????
Current Path : C:/Windows/PolicyDefinitions/ |
Current File : C:/Windows/PolicyDefinitions/LAPS.admx |
<?xml version='1.0' encoding='utf-8' standalone='yes'?> <policyDefinitions revision="1.0" schemaVersion="1.0" > <policyNamespaces> <target namespace="Microsoft.Policies.LAPS" prefix="laps" /> <using namespace="Microsoft.Policies.Windows" prefix="windows" /> </policyNamespaces> <supersededAdm fileName=""/> <resources minRequiredRevision="1.0"/> <supportedOn> <definitions> <definition displayName="$(string.SUPPORTED_Windows10)" name="SUPPORTED_Windows10" /> </definitions> </supportedOn> <categories> <category displayName="$(string.LAPS)" name="LAPS_CAT" > <parentCategory ref="windows:System"/> </category> </categories> <policies> <policy class="Machine" displayName="$(string.LAPS_BackupDirectory)" explainText="$(string.LAPS_BackupDirectory_Help)" key="SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" name="LAPS_BackupDirectory" presentation="$(presentation.LAPS_BackupDirectory)" > <parentCategory ref="LAPS_CAT"/> <supportedOn ref="SUPPORTED_Windows10"/> <elements> <enum id="LAPS_BackupDirectory" valueName="BackupDirectory" > <item displayName="$(string.LAPS_BackupDirectoryDisabled)"> <value> <decimal value="0" /> </value> </item> <item displayName="$(string.LAPS_BackupDirectoryAzure)"> <value> <decimal value="1" /> </value> </item> <item displayName="$(string.LAPS_BackupDirectoryAD)"> <value> <decimal value="2" /> </value> </item> </enum> </elements> </policy> <policy class="Machine" displayName="$(string.LAPS_PasswordSettings)" explainText="$(string.LAPS_PasswordSettings_Help)" key="SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" name="LAPS_PasswordSettings" presentation="$(presentation.LAPS_PasswordSettings)" > <parentCategory ref="LAPS_CAT"/> <supportedOn ref="SUPPORTED_Windows10"/> <elements> <enum id="LAPS_PasswordComplexity" valueName="PasswordComplexity" > <item displayName="$(string.LAPS_PwdComplexity_Item_1)"> <value> <decimal value="1"/> </value> </item> <item displayName="$(string.LAPS_PwdComplexity_Item_2)"> <value> <decimal value="2"/> </value> </item> <item displayName="$(string.LAPS_PwdComplexity_Item_3)"> <value> <decimal value="3"/> </value> </item> <item displayName="$(string.LAPS_PwdComplexity_Item_4)"> <value> <decimal value="4"/> </value> </item> </enum> <decimal id="LAPS_PasswordLength" valueName="PasswordLength" minValue="8" maxValue="64" /> <decimal id="LAPS_PasswordAgeDays" valueName="PasswordAgeDays" minValue="1" maxValue="365" /> </elements> </policy> <policy class="Machine" displayName="$(string.LAPS_AdminName)" explainText="$(string.LAPS_AdminName_Help)" key="SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" name="LAPS_AdminName" presentation="$(presentation.LAPS_AdminName)" > <parentCategory ref="LAPS_CAT"/> <supportedOn ref="SUPPORTED_Windows10"/> <elements> <text id="TEXT_AdminAccountName" valueName="AdministratorAccountName" maxLength="64" /> </elements> </policy> <policy class="Machine" displayName="$(string.LAPS_DontAllowPwdExpirationBehindPolicy)" explainText="$(string.LAPS_DontAllowPwdExpirationBehindPolicy_Help)" key="SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" name="LAPS_DontAllowPwdExpirationBehindPolicy" valueName="PasswordExpirationProtectionEnabled" > <parentCategory ref="LAPS_CAT"/> <supportedOn ref="SUPPORTED_Windows10"/> <enabledValue> <decimal value="1" /> </enabledValue> <disabledValue> <decimal value="0" /> </disabledValue> </policy> <policy class="Machine" displayName="$(string.LAPS_ADPasswordEncryptionEnabled)" explainText="$(string.LAPS_ADPasswordEncryptionEnabled_Help)" key="SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" name="LAPS_ADPasswordEncryptionEnabled" valueName="ADPasswordEncryptionEnabled" > <parentCategory ref="LAPS_CAT"/> <supportedOn ref="SUPPORTED_Windows10"/> <enabledValue> <decimal value="1" /> </enabledValue> <disabledValue> <decimal value="0" /> </disabledValue> </policy> <policy class="Machine" displayName="$(string.LAPS_ADPasswordEncryptionPrincipal)" explainText="$(string.LAPS_ADPasswordEncryptionPrincipal_Help)" key="SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" name="LAPS_ADPasswordEncryptionPrincipal" presentation="$(presentation.LAPS_ADPasswordEncryptionPrincipal)" > <parentCategory ref="LAPS_CAT"/> <supportedOn ref="SUPPORTED_Windows10"/> <elements> <text id="TEXT_ADPasswordEncryptionPrincipal" valueName="ADPasswordEncryptionPrincipal" maxLength="128" /> </elements> </policy> <policy class="Machine" displayName="$(string.LAPS_ADEncryptedPasswordHistorySize)" explainText="$(string.LAPS_ADEncryptedPasswordHistorySize_Help)" key="SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" name="LAPS_ADEncryptedPasswordHistorySize" presentation="$(presentation.LAPS_ADEncryptedPasswordHistorySize)" > <parentCategory ref="LAPS_CAT"/> <supportedOn ref="SUPPORTED_Windows10"/> <elements> <decimal id="LAPS_ADEncryptedPasswordHistorySize_INT" valueName="ADEncryptedPasswordHistorySize" minValue="0" maxValue="12" /> </elements> </policy> <policy class="Machine" displayName="$(string.LAPS_ADBackupDSRMPassword)" explainText="$(string.LAPS_ADBackupDSRMPassword_Help)" key="SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" name="LAPS_ADBackupDSRMPassword" valueName="ADBackupDSRMPassword" > <parentCategory ref="LAPS_CAT"/> <supportedOn ref="SUPPORTED_Windows10"/> <enabledValue> <decimal value="1" /> </enabledValue> <disabledValue> <decimal value="0" /> </disabledValue> </policy> <policy class="Machine" displayName="$(string.LAPS_PostAuthenticationActions)" explainText="$(string.LAPS_PostAuthenticationActions_Help)" key="SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" name="LAPS_PostAuthenticationActions" presentation="$(presentation.LAPS_PostAuthenticationActions)" > <parentCategory ref="LAPS_CAT"/> <supportedOn ref="SUPPORTED_Windows10"/> <elements> <decimal id="LAPS_PostAuthenticationResetDelay_INT" valueName="PostAuthenticationResetDelay" minValue="0" maxValue="24" /> <enum id="LAPS_PostAuthenticationActions" valueName="PostAuthenticationActions" > <item displayName="$(string.PostAuthenticationActions_Item0)"> <value> <decimal value="0"/> </value> </item> <item displayName="$(string.PostAuthenticationActions_Item1)"> <value> <decimal value="1"/> </value> </item> <item displayName="$(string.PostAuthenticationActions_Item3)"> <value> <decimal value="3"/> </value> </item> <item displayName="$(string.PostAuthenticationActions_Item5)"> <value> <decimal value="5"/> </value> </item> </enum> </elements> </policy> </policies> </policyDefinitions>