D_0084" />
<FileRuleRef RuleID="ID_DENY_D_0085" />
<FileRuleRef RuleID="ID_DENY_D_0086" />
<FileRuleRef RuleID="ID_DENY_D_0087" />
<FileRuleRef RuleID="ID_DENY_D_0088" />
<FileRuleRef RuleID="ID_DENY_D_0089" />
<FileRuleRef RuleID="ID_DENY_D_008A" />
<FileRuleRef RuleID="ID_DENY_D_008B" />
<FileRuleRef RuleID="ID_DENY_D_008C" />
<FileRuleRef RuleID="ID_DENY_D_008D" />
<FileRuleRef RuleID="ID_DENY_D_008E" />
<FileRuleRef RuleID="ID_DENY_D_008F" />
<FileRuleRef RuleID="ID_DENY_D_0090" />
<FileRuleRef RuleID="ID_DENY_D_0091" />
<FileRuleRef RuleID="ID_DENY_D_0092" />
<FileRuleRef RuleID="ID_DENY_D_0093" />
<FileRuleRef RuleID="ID_DENY_D_0094" />
<FileRuleRef RuleID="ID_DENY_D_0095" />
<FileRuleRef RuleID="ID_DENY_D_0096" />
<FileRuleRef RuleID="ID_DENY_D_0097" />
<FileRuleRef RuleID="ID_DENY_D_0098" />
<FileRuleRef RuleID="ID_DENY_D_0099" />
<FileRuleRef RuleID="ID_DENY_D_009A" />
<FileRuleRef RuleID="ID_DENY_D_009B" />
<FileRuleRef RuleID="ID_DENY_D_009C" />
<FileRuleRef RuleID="ID_DENY_D_009D" />
<FileRuleRef RuleID="ID_DENY_D_009E" />
<FileRuleRef RuleID="ID_DENY_D_009F" />
<FileRuleRef RuleID="ID_DENY_D_00A0" />
<FileRuleRef RuleID="ID_DENY_D_00A1" />
<FileRuleRef RuleID="ID_DENY_D_00A2" />
<FileRuleRef RuleID="ID_DENY_D_00A3" />
<FileRuleRef RuleID="ID_DENY_D_00A4" />
<FileRuleRef RuleID="ID_DENY_D_00A5" />
<FileRuleRef RuleID="ID_DENY_D_00A6" />
<FileRuleRef RuleID="ID_DENY_D_00A7" />
<FileRuleRef RuleID="ID_DENY_D_00A8" />
<FileRuleRef RuleID="ID_DENY_D_00A9" />
<FileRuleRef RuleID="ID_DENY_D_00AA" />
<FileRuleRef RuleID="ID_DENY_D_00AB" />
<FileRuleRef RuleID="ID_DENY_D_00AC" />
<FileRuleRef RuleID="ID_DENY_D_00AD" />
<FileRuleRef RuleID="ID_DENY_D_00AE" />
<FileRuleRef RuleID="ID_DENY_D_00AF" />
<FileRuleRef RuleID="ID_DENY_D_00B0" />
<FileRuleRef RuleID="ID_DENY_D_00B1" />
<FileRuleRef RuleID="ID_DENY_D_00B2" />
<FileRuleRef RuleID="ID_DENY_D_00B3" />
<FileRuleRef RuleID="ID_DENY_D_00B4" />
<FileRuleRef RuleID="ID_DENY_D_00B5" />
</FileRulesRef>
</ProductSigners>
<TestSigners />
<TestSigningSigners />
</SigningScenario>
</SigningScenarios>
<CiSigners>
<CiSigner SignerId="ID_SIGNER_S_000D" />
<CiSigner SignerId="ID_SIGNER_S_0014" />
<CiSigner SignerId="ID_SIGNER_S_000C" />
</CiSigners>
<Settings>
<Setting Provider="PolicyInfo" Key="Information" ValueName="Id">
<Value>
<String>SIPolicyEnfWDAG.10.0.3.14</String>
</Value>
</Setting>
<Setting Provider="PolicyInfo" Key="Information" ValueName="Name">
<Value>
<String>SIPolicyEnfWDAG</String>
</Value>
</Setting>
<Setting Provider="PolicyInfo" Key="NoRevalidationUponRefresh" ValueName="NoRevalidationUponRefreshValue">
<Value>
<Boolean>true</Boolean>
</Value>
</Setting>
</Settings>
</SiPolicy>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment