<?xml version="1.0" encoding="US-ASCII" standalone="yes" ?>
<AppLockerPolicy Version="1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="AppLocker.xsd">
    <RuleCollection EnforcementMode="Enabled" Type="AppX">
        <FilePublisherRule Action="Allow" Description="Allows members of the 'Local Account' group to run digitally signed packaged apps." Id="a9e18c21-ff8f-43cf-b9fc-db40eed693ba" Name="(MODIFIED Default Rule) All signed packaged apps" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePublisherCondition BinaryName="*" ProductName="*" PublisherName="*">
                    <BinaryVersionRange HighSection="*" LowSection="*" />
                </FilePublisherCondition>
            </Conditions>
            <Exceptions>
                <FilePublisherCondition BinaryName="*" ProductName="Microsoft.Copilot" PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US">
                    <BinaryVersionRange HighSection="*" LowSection="*" />
                </FilePublisherCondition>
            </Exceptions>
        </FilePublisherRule>
    </RuleCollection>
    <RuleCollection EnforcementMode="Enabled" Type="Dll">
        <FilePathRule Action="Allow" Description="Allows members of the 'Local Account' group to load DLLs located in the 'Program Files' directory." Id="3737732c-99b7-41d4-9037-9cddfb0de0d0" Name="(MODIFIED Default Rule) All DLLs located in the 'Program Files' directory" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePathCondition Path="%PROGRAMFILES%\*" />
            </Conditions>
        </FilePathRule>
        <FilePathRule Action="Allow" Description="Allows members of the 'Local Account' group to load DLLs located in the 'Windows' directory." Id="bac4b0bf-6f1b-40e8-8627-8545fa89c8b6" Name="(CORRECTED Default Rule) Microsoft Windows DLLs" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePathCondition Path="%WINDIR%\*" />
            </Conditions>
            <Exceptions>
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp:*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp\*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp:*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks\*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA\*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA:*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog\*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog:*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons\*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons:*" />
                <FilePathCondition Path="%WINDIR%\System32\AppLocker\AppCache.*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys\*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys:*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage\*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated\*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated:*" />
                <FilePathCondition Path="%WINDIR%\System32\WDI\LogFiles\StartupInfo\*" />
                <FilePathCondition Path="%WINDIR%\Tasks\*" />
                <FilePathCondition Path="%WINDIR%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Temp\*" />
                <FilePathCondition Path="%WINDIR%\Temp:*" />
                <FilePathCondition Path="%WINDIR%\Tracing\*" />
                <FilePathCondition Path="%WINDIR%\Tracing:*" />
            </Exceptions>
        </FilePathRule>
        <FilePathRule Action="Allow" Description="%OSDRIVE%\ProgramData\Microsoft\Windows Defender\Platform (MSKB 4052623)" Id="d2ca0dDc-56af-465f-9c2a-ae5b25d4aa90" Name="MpOAV.dll" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePathCondition Path="%OSDRIVE%\ProgramData\Microsoft\Windows Defender\Platform\*" />
            </Conditions>
        </FilePathRule>
        <FilePathRule Action="Allow" Description="Allows members of the (local) 'Administrators' group to load all (protected) DLLs." Id="fe64f59f-6fca-45e5-a731-0f6715327c38" Name="(MODIFIED Default Rule) All DLLs" UserOrGroupSid="S-1-5-114">
            <Conditions>
                <FilePathCondition Path="*" />
            </Conditions>
            <Exceptions>
                <FilePathCondition Path="%OSDRIVE%\Users\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp:*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp\*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp:*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks\*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA\*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA:*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog\*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog:*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons\*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons:*" />
                <FilePathCondition Path="%WINDIR%\System32\AppLocker\AppCache.*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys\*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys:*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage\*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated\*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated:*" />
                <FilePathCondition Path="%WINDIR%\System32\WDI\LogFiles\StartupInfo\*" />
                <FilePathCondition Path="%WINDIR%\Tasks\*" />
                <FilePathCondition Path="%WINDIR%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Temp\*" />
                <FilePathCondition Path="%WINDIR%\Temp:*" />
                <FilePathCondition Path="%WINDIR%\Tracing\*" />
                <FilePathCondition Path="%WINDIR%\Tracing:*" />
            </Exceptions>
        </FilePathRule>
        <RuleCollectionExtensions>
            <ThresholdExtensions>
                <Services EnforcementMode="Enabled" />
            </ThresholdExtensions>
            <RedstoneExtensions>
                <SystemApps Allow="Enabled" />
            </RedstoneExtensions>
        </RuleCollectionExtensions>
    </RuleCollection>
    <RuleCollection EnforcementMode="Enabled" Type="Exe">
        <FilePathRule Action="Allow" Description="Allows members of the 'Local Account' group to run applications located in the 'Program Files' directory." Id="921cc481-6e17-4653-8f75-050b80acca20" Name="(MODIFIED Default Rule) All files located in the 'Program Files' directory" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePathCondition Path="%PROGRAMFILES%\*" />
            </Conditions>
        </FilePathRule>
        <FilePathRule Action="Allow" Description="Allows members of the 'Local Account' group to run applications located in the 'Windows' directory." Id="a61c8b2c-a319-4cd0-9690-d2177cad7b51" Name="(CORRECTED Default Rule) All files located in the 'Windows' directory" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePathCondition Path="%WINDIR%\*" />
            </Conditions>
            <Exceptions>
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp:*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp\*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp:*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks\*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA\*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA:*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog\*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog:*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons\*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons:*" />
                <FilePathCondition Path="%WINDIR%\System32\AppLocker\AppCache.*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys\*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys:*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage\*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated\*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated:*" />
                <FilePathCondition Path="%WINDIR%\System32\WDI\LogFiles\StartupInfo\*" />
                <FilePathCondition Path="%WINDIR%\Tasks\*" />
                <FilePathCondition Path="%WINDIR%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Temp\*" />
                <FilePathCondition Path="%WINDIR%\Temp:*" />
                <FilePathCondition Path="%WINDIR%\Tracing\*" />
                <FilePathCondition Path="%WINDIR%\Tracing:*" />
            </Exceptions>
        </FilePathRule>
        <FilePathRule Action="Allow" Description="Allows members of the (local) 'Administrators' group to run all (protected) applications." Id="fd686d83-a829-4351-8ff4-27c7de5755d2" Name="(MODIFIED Default Rule) All files" UserOrGroupSid="S-1-5-114">
            <Conditions>
                <FilePathCondition Path="*" />
            </Conditions>
            <Exceptions>
                <FilePathCondition Path="%OSDRIVE%\Users\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp:*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp\*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp:*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks\*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA\*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA:*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog\*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog:*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons\*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons:*" />
                <FilePathCondition Path="%WINDIR%\System32\AppLocker\AppCache.*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys\*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys:*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage\*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated\*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated:*" />
                <FilePathCondition Path="%WINDIR%\System32\WDI\LogFiles\StartupInfo\*" />
                <FilePathCondition Path="%WINDIR%\Tasks\*" />
                <FilePathCondition Path="%WINDIR%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Temp\*" />
                <FilePathCondition Path="%WINDIR%\Temp:*" />
                <FilePathCondition Path="%WINDIR%\Tracing\*" />
                <FilePathCondition Path="%WINDIR%\Tracing:*" />
            </Exceptions>
        </FilePathRule>
        <FilePublisherRule Action="Deny" Description="" Id="ef69c6b9-1e05-40a2-a245-55f6967b337f" Name="Microsoft Copilot" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePublisherCondition BinaryName="*" ProductName="Microsoft.Copilot" PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US">
                    <BinaryVersionRange HighSection="*" LowSection="*" />
                </FilePublisherCondition>
            </Conditions>
        </FilePublisherRule>
        <RuleCollectionExtensions>
            <ThresholdExtensions>
                <Services EnforcementMode="Enabled" />
            </ThresholdExtensions>
            <RedstoneExtensions>
                <SystemApps Allow="Enabled" />
            </RedstoneExtensions>
        </RuleCollectionExtensions>
    </RuleCollection>
    <RuleCollection EnforcementMode="Enabled" Type="Msi">
        <FilePathRule Action="Allow" Description="Allows members of the 'Local Account' group to run 'Windows Installer' files located in the 'Windows\Installer' directory." Id="5b290184-345a-4453-b184-45305f6d9a54" Name="(MODIFIED Default Rule) All 'Windows Installer' files located in the 'Windows\Installer' directory" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePathCondition Path="%WINDIR%\Installer\*" />
            </Conditions>
        </FilePathRule>
        <FilePathRule Action="Allow" Description="Allows members of the (local) 'Administrators' group to run all (protected) 'Windows Installer' files." Id="64ad46ff-0d71-4fa0-a30b-3f3d30c5433d" Name="(MODIFIED Default Rule) All 'Windows Installer' files" UserOrGroupSid="S-1-5-114">
            <Conditions>
                <FilePathCondition Path="*" />
            </Conditions>
            <Exceptions>
                <FilePathCondition Path="%OSDRIVE%\Users\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp:*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp\*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp:*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks\*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA\*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA:*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog\*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog:*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons\*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons:*" />
                <FilePathCondition Path="%WINDIR%\System32\AppLocker\AppCache.*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys\*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys:*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage\*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated\*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated:*" />
                <FilePathCondition Path="%WINDIR%\System32\WDI\LogFiles\StartupInfo\*" />
                <FilePathCondition Path="%WINDIR%\Tasks\*" />
                <FilePathCondition Path="%WINDIR%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Temp\*" />
                <FilePathCondition Path="%WINDIR%\Temp:*" />
                <FilePathCondition Path="%WINDIR%\Tracing\*" />
                <FilePathCondition Path="%WINDIR%\Tracing:*" />
            </Exceptions>
        </FilePathRule>
        <FilePublisherRule Action="Allow" Description="Allows members of the 'Local Account' group to run digitally signed 'Windows Installer' files." Id="b7af7102-efde-4369-8a89-7a6a392d1473" Name="(MODIFIED Default Rule) All digitally signed 'Windows Installer' files" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePublisherCondition BinaryName="*" ProductName="*" PublisherName="*">
                    <BinaryVersionRange HighSection="*" LowSection="*" />
                </FilePublisherCondition>
            </Conditions>
        </FilePublisherRule>
    </RuleCollection>
    <RuleCollection EnforcementMode="Enabled" Type="Script">
        <FilePathRule Action="Allow" Description="Allows members of the 'Local Account' group to run scripts located in the 'Program Files' directory." Id="06dce67b-934c-454f-a263-2515c8796a5d" Name="(MODIFIED Default Rule) All scripts located in the 'Program Files' directory" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePathCondition Path="%PROGRAMFILES%\*" />
            </Conditions>
        </FilePathRule>
        <FilePathRule Action="Allow" Description="Allows members of the 'Local Account' group to run scripts located in the 'Windows' directory." Id="9428c672-5fc3-47f4-808a-a0011f36dd2c" Name="(CORRECTED Default Rule) All scripts located in the 'Windows' directory" UserOrGroupSid="S-1-5-113">
            <Conditions>
                <FilePathCondition Path="%WINDIR%\*" />
            </Conditions>
            <Exceptions>
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp:*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp\*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp:*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks\*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA\*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA:*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog\*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog:*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons\*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons:*" />
                <FilePathCondition Path="%WINDIR%\System32\AppLocker\AppCache.*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys\*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys:*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage\*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated\*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated:*" />
                <FilePathCondition Path="%WINDIR%\System32\WDI\LogFiles\StartupInfo\*" />
                <FilePathCondition Path="%WINDIR%\Tasks\*" />
                <FilePathCondition Path="%WINDIR%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Temp\*" />
                <FilePathCondition Path="%WINDIR%\Temp:*" />
                <FilePathCondition Path="%WINDIR%\Tracing\*" />
                <FilePathCondition Path="%WINDIR%\Tracing:*" />
            </Exceptions>
        </FilePathRule>
        <FilePathRule Action="Allow" Description="Allows members of the (local) 'Administrators' group to run all (protected) scripts." Id="ed97d0cb-15ff-430f-b82c-8d7832957725" Name="(MODIFIED Default Rule) All scripts" UserOrGroupSid="S-1-5-114">
            <Conditions>
                <FilePathCondition Path="*" />
            </Conditions>
            <Exceptions>
                <FilePathCondition Path="%OSDRIVE%\Users\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp\*" />
                <FilePathCondition Path="%SYSTEM32%\Com\Dmp:*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp\*" />
                <FilePathCondition Path="%SYSTEM32%\FxsTmp:*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks\*" />
                <FilePathCondition Path="%SYSTEM32%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA\*" />
                <FilePathCondition Path="%WINDIR%\Debug\WIA:*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog\*" />
                <FilePathCondition Path="%WINDIR%\Registration\CRMLog:*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons\*" />
                <FilePathCondition Path="%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Microsoft\DLNA\DeviceIcons:*" />
                <FilePathCondition Path="%WINDIR%\System32\AppLocker\AppCache.*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys\*" />
                <FilePathCondition Path="%WINDIR%\System32\Microsoft\Crypto\RSA\MachineKeys:*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage\*" />
                <FilePathCondition Path="%WINDIR%\System32\MSMQ\Storage:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Drivers\Color:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Printers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers\*" />
                <FilePathCondition Path="%WINDIR%\System32\Spool\Servers:*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated\*" />
                <FilePathCondition Path="%WINDIR%\System32\Tasks_Migrated:*" />
                <FilePathCondition Path="%WINDIR%\System32\WDI\LogFiles\StartupInfo\*" />
                <FilePathCondition Path="%WINDIR%\Tasks\*" />
                <FilePathCondition Path="%WINDIR%\Tasks:*" />
                <FilePathCondition Path="%WINDIR%\Temp\*" />
                <FilePathCondition Path="%WINDIR%\Temp:*" />
                <FilePathCondition Path="%WINDIR%\Tracing\*" />
                <FilePathCondition Path="%WINDIR%\Tracing:*" />
            </Exceptions>
        </FilePathRule>
    </RuleCollection>
</AppLockerPolicy>
