<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:aix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix" xmlns:hpux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:linux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:macos-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:sol-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:win-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 mcafee-pa-oval-definitions-schema-1.0.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris solaris-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#macos macos-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux hpux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#aix aix-definitions-schema.xsd">
  <generator>
    <oval:product_name>McAfee's OvalZilla</oval:product_name>
    <oval:product_version>Version 1.0</oval:product_version>
    <oval:schema_version>5.3</oval:schema_version>
    <oval:timestamp>2026-03-31T00:34:28-05:00</oval:timestamp>
  </generator>
  <definitions>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:75844" version="21">
      <metadata>
        <title>Unix File Existence Check</title>
        <description>
The file check is used to determine the existence of a file.
</description>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 11</platform>
          <platform>HP-UX 11 family</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:com.mcafee.primitives:tst:75845" />
        <criterion test_ref="oval:com.mcafee.oval:tst:64764" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:73244" version="23">
      <metadata>
        <title>Unix File Check</title>
        <description>
The file check is used to analyze files and determine Permissions, Ownership, Bit settings, size, etc.
</description>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 11</platform>
          <platform>HP-UX 11 family</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:com.mcafee.primitives:tst:73245" />
        <criterion test_ref="oval:com.mcafee.oval:tst:64764" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:51101" version="28">
      <metadata>
        <title>Text File Content Check</title>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 4 Advanced Server</platform>
          <platform>Red Hat Enterprise Linux 4 Enterprise Server</platform>
          <platform>Red Hat Enterprise Linux 4 Workstation Server</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux (v.5 server)</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Sun Solaris 11</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003, x86</platform>
          <platform>Microsoft Windows Server 2003, x64</platform>
          <platform>Microsoft Windows Vista, x86</platform>
          <platform>Microsoft Windows Vista, x64</platform>
          <platform>Microsoft Windows XP, x86</platform>
          <platform>Microsoft Windows XP, x64</platform>
          <platform>Microsoft Windows 2000, x86</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 7, x86</platform>
          <platform>Microsoft Windows 7, x64</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008 R2, x64</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8, x86</platform>
          <platform>Microsoft Windows 8, x64</platform>
          <platform>Microsoft Windows Server 2012, x64</platform>
          <platform>Microsoft Windows 8.1, x86</platform>
          <platform>Microsoft Windows 8.1, x64</platform>
          <platform>Microsoft Windows Server 2012 R2, x64</platform>
          <platform>Microsoft Windows 10, x86</platform>
          <platform>Microsoft Windows 10, x64</platform>
          <platform>Microsoft Windows Server 2016, x64</platform>
          <platform>Microsoft windows</platform>
          <product>Operating System</product>
        </affected>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
Checks the contents of a text file against a known value
</description>
        <oval_repository>
          <dates>
            <submitted date="">
              <contributor organization="McAfee, Inc." />
            </submitted>
            <status_change />
          </dates>
          <status />
        </oval_repository>
      </metadata>
      <criteria comment="Configuration Section" negate="false" operator="OR">
        <criterion comment="Check string value of a configuration line item against a desired value." negate="false" test_ref="oval:com.mcafee.primitives:tst:51102" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:50971" version="19">
      <metadata>
        <title>Mac OS X check for a daemon listening on the target host</title>
        <description>
This test checks for listening services on a unix host by checking values specified by the user. This can be PID, service name, protocol and port or other values.
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <product>Operating System</product>
        </affected>
      </metadata>
      <criteria>
        <criterion test_ref="oval:com.mcafee.primitives:tst:50972" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:50968" version="16">
      <metadata>
        <title>Mac OS X Account Check</title>
        <description>
This will check for types of user account information (username, uid, gid, etc.) 
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <product>Operating System</product>
        </affected>
      </metadata>
      <criteria>
        <criterion test_ref="oval:com.mcafee.primitives:tst:50970" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:50967" version="19">
      <metadata>
        <title>Mac OS X nvram data</title>
        <description>
This test pulls data from the 'nvram -p' output
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <product>Operating System</product>
        </affected>
      </metadata>
      <criteria>
        <criterion test_ref="oval:com.mcafee.primitives:tst:50966" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:50965" version="15">
      <metadata>
        <title>Test password compliance</title>
        <description>
Test Mac OS password compliance. This can be alpha, numeric, and length or other values
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <product>Operating System</product>
        </affected>
      </metadata>
      <criteria>
        <criterion comment="MacOSX Password policy test." test_ref="oval:com.mcafee.primitives:tst:50964" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:402696" version="20">
      <metadata>
        <title>Text File Content54 Check</title>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 4 Advanced Server</platform>
          <platform>Red Hat Enterprise Linux 4 Enterprise Server</platform>
          <platform>Red Hat Enterprise Linux 4 Workstation Server</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux (v.5 server)</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003, x86</platform>
          <platform>Microsoft Windows Server 2003, x64</platform>
          <platform>Microsoft Windows Vista, x86</platform>
          <platform>Microsoft Windows Vista, x64</platform>
          <platform>Microsoft Windows XP, x86</platform>
          <platform>Microsoft Windows XP, x64</platform>
          <platform>Microsoft Windows 2000, x86</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 7, x86</platform>
          <platform>Microsoft Windows 7, x64</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008 R2, x64</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8, x86</platform>
          <platform>Microsoft Windows 8, x64</platform>
          <platform>Microsoft Windows Server 2012, x64</platform>
          <platform>Microsoft Windows 8.1, x86</platform>
          <platform>Microsoft Windows 8.1, x64</platform>
          <platform>Microsoft Windows Server 2012 R2, x64</platform>
          <platform>Microsoft Windows 10, x86</platform>
          <platform>Microsoft Windows 10, x64</platform>
          <platform>Microsoft Windows Server 2016, x64</platform>
          <platform>Microsoft windows</platform>
          <product>Operating System</product>
        </affected>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
Checks the contents of a text file against a known value
</description>
        <oval_repository>
          <dates>
            <submitted date="">
              <contributor organization="McAfee, Inc." />
            </submitted>
            <status_change />
          </dates>
          <status />
        </oval_repository>
      </metadata>
      <criteria comment="Configuration Section" negate="false" operator="OR">
        <criterion comment="Check string value of a configuration line item against a desired value." negate="false" test_ref="oval:com.mcafee.primitives:tst:402697" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:20071424996" version="30">
      <metadata>
        <title>Unix Check system configuration file where the setting is a string</title>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 11</platform>
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <platform>HP-UX 11 family</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
        <description />
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:com.mcafee.primitives:tst:20071425468" />
        <criterion test_ref="oval:com.mcafee.oval:tst:64764" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:20071424513" version="28">
      <metadata>
        <title>Unix Check system configuration file where the setting is a integer</title>
        <description>
Check a system configuration file where the setting is a integer
</description>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 11</platform>
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <platform>HP-UX 11 family</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:com.mcafee.primitives:tst:20071425197" />
        <criterion test_ref="oval:com.mcafee.oval:tst:64764" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:20071424469" version="33">
      <metadata>
        <title>Unix inetd Check</title>
        <description>
The inetd test is used to check information associated with different Internet services
</description>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 11</platform>
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <platform>HP-UX 11 family</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <product>Operating System</product>
        </affected>
        <description />
      </metadata>
      <criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:com.mcafee.primitives:tst:51040" />
          <criterion test_ref="oval:com.mcafee.oval:tst:64764" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:20071424324" version="18">
      <metadata>
        <title>Check the content of an XML file for known values</title>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 4 Advanced Server</platform>
          <platform>Red Hat Enterprise Linux 4 Enterprise Server</platform>
          <platform>Red Hat Enterprise Linux 4 Workstation Server</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux (v.5 server)</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003, x86</platform>
          <platform>Microsoft Windows Server 2003, x64</platform>
          <platform>Microsoft Windows Vista, x86</platform>
          <platform>Microsoft Windows Vista, x64</platform>
          <platform>Microsoft Windows XP, x86</platform>
          <platform>Microsoft Windows XP, x64</platform>
          <platform>Microsoft Windows 2000, x86</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 7, x86</platform>
          <platform>Microsoft Windows 7, x64</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008 R2, x64</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8, x86</platform>
          <platform>Microsoft Windows 8, x64</platform>
          <platform>Microsoft Windows Server 2012, x64</platform>
          <platform>Microsoft Windows 8.1, x86</platform>
          <platform>Microsoft Windows 8.1, x64</platform>
          <platform>Microsoft Windows Server 2012 R2, x64</platform>
          <platform>Microsoft Windows 10, x86</platform>
          <platform>Microsoft Windows 10, x64</platform>
          <platform>Microsoft Windows Server 2016, x64</platform>
          <platform>Microsoft windows</platform>
          <product>Operating System</product>
        </affected>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
This test will verify the content of an xml file given an XPATH expression or based upon a regular expression match.
</description>
        <oval_repository>
          <dates>
            <submitted date="">
              <contributor organization="McAfee, Inc." />
            </submitted>
            <status_change />
          </dates>
          <status />
        </oval_repository>
      </metadata>
      <criteria negate="false" operator="OR">
        <criterion comment="Check state of a service at the specified runlevel." negate="false" test_ref="oval:com.mcafee.primitives:tst:20071425996" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:20071423991" version="27">
      <metadata>
        <title>Check the file permissions of a file</title>
        <description>
This test compares current file permissions against a given set of permissions
</description>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 11</platform>
          <platform>HP-UX 11 family</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
      </metadata>
      <criteria>
        <criterion test_ref="oval:com.mcafee.primitives:tst:20071425437" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:20071423877" version="31">
      <metadata>
        <title>Check the state of an environment variable</title>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>HP-UX 11 family</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 4 Advanced Server</platform>
          <platform>Red Hat Enterprise Linux 4 Enterprise Server</platform>
          <platform>Red Hat Enterprise Linux 4 Workstation Server</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux (v.5 server)</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>Sun Solaris 11</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003, x86</platform>
          <platform>Microsoft Windows Server 2003, x64</platform>
          <platform>Microsoft Windows Vista, x86</platform>
          <platform>Microsoft Windows Vista, x64</platform>
          <platform>Microsoft Windows XP, x86</platform>
          <platform>Microsoft Windows XP, x64</platform>
          <platform>Microsoft Windows 2000, x86</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 7, x86</platform>
          <platform>Microsoft Windows 7, x64</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008 R2, x64</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8, x86</platform>
          <platform>Microsoft Windows 8, x64</platform>
          <platform>Microsoft Windows Server 2012, x64</platform>
          <platform>Microsoft Windows 8.1, x86</platform>
          <platform>Microsoft Windows 8.1, x64</platform>
          <platform>Microsoft Windows Server 2012 R2, x64</platform>
          <platform>Microsoft Windows 10, x86</platform>
          <platform>Microsoft Windows 10, x64</platform>
          <platform>Microsoft Windows Server 2016, x64</platform>
          <platform>Microsoft windows</platform>
          <product>Operating System</product>
        </affected>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
The environment variable test element is used to check an environment variable found on the system. For example, PAGER, EDITOR, DISPLAY and PATH are common environment variables.
</description>
      </metadata>
      <criteria comment="Configuration Section" negate="false" operator="AND">
        <criterion comment="Check state of a service at the specified runlevel." negate="false" test_ref="oval:com.mcafee.primitives:tst:20071425274" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:20071423855" version="31">
      <metadata>
        <title>Unix Directory Check</title>
        <description>
The directory check is used to analyze directories and determine Permissions, Ownership, Bit settings, size, etc.
</description>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 11</platform>
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <platform>HP-UX 11 family</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion test_ref="oval:com.mcafee.primitives:tst:200912221259" />
        <criterion test_ref="oval:com.mcafee.oval:tst:64764" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.primitives:def:20071423372" version="29">
      <metadata>
        <title>Compare the owner of a file to a known value</title>
        <affected family="unix">
          <platform>Oracle Linux 6</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Debian Linux 8</platform>
          <platform>Sun Solaris 11</platform>
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>HP-UX 11 family</platform>
          <platform>HP-UX 11.11</platform>
          <platform>HP-UX 11.23</platform>
          <platform>HP-UX 11.31</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>IBM AIX 7.1</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>CentOS CentOS 6</platform>
          <product>Operating System</product>
        </affected>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
This test compares the owner of a file to a specified user name value.
</description>
      </metadata>
      <criteria>
        <criterion test_ref="oval:com.mcafee.primitives:tst:20071425281" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:87708" version="3">
      <metadata>
        <title>Mozilla Firefox 3.6.3, Mozilla Firefox 3.5.10 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Firefox version 3.5.10/3.6.3 is installed.
</description>
        <reference ref_id="CVE-2010-1121" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-25.html" source="Mozilla" />
        <vendor_data published_on="2010-04-01" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Firefox present and version is less than 3.5.10/3.6.3" negate="true" operator="AND">
        <criterion comment="Mozilla Firefox Product Version is less than 3.5.10/3.6.3" test_ref="oval:com.mcafee.oval:tst:87709" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:87698" version="2">
      <metadata>
        <title>Mozilla Firefox 3.6.2 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Firefox 3.6.x is present and  Mozilla Firefox 3.6.2 is installed.
</description>
        <reference ref_id="CVE-2010-1028" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-08.html" source="Mozilla" />
        <vendor_data published_on="2010-03-22" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will check the negative condition that if Mozilla Firefox is installed and version is between 3.6.0 and 3.6.2 return fail" negate="true" operator="AND">
        <criterion comment="Mozilla Firefox is Present" test_ref="oval:com.mcafee.oval:tst:87699" />
        <criterion comment="Mozilla Firefox Product Version is greater than equal to 3.6 and less than 3.6.2" test_ref="oval:com.mcafee.oval:tst:87700" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:87460" version="3">
      <metadata>
        <title>Apple Safari 4.0 for Mac OS X Arbitrary Code Execution Vulnerability</title>
        <description>
This will validate whether Apple Safari 4.0 is installed
</description>
        <reference ref_id="CVE-2010-1120" ref_url="http://support.apple.com/kb/HT4131" source="CVE" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
      </metadata>
      <criteria comment="This test will check the negative condition for Apple Safari is installed and return fail if version is 4.0" negate="true" operator="AND">
        <criterion comment="Apple Safari for Mac is Present" test_ref="oval:com.mcafee.oval:tst:87332" />
        <criterion comment="Apple Safari Product Version is equal to 4.0" test_ref="oval:com.mcafee.oval:tst:87459" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:87336" version="2">
      <metadata>
        <title>Apple QuickTime 7.6.6 Security Update for Mac OS</title>
        <description>
This will validate whether Apple QuickTime 7.x is installed and version is 7.6.6
</description>
        <reference ref_id="CVE-2009-2837" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0059" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0060" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0062" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0514" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0515" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0516" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0517" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0518" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0519" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0520" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <reference ref_id="CVE-2010-0526" ref_url="http://support.apple.com/kb/HT4104" source="Apple" />
        <vendor_data published_on="2010-04-01" severity="Critical" vendor="Apple" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
      </metadata>
      <criteria comment="This test will check the negative condition for Apple QuickTime is installed and return fail if version is between 7.0 and 7.6.5" negate="true" operator="AND">
        <criterion comment="Apple QuickTime for Mac is Present" test_ref="oval:com.mcafee.oval:tst:87338" />
        <criterion comment="Apple QuickTime Product Version is greater than or equal to 7.0 and less than 7.6.6" test_ref="oval:com.mcafee.oval:tst:87339" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:84641" version="3">
      <metadata>
        <title>McAfee Security for Mac is Installed and Running</title>
        <description>
This will validate that McAfee Security for Mac is installed and  running.
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:72104" />
        <criterion comment="McAfee Security for Mac fmp Service is Running" test_ref="oval:com.mcafee.oval:tst:72132" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75742" version="4">
      <metadata>
        <title>Yahoo! Messenger for Mac Minimum Product Version</title>
        <description>
This will validate that the version of Yahoo! Messenger installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Yahoo! Messenger Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:75743" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75737" version="9">
      <metadata>
        <title>Adobe Flash Player for Mac Minimum Product Version</title>
        <description>
This will validate that the version of Adobe Flash Player installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple macOS 10.12</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="OR">
        <criterion comment="Adobe Flash Player Product Version" test_ref="oval:com.mcafee.oval:tst:75738" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75721" version="9">
      <metadata>
        <title>Adobe Reader for Mac Minimum Product Version</title>
        <description>
This will validate that the version of Adobe Reader installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple macOS 10.12</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="OR">
        <criterion comment="Adobe Reader 9 Product Version" test_ref="oval:com.mcafee.oval:tst:75722" />
        <criterion comment="Adobe Reader 10 Product Version" test_ref="oval:com.mcafee.oval:tst:75723" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75706" version="9">
      <metadata>
        <title>Firefox Browser for Mac Minimum Product Version</title>
        <description>
This will validate that the version of Firefox browser installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.6</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Firefox Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:75707" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75691" version="10">
      <metadata>
        <title>Skype for Mac Minimum Product Version</title>
        <description>
This will validate that the version of Skype installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple macOS 10.12</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Skype Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:75692" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75687" version="9">
      <metadata>
        <title>QuickTime Player for Mac Minimum Product Version</title>
        <description>
This will validate that the version of QuickTime Player installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple macOS 10.12</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="QuickTime Player Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:75688" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75682" version="11">
      <metadata>
        <title>VLC media player for Mac Minimum Product Version</title>
        <description>
This will validate that the version of VLC media player installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple macOS 10.12</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="OR">
        <criterion comment="VLC media player Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:75683" />
        <criterion comment="VLC media player Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:204024" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75662" version="10">
      <metadata>
        <title>Apple iTunes for Mac Minimum Product Version</title>
        <description>
This will validate that the version of Apple iTunes installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple macOS 10.12</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="iTunes Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:75663" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75657" version="11">
      <metadata>
        <title>Opera for Mac Minimum Product Version</title>
        <description>
This will validate that the version of  Opera browser installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple macOS 10.12</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Opera browser Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:75658" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:75652" version="10">
      <metadata>
        <title>Apple Safari for Mac Minimum Product Version</title>
        <description>
This will validate that the version of Apple Safari browser installed on Mac OS meets the minimum required version
</description>
        <affected family="macos">
          <platform>Apple macOS 10.12</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria comment="Verify the version from 2 different files" operator="OR">
        <criterion comment="Apple Safari Minimum Product Version - version.plist file" test_ref="oval:com.mcafee.oval:tst:75653" />
        <criterion comment="Apple Safari Minimum Product Version - Info.plist file" test_ref="oval:com.mcafee.oval:tst:201663" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:73770" version="1">
      <metadata>
        <title>McAfee ePO Agent (for Mac) Minimum Product Version</title>
        <description>
This will validate that McAfee ePO Agent (for Mac) is installed and meets the required minimum product version
</description>
        <affected family="unix">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee ePO Agent (for Mac) File Existence Test" test_ref="oval:com.mcafee.oval:tst:73771" />
        <criterion comment="McAfee ePO Agent (for Mac) Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:73772" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:73766" version="1">
      <metadata>
        <title>McAfee ePO Agent (for Mac) Framework Service Running</title>
        <description>
This will validate that McAfee ePO agent (for Mac) framework service is running.
</description>
        <affected family="unix">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
      </metadata>
      <criteria comment="McAfee ePO Agent for Mac Running">
        <criterion comment="McAfee ePO agent frameworkd process is running" test_ref="oval:com.mcafee.oval:tst:73767" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:73431" version="24">
      <metadata>
        <title>Reduce the sudo Timeout Period</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <reference ref_id="5.3" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="5.3" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="5.3" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="5.3" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
        <reference ref_id="5.3" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
        <description>
Reduce the amount of time a users privileges are escalated after issuing the sudo command
</description>
      </metadata>
      <criteria>
        <criterion comment="File existence pre-req for /etc/sudoers" test_ref="oval:com.mcafee.oval:tst:200803060071" />
        <criterion comment="Verify the timestamp_timeout value in /etc/sudoers" test_ref="oval:com.mcafee.oval:tst:73991" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:73430" version="7">
      <metadata>
        <title>Use an Open Firmware or EFI password</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="5.8" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <description>
Use an Open Firmware or EFI password
</description>
      </metadata>
      <criteria>
        <criterion comment="Verify Open Firmware or EFI security mode is command" test_ref="oval:com.mcafee.oval:tst:73440" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:73290" version="3">
      <metadata>
        <title>McAfee Security for Mac Anti-malware Maximum DAT Age</title>
        <description>
This check will validate that the maximum age of the DAT for McAfee Security for Mac Anti-malware is less than the value provided by the referencing benchmark. The benchmark should provide the maximum age as a number of seconds. For example, if the policy wanted to ensure that the currently installed version of the McAfee Security for Mac Anti-malware DAT was less than 10 days old, the value provided should be 864,000 (10 days * 24 hours * 60 minutes * 60 seconds).
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:72104" />
        <criterion comment="McAfee Security for Mac ProductConfig File Existence Test" test_ref="oval:com.mcafee.oval:tst:73363" />
        <criterion comment="McAfee Security for Mac DAT File Existence Test" test_ref="oval:com.mcafee.oval:tst:73372" />
        <criterion comment="McAfee Security for Mac Anti-malware Maximum DAT Age" test_ref="oval:com.mcafee.oval:tst:73291" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:73136" version="3">
      <metadata>
        <title>McAfee Security for Mac Real Time Detection</title>
        <description>
This will validate that McAfee Security for Mac is installed and that Real Time Detection is enabled.
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:72104" />
        <criterion comment="McAfee Security for Mac fmp Service is Running" test_ref="oval:com.mcafee.oval:tst:72132" />
        <criterion comment="McAfee Security for Mac On-access Scan - Enabled" test_ref="oval:com.mcafee.oval:tst:73362" />
        <criterion comment="McAfee Security for Mac ProductConfig File Existence Test" test_ref="oval:com.mcafee.oval:tst:73363" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:72083" version="3">
      <metadata>
        <title>McAfee Security for Mac Minimum Product Version</title>
        <description>
This will validate that McAfee Security for Mac is installed and meets the required Minimum Product Version.
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:72104" />
        <criterion comment="McAfee Security for Mac ProductConfig File Existence Test" test_ref="oval:com.mcafee.oval:tst:73363" />
        <criterion comment="McAfee Security for Mac Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:73139" />
      </criteria>
    </definition>
    <definition class="inventory" id="oval:com.mcafee.oval:def:50279" version="20" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <metadata>
        <title>The operating system installed on the system is Mac OS X</title>
        <affected family="unix">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
          <platform>Apple macOS 10.14</platform>
          <platform>Apple macOS 10.15</platform>
          <platform>Apple macOS 11</platform>
          <platform>Apple macOS 12</platform>
          <platform>Apple macOS 13</platform>
          <platform>Apple macOS 14</platform>
          <platform>Apple macOS 15</platform>
        </affected>
        <reference ref_id="cpe:/o:apple:macintosh" source="CPE" />
        <description>
The operating system is Apple Mac OS X
</description>
      </metadata>
      <criteria negate="false" operator="AND">
        <criterion comment="OS is Apple Mac OS X" negate="false" test_ref="oval:com.mcafee.oval:tst:50280" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:481240" version="13">
      <metadata>
        <title>Retention time for install.log should be configured appropriately in com.apple.install file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
This check will verify whether the retention time of install.log is set appropriately.
</description>
        <reference ref_id="3.5" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="3.5" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="3.5" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="3.5" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of install.log in com.apple.install file" test_ref="oval:com.mcafee.oval:tst:481239" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:481222" version="13">
      <metadata>
        <title>Retention time for authd.log should be configured appropriately</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
This check will verify whether the retention time of authd.log is set appropriately.
</description>
        <reference ref_id="3.1.3" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="3.1.3" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="3.1.3" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="3.1.3" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of authd.log" test_ref="oval:com.mcafee.oval:tst:481225" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:481221" version="13">
      <metadata>
        <title>Retention time for appfirewall.log should be configured appropriately in /etc/asl.conf</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
This check will verify whether the retention time of appfirewall.log is set appropriately in /etc/asl.conf.
</description>
        <reference ref_id="3.1.2" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="3.1.2" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="3.1.2" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="3.1.2" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of appfirewall.log" test_ref="oval:com.mcafee.oval:tst:481224" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:481220" version="13">
      <metadata>
        <title>Retention time for system.log should be configured appropriately in /etc/asl.conf</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
This check will verify whether the retention time of system.log is set appropriately in /etc/asl.conf.
</description>
        <reference ref_id="3.1.1" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="3.1.1" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="3.1.1" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="3.1.1" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of system.log in /etc/asl.conf" test_ref="oval:com.mcafee.oval:tst:481223" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:479106" version="13">
      <metadata>
        <title>Check to disabling the admins ability to log into another user's active and locked session</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <reference ref_id="5.11" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="5.11" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="5.11" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="5.11" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
        <description>
This check will verify whether the admins ability to log into another user's active and locked session
</description>
      </metadata>
      <criteria operator="OR">
        <criterion comment="File existence pre-req /etc/pam.d/screensaver" negate="true" test_ref="oval:com.mcafee.oval:tst:482307" />
        <criterion comment="Test to disabling the admins and/or user's ability to log into another user's active and locked session" test_ref="oval:com.mcafee.oval:tst:479107" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:469316" version="6">
      <metadata>
        <title>Retention time and when attribute value of install.log should be configured appropriately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <description>
This check will verify whether the retention time of install.log is set appropriately and Verify the 'when' contains "M" for install.log
</description>
        <reference ref_id="3.1.4" source="CIS_Apple_OSX_10.8_Benchmark_v1.1.0" />
        <reference ref_id="3.1.4" source="CIS_Apple_OSX_10.8_Benchmark_v1.2.0" />
        <reference ref_id="3.1.4" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of install.log" test_ref="oval:com.mcafee.oval:tst:469317" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:466599" version="8">
      <metadata>
        <title>Retention time and when attribute value of appfirewall.log should be configured appropriately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <description>
This check will verify whether the retention time of appfirewall.log is set appropriately and Verify the 'when' contains "M" for appfirewall.log
</description>
        <reference ref_id="3.1.3" source="CIS_Apple_OSX_10.8_Benchmark_v1.1.0" />
        <reference ref_id="3.1.3" source="CIS_Apple_OSX_10.8_Benchmark_v1.2.0" />
        <reference ref_id="3.1.3" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of appfirewall.log" test_ref="oval:com.mcafee.oval:tst:466600" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:466598" version="6">
      <metadata>
        <title>Retention time and when attribute value of secure.log should be configured appropriately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <description>
This check will verify whether the retention time of secure.log is set appropriately and Verify the 'when' contains "M" for secure.log
</description>
        <reference ref_id="3.1.2" source="CIS_Apple_OSX_10.8_Benchmark_v1.1.0" />
        <reference ref_id="3.1.2" source="CIS_Apple_OSX_10.8_Benchmark_v1.2.0" />
        <reference ref_id="3.1.2" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of secure.log" test_ref="oval:com.mcafee.oval:tst:466594" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:466585" version="6">
      <metadata>
        <title>Retention time and when attribute value of system.log should be configured appropriately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <description>
This check will verify whether the retention time of system.log is set appropriately and Verify the 'when' contains "M" for system.log
</description>
        <reference ref_id="3.1.1" source="CIS_Apple_OSX_10.8_Benchmark_v1.1.0" />
        <reference ref_id="3.1.1" source="CIS_Apple_OSX_10.8_Benchmark_v1.2.0" />
        <reference ref_id="3.1.1" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of system.log" test_ref="oval:com.mcafee.oval:tst:466586" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:416304" version="19">
      <metadata>
        <title>Java 6 is not the default Java runtime</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
This check will verify whether the Java 6 is not the default Java runtime.
</description>
        <reference ref_id="2.11" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="2.11" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="2.11" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="2.11" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
        <reference ref_id="2.10" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
      </metadata>
      <criteria negate="true" operator="OR">
        <criterion comment="Test to verify the Java 6 is the default Java runtime" test_ref="oval:com.mcafee.oval:tst:416305" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:416296" version="3">
      <metadata>
        <title>Retention time for install.log should be configured appropriately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="3.8" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <description>
This check will verify whether the retention time of install.log is set appropriately
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of install.log" test_ref="oval:com.mcafee.oval:tst:416297" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:416291" version="2">
      <metadata>
        <title>Retention time for appfirewall.log should be configured appropriately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
        </affected>
        <reference ref_id="3.7" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <description>
This check will verify whether the retention time of appfirewall.log is set appropriately
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of appfirewall.log" test_ref="oval:com.mcafee.oval:tst:416293" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:416286" version="3">
      <metadata>
        <title>Retention time for wtmp.log should be configured appropriately</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="3.5" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <description>
This check will verify whether the retention time of wtmp.log is set appropriately.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of wtmp.log" test_ref="oval:com.mcafee.oval:tst:416287" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:416271" version="17">
      <metadata>
        <title>Verify that Remote Management - ARDAgent file is removed from the system</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <description>
This check will verify whether the ARDAgent file has been removed from the system.
</description>
        <reference ref_id="2.4.9" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="2.4.9" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="2.4.9" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="2.4.9" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
        <reference ref_id="2.4.9" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
      </metadata>
      <criteria>
        <criterion comment="Test that ARDAgent file does not exist" test_ref="oval:com.mcafee.oval:tst:416272" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:416268" version="5">
      <metadata>
        <title>System authorization - Session authorization ownership</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <description>
This check will verify whether the admins and/or user's session authorization is disabled.
</description>
        <reference ref_id="5.9" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <reference ref_id="5.8" source="CIS_Apple_OSX_10.8_Benchmark_v1.1.0" />
        <reference ref_id="5.10" source="CIS_Apple_OSX_10.8_Benchmark_v1.2.0" />
        <reference ref_id="5.11" source="CIS_Apple_OSX_10.8_Benchmark_v1.2.0" />
      </metadata>
      <criteria negate="true" operator="OR">
        <criterion comment="Test to verify the session authorization ownership" test_ref="oval:com.mcafee.oval:tst:416269" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:402028" version="1">
      <metadata>
        <title>Verify that the sharing service samba is completely disabled in com.apple.smbd.plist file.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a
                    system. Unless absolutely needed, sharing should be turned off or completely disabled so
                    that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of com.apple.smbd.plist (SMB) file." test_ref="oval:com.mcafee.oval:tst:402029" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:402025" version="1">
      <metadata>
        <title>Secure Web Sharing: UserDir should be configured appropriately in httpd-userdir.conf</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.7" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
This check verifies the UserDir set in /private/etc/apache2/extra/httpd-userdir.conf. An attacker
                    might attempt to determine user names using Web requests if UserDir is on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verify the state of UserDir in httpd-userdir.conf file" test_ref="oval:com.mcafee.oval:tst:402026" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:2895620" version="3">
      <metadata>
        <title>Restrict NTP server to loopback interface</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <reference ref_id="2.2.3" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="2.2.3" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="2.2.3" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="2.2.3" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
        <description>
Restrict NTP server to loopback interface. Editing the /etc/ntp-restrict.conf file by adding a control on the loopback interface limits external access.
</description>
      </metadata>
      <criteria>
        <criterion comment="File existence pre-req for /etc/ntp-restrict.conf" test_ref="oval:com.mcafee.oval:tst:2896470" />
        <criterion comment="Verify the restrict value in /etc/ntp-restrict.conf" test_ref="oval:com.mcafee.oval:tst:2896471" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:211664" version="3">
      <metadata>
        <title>Mozilla Firefox 3.6.9, Mozilla Firefox 3.5.12 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Firefox version 3.5.12/3.6.9 is installed.
</description>
        <reference ref_id="CVE-2010-2770" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-58.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2766" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-57.html" source="Mozilla" />
        <reference ref_id="CVE-2010-3168" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-55.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2764" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-63.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2769" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-62.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2768" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-61.html" source="Mozilla" />
        <reference ref_id="CVE-2010-3167" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-56.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2760" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-54.html" source="Mozilla" />
        <reference ref_id="CVE-2010-3166" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-53.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2767" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-51.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2765" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-50.html" source="Mozilla" />
        <reference ref_id="CVE-2010-3169" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-49.html" source="Mozilla" />
        <vendor_data published_on="2010-09-07" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Firefox version is less than 3.5.12/3.6.9" negate="true" operator="AND">
        <criterion comment="Mozilla Firefox Product Version is less than 3.5.12/3.6.9" test_ref="oval:com.mcafee.oval:tst:211684" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:211663" version="2">
      <metadata>
        <title>Mozilla Firefox 3.6.9 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Firefox version 3.6.9 is installed.
</description>
        <reference ref_id="CVE-2010-2762" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-59.html" source="Mozilla" />
        <vendor_data published_on="2010-09-07" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Firefox version is less than 3.6.9" negate="true" operator="AND">
        <criterion comment="Mozilla Firefox Product Version is less than 3.6.9" test_ref="oval:com.mcafee.oval:tst:211683" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:211662" version="2">
      <metadata>
        <title>Mozilla Thunderbird 3.0.7 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Thunderbird 3.0.7 is installed.
</description>
        <reference ref_id="CVE-2010-2763" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-60.html" source="Mozilla" />
        <vendor_data published_on="2010-09-07" severity="High" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Thunderbird version is less than 3.0.7" negate="true" operator="AND">
        <criterion comment="Mozilla Thunderbird Product Version is less than 3.0.7" test_ref="oval:com.mcafee.oval:tst:211682" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:211661" version="2">
      <metadata>
        <title>Mozilla Thunderbird 3.1.3 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Thunderbird 3.1.3 is installed.
</description>
        <reference ref_id="CVE-2010-2762" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-59.html" source="Mozilla" />
        <vendor_data published_on="2010-09-07" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Thunderbird version is less than 3.1.3" negate="true" operator="AND">
        <criterion comment="Mozilla Thunderbird Product Version is less than 3.1.3" test_ref="oval:com.mcafee.oval:tst:211681" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:211660" version="3">
      <metadata>
        <title>Mozilla Thunderbird 3.0.7, Mozilla Thunderbird 3.1.3 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Thunderbird 3.0.7/3.1.3 is installed.
</description>
        <reference ref_id="CVE-2010-2770" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-58.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2766" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-57.html" source="Mozilla" />
        <reference ref_id="CVE-2010-3168" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-55.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2764" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-63.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2769" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-62.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2768" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-61.html" source="Mozilla" />
        <reference ref_id="CVE-2010-3167" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-56.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2760" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-54.html" source="Mozilla" />
        <reference ref_id="CVE-2010-3166" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-53.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2767" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-51.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2765" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-50.html" source="Mozilla" />
        <reference ref_id="CVE-2010-3169" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-49.html" source="Mozilla" />
        <vendor_data published_on="2010-09-07" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Thunderbird version is less than 3.0.7/3.1.3" negate="true" operator="AND">
        <criterion comment="Mozilla Thunderbird Product Version is less than 3.0.7/3.1.3" test_ref="oval:com.mcafee.oval:tst:211680" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:211659" version="2">
      <metadata>
        <title>Mozilla Firefox 3.5.12 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Firefox version 3.5.12 is installed.
</description>
        <reference ref_id="CVE-2010-2763" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-60.html" source="Mozilla" />
        <vendor_data published_on="2010-09-07" severity="High" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Firefox version is less than 3.5.12" negate="true" operator="AND">
        <criterion comment="Mozilla Firefox Product Version is less than 3.5.12" test_ref="oval:com.mcafee.oval:tst:211679" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:211657" version="2">
      <metadata>
        <title>Apple Safari Security Update 5.0.2 for Mac OS X 10.5 and 10.6</title>
        <description>
This will validate whether Apple Safari 5.0.2 Security Update is installed or not.
</description>
        <reference ref_id="CVE-2010-1807" ref_url="http://support.apple.com/kb/HT4333" source="Apple" />
        <reference ref_id="CVE-2010-1806" ref_url="http://support.apple.com/kb/HT4333" source="Apple" />
        <vendor_data published_on="2010-09-07" severity="Critical" vendor="Apple" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
      </metadata>
      <criteria comment="This test checks for the condition that Apple Safari version is less than 5.0.2 and returns negative result of the same." operator="OR">
        <criterion comment="Apple Safari Product Version is less than 5.0.2" negate="true" test_ref="oval:com.mcafee.oval:tst:211675" />
        <criterion comment="Apple Safari Product Version is less than 5.0.2 - Info.plist file" negate="true" test_ref="oval:com.mcafee.oval:tst:211676" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:211656" version="1">
      <metadata>
        <title>Apple Safari Security Update 4.1.2 for Mac OS X 10.4</title>
        <description>
This will validate whether Apple Safari 4.1.2 Security Update is installed or not.
</description>
        <reference ref_id="CVE-2010-1807" ref_url="http://support.apple.com/kb/HT4333" source="Apple" />
        <reference ref_id="CVE-2010-1806" ref_url="http://support.apple.com/kb/HT4333" source="Apple" />
        <vendor_data published_on="2010-09-07" severity="Critical" vendor="Apple" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test checks for the condition that Apple Safari version is less than 4.1.2 and returns negative result of the same." operator="OR">
        <criterion comment="Apple Safari Product Version is less than 4.1.2 - version.plist file" negate="true" test_ref="oval:com.mcafee.oval:tst:211674" />
        <criterion comment="Apple Safari Product Version is less than 4.1.2 - Info.plist file" negate="true" test_ref="oval:com.mcafee.oval:tst:211678" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207405" version="7">
      <metadata>
        <title>Verify that the sharing service Remote Apple Events is completely disabled.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <reference ref_id="2.4.1" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of eppc.plist (Remote Apple Events) file." test_ref="oval:com.mcafee.oval:tst:207347" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207404" version="10">
      <metadata>
        <title>Verify that the sharing service internet sharing is completely disabled.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.8_Benchmark_v1.1.0" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.9_Benchmark_v1.0.0" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.8_Benchmark_v1.2.0" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.9_Benchmark_v1.1.0" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.10_Benchmark_v1.0.0" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of com.apple.InternetSharing.plist (Internet Sharing) file." test_ref="oval:com.mcafee.oval:tst:207352" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207403" version="3">
      <metadata>
        <title>Verify that the sharing service xgridcontrollerd is completely disabled.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of com.apple.xgridcontrollerd.plist (Xgrid) file." test_ref="oval:com.mcafee.oval:tst:207351" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207402" version="3">
      <metadata>
        <title>Verify that the sharing service xgridagentd is completely disabled.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of com.apple.xgridagentd.plist (Xgrid) file." test_ref="oval:com.mcafee.oval:tst:207350" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207401" version="4">
      <metadata>
        <title>Verify that the sharing service Bonjour mDNSResponderHelper is completely disabled.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of com.apple.mDNSResponderHelper.plist (Bonjour) file." test_ref="oval:com.mcafee.oval:tst:207349" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207400" version="4">
      <metadata>
        <title>Verify that the sharing service Bonjour mDNSResponder is completely disabled.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of com.apple.mDNSResponder.plist (Bonjour) file." test_ref="oval:com.mcafee.oval:tst:207348" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207399" version="4">
      <metadata>
        <title>Verify that the sharing service web is completely disabled.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of org.apache.httpd.plist (Web) file" test_ref="oval:com.mcafee.oval:tst:207346" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207398" version="2">
      <metadata>
        <title>Verify that the sharing service samba is completely disabled.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of smbd.plist (SMB) file." test_ref="oval:com.mcafee.oval:tst:207345" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207397" version="4">
      <metadata>
        <title>Verify that the Apple Filing Protocol sharing service is completely disabled</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of com.apple.AppleFileServer.plist (AFP) file." test_ref="oval:com.mcafee.oval:tst:207343" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207396" version="4">
      <metadata>
        <title>Verify that the File Transfer Protocol sharing service is completely disabled</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.14" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
Various sharing services can offer an attacker a conduit to compromise a system. Unless absolutely needed, sharing should be turned off or completely disabled so that it cannot be turned on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of ftp.plist (FTP) file." test_ref="oval:com.mcafee.oval:tst:207344" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207395" version="8">
      <metadata>
        <title>Date &amp; Time Preferences: Time server should be configured appropriately</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.5.1" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <reference ref_id="2.2" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <description>
This check verifies the time server hostname or IP set in /private/etc/ntp.conf. Having the correct date, time, time zone, and daylight saving time setting is important.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verfiy the time syncronization source - time server name" test_ref="oval:com.mcafee.oval:tst:207335" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207394" version="5">
      <metadata>
        <title>Secure Web Sharing: TraceEnable should be configured appropriately</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.7" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
This check verifies the TraceEnable set in /etc/apache2/httpd.conf.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verify the state of TraceEnable" test_ref="oval:com.mcafee.oval:tst:207320" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207393" version="3">
      <metadata>
        <title>Secure Web Sharing: UserDir should be configured appropriately</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
        </affected>
        <reference ref_id="2.4.14.7" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
This check verifies the UserDir set in /etc/apache2/httpd.config. An attacker might attempt to determine user names using Web requests if UserDir is on.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verify the state of UserDir" test_ref="oval:com.mcafee.oval:tst:207319" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207392" version="7">
      <metadata>
        <title>Secure Web Sharing: ServerSignature should be configured appropriately</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.7" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
This check verifies the ServerSignature set  in /etc/apache2/httpd.conf. ServerSignature should be set to Off  in order to limit the information the server gives out about its version.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verfiy the state of ServerSignature" test_ref="oval:com.mcafee.oval:tst:207318" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207388" version="5">
      <metadata>
        <title>Secure SMB: client ntlmv2 auth should be configured appropriately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
        </affected>
        <reference ref_id="2.4.14.4" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
This check determines whether or not smbclient will attempt to authenticate itself to servers using the NTLMv2 encrypted password response.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verify the state of client ntlmv2 auth" test_ref="oval:com.mcafee.oval:tst:207306" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207387" version="3">
      <metadata>
        <title>Secure SMB: guest OK should be configured appropirately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
        </affected>
        <reference ref_id="2.4.14.4" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
This check determines the guest access to connect to the service.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verfiy the state of guest ok" test_ref="oval:com.mcafee.oval:tst:207305" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207386" version="8">
      <metadata>
        <title>Retention time for secure.log should be configured appropriately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.7.1.1" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <reference ref_id="3.6" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <description>
This check will verify whether the retention time of secure.log is set appropriately
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of secure.log" test_ref="oval:com.mcafee.oval:tst:207369" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207367" version="8">
      <metadata>
        <title>Retention time for system.log should be configured appropriately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.7.1.1" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <reference ref_id="3.4" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <description>
This check will verify whether the retention time of system.log is set appropriately
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the retention time of system.log" test_ref="oval:com.mcafee.oval:tst:207368" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207363" version="23">
      <metadata>
        <title>User home directories should be set with appropriate permissions</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <reference ref_id="5.1.1" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="5.1.1" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="5.1.1" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="5.1.1" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
        <reference ref_id="5.1.1" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
        <reference ref_id="2.5.2" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
This check will verify the directory permissions set on home folder to restrict access to the owner of the folder
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the directory permission in /Users" test_ref="oval:com.mcafee.oval:tst:207364" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207333" version="8">
      <metadata>
        <title>Date &amp; Time Preferences: Time synchronoization should be configured appropriately</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.5.1" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <reference ref_id="2.2" source="CIS_Apple_OSX_10.8_Benchmark_v1.0.0" />
        <description>
This check verified the time synchronization set in /private/etc/hostconfig. Having the correct date, time, time zone, and daylight saving time setting is important.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verify the state of TIMESYNC parameter" test_ref="oval:com.mcafee.oval:tst:207334" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207316" version="5">
      <metadata>
        <title>Secure Web Sharing: ServerTokens should be configured appropriately</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <reference ref_id="2.4.14.7" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
This check verifies the ServerTokens set in /etc/apache2/httpd.conf. ServerTokens should be set appropriately to limit the information the server gives out about its version and the underlying operating system.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verify the state of ServerTokens" test_ref="oval:com.mcafee.oval:tst:207317" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:207303" version="3">
      <metadata>
        <title>Secure SMB: restrict anonymous should be configured appropirately.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
        </affected>
        <reference ref_id="2.4.14.4" source="CIS Mac OS X Leopard (10.5.x) Benchmark" />
        <description>
This check determines whether user and group list information is returned for an anonymous connection.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Verify the state of restrict anonymous" test_ref="oval:com.mcafee.oval:tst:207304" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206698" version="7">
      <metadata>
        <title>Verify that IOBluetoothHIDDriver.kext has been removed from the system</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <description>
This check will verify that the IOBluetoothHIDDriver.kext Bluetooth extentions have been removed from the system
</description>
      </metadata>
      <criteria>
        <criterion comment="Test that IOBluetoothHIDDriver.kext extention does not exist" test_ref="oval:com.mcafee.oval:tst:206975" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206697" version="7">
      <metadata>
        <title>Verify that IOBluetoothFamily.kext has been removed from the system</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
          <platform>Apple Mac OS X 10.8</platform>
        </affected>
        <description>
This check will verify that the IOBluetoothFamily.kext Bluetooth extentions have been removed from the system
</description>
      </metadata>
      <criteria>
        <criterion comment="Test that IOBluetoothFamily.kext extention does not exist" test_ref="oval:com.mcafee.oval:tst:206974" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206676" version="2">
      <metadata>
        <title>Mozilla Firefox 3.6.8 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Firefox 3.6.x is present and  Mozilla Firefox 3.6.8 is installed.
</description>
        <reference ref_id="CVE-2010-2755" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-48.html" source="Mozilla" />
        <vendor_data published_on="2010-07-20" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will check the negative condition that if Mozilla Firefox is installed and version is eqaul to 3.6.7 return fail" negate="true" operator="AND">
        <criterion comment="Mozilla Firefox is Present" test_ref="oval:com.mcafee.oval:tst:87699" />
        <criterion comment="Mozilla Firefox Product Version is equal to 3.6.7" test_ref="oval:com.mcafee.oval:tst:206677" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206658" version="3">
      <metadata>
        <title>McAfee Internet Security for Mac - Site Advisor Minimum Product Version</title>
        <description>
This will validate that Site Advisor is installed and meets the required Minimum Product Version as a part of McAfee Internet Security for Mac.
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Internet Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:206608" />
        <criterion comment="McAfee Site Advisor for Mac Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:206659" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206637" version="3">
      <metadata>
        <title>McAfee Internet Security for Mac Application Protection Service Running</title>
        <description>
This will validate that McAfee Internet Security for Mac is installed and that Application Protection Service is running.
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Internet Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:206608" />
        <criterion comment="McAfee Internet Security for Mac fmp Service is Running" test_ref="oval:com.mcafee.oval:tst:206614" />
        <criterion comment="McAfee Internet Security for Mac Application Protection Service Running" test_ref="oval:com.mcafee.oval:tst:206636" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206632" version="3">
      <metadata>
        <title>McAfee Internet Security for Mac Desktop Firewall Service Running</title>
        <description>
This will validate that McAfee Internet Security for Mac is installed and that Desktop Firewall Service is running.
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Internet Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:206608" />
        <criterion comment="McAfee Internet Security for Mac fmp Service is Running" test_ref="oval:com.mcafee.oval:tst:206614" />
        <criterion comment="McAfee Internet Security for Mac Desktop Firewall Service Running" test_ref="oval:com.mcafee.oval:tst:206633" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206617" version="3">
      <metadata>
        <title>McAfee Internet Security for Mac Anti-malware Maximum DAT Age</title>
        <description>
This check will validate that the maximum age of the DAT for McAfee Internet Security for Mac Anti-malware is less than the value provided by the referencing benchmark. The benchmark should provide the maximum age as a number of seconds. For example, if the policy wanted to ensure that the currently installed version of the McAfee Security for Mac Anti-malware DAT was less than 10 days old, the value provided should be 864,000 (10 days * 24 hours * 60 minutes * 60 seconds).
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Internet Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:206608" />
        <criterion comment="McAfee Internet Security for Mac Anti-malware Maximum DAT Age Test" test_ref="oval:com.mcafee.oval:tst:206618" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206616" version="3">
      <metadata>
        <title>McAfee Internet Security for Mac Real Time Scan - On Access Scan Service Running</title>
        <description>
This will validate that McAfee Internet Security for Mac is installed and that Real Time On Access Scan Service is running.
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Internet Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:206608" />
        <criterion comment="McAfee Internet Security for Mac fmp Service is Running" test_ref="oval:com.mcafee.oval:tst:206614" />
        <criterion comment="McAfee Internet Security for Mac On-access Scan Service Running" test_ref="oval:com.mcafee.oval:tst:206615" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206607" version="3">
      <metadata>
        <title>McAfee Internet Security for Mac Minimum Product Version</title>
        <description>
This will validate that McAfee Internet Security for Mac is installed and meets the required Minimum Product Version.
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="McAfee Internet Security for Mac is Installed" test_ref="oval:com.mcafee.oval:tst:206608" />
        <criterion comment="McAfee Internet Security for Mac Minimum Product Version" test_ref="oval:com.mcafee.oval:tst:206609" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206597" version="2">
      <metadata>
        <title>Apple Safari 5.0.1 Security Update for Mac OS X 10.5 and 10.6</title>
        <description>
This will validate whether Apple Safari 5.0.1 Security Update is installed or not.
</description>
        <reference ref_id="HT4276" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1778" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1796" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1780" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1782" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1783" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1784" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1785" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1786" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1787" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1788" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1789" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1790" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1791" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1792" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1793" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <vendor_data published_on="2010-07-28" severity="Critical" vendor="Apple" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
      </metadata>
      <criteria comment="This test checks for the condition that Apple Safari version is less than 5.0.1 and returns negative result of the same." operator="OR">
        <criterion comment="Apple Safari Product Version is less than 5.0.1" negate="true" test_ref="oval:com.mcafee.oval:tst:206599" />
        <criterion comment="Apple Safari Product Version is less than 5.0.1 - Info.plist file" negate="true" test_ref="oval:com.mcafee.oval:tst:206600" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206591" version="1">
      <metadata>
        <title>Apple Safari 4.1.1 Security Update for Mac OS X 10.4</title>
        <description>
This will validate whether Apple Safari 4.1.1 Security Update is installed or not.
</description>
        <reference ref_id="HT4276" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1778" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1796" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1780" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1782" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1783" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1784" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1785" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1786" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1787" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1788" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1789" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1790" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1791" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1792" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <reference ref_id="CVE-2010-1793" ref_url="http://support.apple.com/kb/HT4276" source="Apple" />
        <vendor_data published_on="2010-07-28" severity="Critical" vendor="Apple" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test checks for the condition that Apple Safari version is less than 4.1.1 and returns negative result of the same." operator="OR">
        <criterion comment="Apple Safari Product Version is less than 4.1.1 - version.plist file" negate="true" test_ref="oval:com.mcafee.oval:tst:206595" />
        <criterion comment="Apple Safari Product Version is less than 4.1.1 - Info.plist file" negate="true" test_ref="oval:com.mcafee.oval:tst:206596" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206574" version="1">
      <metadata>
        <title>Apple iTunes for Mac Security Update 9.2.1 is installed or not</title>
        <description>
This will validate that the security update 9.2.1 for Apple iTunes on Mac is installed or not
</description>
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
        <reference ref_id="CVE-2010-1777" ref_url="http://www.support.apple.com/kb/HT4263" source="Apple" />
        <reference ref_id="HT4263" ref_url="http://www.support.apple.com/kb/HT4263" source="Apple" />
        <vendor_data published_on="2010-07-19" severity="Critical" vendor="Apple" />
      </metadata>
      <criteria comment="This test will check the negative condition that if Apple iTunes is installed and version is less than 9.2.1 return fail" negate="true" operator="AND">
        <criterion comment="Apple iTunes for Mac installed version is less than 9.2.1" test_ref="oval:com.mcafee.oval:tst:206579" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206068" version="3">
      <metadata>
        <title>Mozilla Thunderbird 3.0.6, Mozilla Thunderbird 3.1.1 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Thunderbird 3.0.6/3.1.1 is installed.
</description>
        <reference ref_id="CVE-2010-1211" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-34.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1212" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-34.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2752" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-39.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2753" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-40.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1205" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-41.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1213" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-42.html" source="Mozilla" />
        <reference ref_id="CVE-2010-0654" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-46.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2754" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-47.html" source="Mozilla" />
        <vendor_data published_on="2010-07-20" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Thunderbird version is less than 3.0.6/3.1.1" negate="true" operator="AND">
        <criterion comment="Mozilla Thunderbird Product Version is less than 3.0.6/3.1.1" test_ref="oval:com.mcafee.oval:tst:206069" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206065" version="3">
      <metadata>
        <title>Mozilla Thunderbird 3.1.1 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Thunderbird 3.1.1 is installed.
</description>
        <reference ref_id="CVE-2010-1215" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-38.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1207" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-43.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1210" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-44.html" source="Mozilla" />
        <vendor_data published_on="2010-07-20" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Thunderbird version is less than 3.1.1" negate="true" operator="AND">
        <criterion comment="Mozilla Thunderbird Product Version is less than 3.1.1" test_ref="oval:com.mcafee.oval:tst:206066" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206038" version="3">
      <metadata>
        <title>Mozilla Firefox 3.6.7 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Firefox version 3.6.7 is installed.
</description>
        <reference ref_id="CVE-2010-1215" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-38.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1207" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-43.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1210" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-44.html" source="Mozilla" />
        <vendor_data published_on="2010-07-20" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Firefox version is less than 3.6.7" negate="true" operator="AND">
        <criterion comment="Mozilla Firefox Product Version is less than 3.6.7" test_ref="oval:com.mcafee.oval:tst:206039" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:206035" version="3">
      <metadata>
        <title>Mozilla Firefox 3.6.7, Mozilla Firefox 3.5.11 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Firefox version 3.5.11/3.6.7 is installed.
</description>
        <reference ref_id="CVE-2010-1211" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-34.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1212" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-34.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1208" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-35.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1209" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-36.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1214" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-37.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2752" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-39.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2753" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-40.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1205" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-41.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1213" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-42.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1206" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-45.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2751" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-45.html" source="Mozilla" />
        <reference ref_id="CVE-2010-0654" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-46.html" source="Mozilla" />
        <reference ref_id="CVE-2010-2754" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-47.html" source="Mozilla" />
        <vendor_data published_on="2010-07-20" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Firefox version is less than 3.5.11/3.6.7" negate="true" operator="AND">
        <criterion comment="Mozilla Firefox Product Version is less than 3.5.11/3.6.7" test_ref="oval:com.mcafee.oval:tst:206036" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:203971" version="2">
      <metadata>
        <title>Mozilla Thunderbird 3.0.5 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Thunderbird 3.0.5 is installed.
</description>
        <reference ref_id="CVE-2010-1199" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-30.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1196" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-29.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1200" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-26.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1201" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-26.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1202" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-26.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1203" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-26.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1121" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-25.html" source="Mozilla" />
        <vendor_data published_on="2010-06-22" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Thunderbird version is less than 3.0.5" negate="true" operator="AND">
        <criterion comment="Mozilla Thunderbird Product Version is less than 3.0.5" test_ref="oval:com.mcafee.oval:tst:204016" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:203967" version="3">
      <metadata>
        <title>Mozilla Firefox 3.6.4, Mozilla Firefox 3.5.10 Security Update for Mac OS</title>
        <description>
This will validate whether Mozilla Firefox version 3.5.10/3.6.4 is installed.
</description>
        <reference ref_id="CVE-2010-1199" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-30.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1196" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-29.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1197" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-32.html" source="Mozilla" />
        <reference ref_id="CVE-2008-5913" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-33.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1125" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-31.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1198" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-28.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1200" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-26.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1201" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-26.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1202" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-26.html" source="Mozilla" />
        <reference ref_id="CVE-2010-1203" ref_url="http://www.mozilla.org/security/announce/2010/mfsa2010-26.html" source="Mozilla" />
        <vendor_data published_on="2010-06-22" severity="Critical" vendor="Mozilla" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test will retrun result for negative condition of Mozilla Firefox version is less than 3.5.10/3.6.4" negate="true" operator="AND">
        <criterion comment="Mozilla Firefox Product Version is less than 3.5.10/3.6.4" test_ref="oval:com.mcafee.oval:tst:203968" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:201636" version="1">
      <metadata>
        <title>Apple Safari 4.1 Security Update for Mac OS X 10.4</title>
        <description>
This will validate whether Apple Safari 4.1 Security Update is installed or not.
</description>
        <reference ref_id="CVE-2009-1726" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-0544" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1119" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1384" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1385" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1388" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1389" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1390" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1391" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1392" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1394" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1395" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1396" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1397" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1398" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1399" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1400" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1401" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1402" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1403" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1404" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1405" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1406" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1408" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1409" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1410" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1411" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1412" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1413" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1414" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1415" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1416" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1417" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1418" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1419" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1421" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1422" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1749" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1758" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1759" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1761" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1762" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1764" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1770" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1771" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-1774" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <reference ref_id="CVE-2010-2264" ref_url="http://support.apple.com/kb/HT4196" source="Apple" />
        <vendor_data published_on="2010-06-07" severity="Critical" vendor="Apple" />
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
      </metadata>
      <criteria comment="This test checks for the condition that Apple Safari version is less than 4.1 and returns negative result of the same." operator="OR">
        <criterion comment="Apple Safari Product Version is less than 4.1 - version.plist file" negate="true" test_ref="oval:com.mcafee.oval:tst:201635" />
        <criterion comment="Apple Safari Product Version is less than 4.1 - Info.plist file" negate="true" test_ref="oval:com.mcafee.oval:tst:201665" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290561" version="4">
      <metadata>
        <title>Disable the xgrid controller service in /System/Library/LaunchDaemons/com.apple.xgridcontrollerd.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The xgrid controller service should be disabled in /System/Library/LaunchDaemons/com.apple.xgridcontrollerd.plist file
</description>
        <notes>
          <note>This check is to verify that the xgrid controller service is disabled in /System/Library/LaunchDaemons/com.apple.xgridcontrollerd.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The xgrid controller service is disabled in /System/Library/LaunchDaemons/com.apple.xgridcontrollerd.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/com.apple.xgridcontrollerd.plist" test_ref="oval:com.mcafee.oval:tst:200804290562" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/com.apple.xgridcontrollerd.plist" test_ref="oval:com.mcafee.oval:tst:200804290565" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290556" version="4">
      <metadata>
        <title>Disable the xgrid agent service in /System/Library/LaunchDaemons/com.apple.xgridagentd.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The xgrid agent service should be disabled in /System/Library/LaunchDaemons/com.apple.xgridagentd.plist file
</description>
        <notes>
          <note>This check is to verify that the xgrid agent service is disabled in /System/Library/LaunchDaemons/com.apple.xgridagentd.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The xgrid agent service is disabled in /System/Library/LaunchDaemons/com.apple.xgridagentd.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/com.apple.xgridagentd.plist" test_ref="oval:com.mcafee.oval:tst:200804290557" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/com.apple.xgridagentd.plist" test_ref="oval:com.mcafee.oval:tst:200804290560" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290551" version="3">
      <metadata>
        <title>Disable the remote apple events service in /System/Library/LaunchDaemons/eppc.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The remote apple events service should be disabled in /System/Library/LaunchDaemons/eppc.plist file
</description>
        <notes>
          <note>This check is to verify that the remote apple events service is disabled in /System/Library/LaunchDaemons/eppc.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The remote apple events service is disabled in /System/Library/LaunchDaemons/eppc.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/eppc.plist" test_ref="oval:com.mcafee.oval:tst:200804290552" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/eppc.plist" test_ref="oval:com.mcafee.oval:tst:200804290555" />
        </criteria>
        <criteria comment="Operating system version is Mac OS X 10.4/10.5 on i386/powerpc" operator="OR">
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.4 on i386" definition_ref="oval:com.mcafee.oval:def:200804170010" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.4 on powerpc" definition_ref="oval:com.mcafee.oval:def:200804170020" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.5 on i386" definition_ref="oval:com.mcafee.oval:def:200804170030" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.5 on powerpc" definition_ref="oval:com.mcafee.oval:def:200804170040" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290546" version="4">
      <metadata>
        <title>Disable the Apache Server service in /System/Library/LaunchDaemons/org.apache.httpd.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The Apache Server service should be disabled in /System/Library/LaunchDaemons/org.apache.httpd.plist file
</description>
        <notes>
          <note>This check is to verify that the Apache Server service is disabled in /System/Library/LaunchDaemons/org.apache.httpd.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The Apache Server service is disabled in /System/Library/LaunchDaemons/org.apache.httpd.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/org.apache.httpd.plist" test_ref="oval:com.mcafee.oval:tst:200804290547" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/org.apache.httpd.plist" test_ref="oval:com.mcafee.oval:tst:200804290550" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290541" version="4">
      <metadata>
        <title>Disable the Apple File Server service in /System/Library/LaunchDaemons/com.apple.AppleFileServer.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The Apple File Server service should be disabled in /System/Library/LaunchDaemons/com.apple.AppleFileServer.plist file
</description>
        <notes>
          <note>This check is to verify that the Apple File Server service is disabled in /System/Library/LaunchDaemons/com.apple.AppleFileServer.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The Apple File Server service is disabled in /System/Library/LaunchDaemons/com.apple.AppleFileServer.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/com.apple.AppleFileServer.plist" test_ref="oval:com.mcafee.oval:tst:200804290542" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/com.apple.AppleFileServer.plist" test_ref="oval:com.mcafee.oval:tst:200804290545" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290536" version="3">
      <metadata>
        <title>Disable the nmbd service in /System/Library/LaunchDaemons/nmbd.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The nmbd service should be disabled in /System/Library/LaunchDaemons/nmbd.plist file
</description>
        <notes>
          <note>This check is to verify that the nmbd service is disabled in /System/Library/LaunchDaemons/nmbd.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The nmbd service is disabled in /System/Library/LaunchDaemons/nmbd.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/nmbd.plist" test_ref="oval:com.mcafee.oval:tst:200804290537" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/nmbd.plist" test_ref="oval:com.mcafee.oval:tst:200804290540" />
        </criteria>
        <criteria comment="Operating system version is Mac OS X 10.4/10.5 on i386/powerpc" operator="OR">
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.4 on i386" definition_ref="oval:com.mcafee.oval:def:200804170010" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.4 on powerpc" definition_ref="oval:com.mcafee.oval:def:200804170020" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.5 on i386" definition_ref="oval:com.mcafee.oval:def:200804170030" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.5 on powerpc" definition_ref="oval:com.mcafee.oval:def:200804170040" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290531" version="3">
      <metadata>
        <title>Disable the printer service in /System/Library/LaunchDaemons/printer.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The printer service should be disabled in /System/Library/LaunchDaemons/printer.plist file
</description>
        <notes>
          <note>This check is to verify that the printer service is disabled in /System/Library/LaunchDaemons/printer.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The printer service is disabled in /System/Library/LaunchDaemons/printer.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/printer.plist" test_ref="oval:com.mcafee.oval:tst:200804290532" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/printer.plist" test_ref="oval:com.mcafee.oval:tst:200804290535" />
        </criteria>
        <criteria comment="Operating system version is Mac OS X 10.4/10.5 on i386/powerpc" operator="OR">
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.4 on i386" definition_ref="oval:com.mcafee.oval:def:200804170010" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.4 on powerpc" definition_ref="oval:com.mcafee.oval:def:200804170020" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.5 on i386" definition_ref="oval:com.mcafee.oval:def:200804170030" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.5 on powerpc" definition_ref="oval:com.mcafee.oval:def:200804170040" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290521" version="3">
      <metadata>
        <title>Disable the smbd service in /System/Library/LaunchDaemons/smbd.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The smbd service should be disabled in /System/Library/LaunchDaemons/smbd.plist file
</description>
        <notes>
          <note>This check is to verify that the smbd service is disabled in /System/Library/LaunchDaemons/smbd.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The smbd service is disabled in /System/Library/LaunchDaemons/smbd.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/smbd.plist" test_ref="oval:com.mcafee.oval:tst:200804290522" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/smbd.plist" test_ref="oval:com.mcafee.oval:tst:200804290525" />
        </criteria>
        <criteria comment="Operating system version is Mac OS X 10.4/10.5 on i386/powerpc" operator="OR">
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.4 on i386" definition_ref="oval:com.mcafee.oval:def:200804170010" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.4 on powerpc" definition_ref="oval:com.mcafee.oval:def:200804170020" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.5 on i386" definition_ref="oval:com.mcafee.oval:def:200804170030" />
          <extend_definition comment="The operating system installed on the system is Mac OS X 10.5 on powerpc" definition_ref="oval:com.mcafee.oval:def:200804170040" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290506" version="4">
      <metadata>
        <title>Disable the tftp service in /System/Library/LaunchDaemons/tftp.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The tftp service should be disabled in /System/Library/LaunchDaemons/tftp.plist file
</description>
        <notes>
          <note>This check is to verify that the tftp service is disabled in /System/Library/LaunchDaemons/tftp.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The tftp service is disabled in /System/Library/LaunchDaemons/tftp.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/tftp.plist" test_ref="oval:com.mcafee.oval:tst:200804290507" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/tftp.plist" test_ref="oval:com.mcafee.oval:tst:200804290510" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804290501" version="4">
      <metadata>
        <title>Disable the ftp service in /System/Library/LaunchDaemons/ftp.plist file</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The ftp service should be disabled in /System/Library/LaunchDaemons/ftp.plist file
</description>
        <notes>
          <note>This check is to verify that the ftp service is disabled in /System/Library/LaunchDaemons/ftp.plist file</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criteria comment=" The ftp service is disabled in /System/Library/LaunchDaemons/ftp.plist file" operator="AND">
          <criterion comment="The key value is 'Disabled in /System/Library/LaunchDaemons/ftp.plist" test_ref="oval:com.mcafee.oval:tst:200804290502" />
          <criterion comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/ftp.plist" test_ref="oval:com.mcafee.oval:tst:200804290505" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804240509" version="4">
      <metadata>
        <title>Enable logging in /etc/syslog.conf file.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.11" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
Logging should be enabled in /etc/syslog.conf file.
</description>
        <notes>
          <note>This check is to verify that logging is enabled in /etc/syslog.conf file.</note>
        </notes>
      </metadata>
      <criteria comment="Logging is enabled in /etc/syslog.conf file" operator="AND">
        <criteria comment="Operating system version is Mac OS X 10.4/10.5 on i386/powerpc" operator="OR">
          <criterion comment="Log messages are directed to a central log host" test_ref="oval:com.mcafee.oval:tst:200804240510" />
          <criterion comment="Local log files are available at /var/log" test_ref="oval:com.mcafee.oval:tst:200804240512" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804240506" version="4">
      <metadata>
        <title>The Banner value should be set appropriately in /etc/sshd_config file.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.12" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The Banner value should be set appropriately in /etc/sshd_config file.
</description>
        <notes>
          <note>This check is to verify that the Banner value is set appropriately in /etc/sshd_config file.</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criterion comment="The Banner value is set appropriately in /etc/sshd_config file" test_ref="oval:com.mcafee.oval:tst:200804240507" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804240503" version="4">
      <metadata>
        <title>The PermitRootLogin value should be set to NO in /etc/sshd_config file.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.12" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The PermitRootLogin value should be set to NO in /etc/sshd_config file.
</description>
        <notes>
          <note>This check is to verify that the PermitRootLogin value is set to NO in /etc/sshd_config file.</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criterion comment="The PermitRootLogin value is set to NO in /etc/sshd_config file" test_ref="oval:com.mcafee.oval:tst:200804240504" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804240500" version="4">
      <metadata>
        <title>The Protocol value should be set to version 2 in /etc/sshd_config file.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
          <platform>Apple Mac OS X 10.6</platform>
          <platform>Apple Mac OS X 10.7</platform>
        </affected>
        <reference ref_id="2.12" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The Protocol value should be set to version 2 in /etc/sshd_config file.
</description>
        <notes>
          <note>This check is to verify that the Protocol value is set to version 2 in /etc/sshd_config file.</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criterion comment="The Protocol value is set to version 2 in /etc/sshd_config file" test_ref="oval:com.mcafee.oval:tst:200804240501" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:200804210501" version="6">
      <metadata>
        <title>Disable the finger service listening on the network</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
        <reference ref_id="2.9" source="CIS Mac OS X Level 1 Security Benchmark" />
        <description>
The finger service should be disabled not to listen on the network for incoming connections.
</description>
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
        <notes>
          <note>This check is to verify that the finger service is not listening on the network</note>
        </notes>
      </metadata>
      <criteria operator="AND">
        <criterion comment="The finger service should listen on the network" test_ref="oval:com.mcafee.oval:tst:220370" />
      </criteria>
    </definition>
    <definition class="inventory" id="oval:com.mcafee.oval:def:200804170040" version="5">
      <metadata>
        <title>The operating system installed on the system is Mac OS X 10.5 on powerpc</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
        <reference ref_id="cpe:/o:apple:mac_os_x:10.5" source="CPE" />
        <description>
The operating system installed on the system is Mac OS X 10.5 on powerpc
</description>
      </metadata>
      <criteria>
        <extend_definition comment="The installed operating system is part of the Apple Mac OSX family" definition_ref="oval:com.mcafee.oval:def:50279" />
        <criterion comment="Mac OS X 10.5. is installed" test_ref="oval:com.mcafee.oval:tst:200804170014" />
        <criterion comment="powerpc processor" negate="false" test_ref="oval:com.mcafee.oval:tst:200804170018" />
      </criteria>
    </definition>
    <definition class="inventory" id="oval:com.mcafee.oval:def:200804170030" version="5">
      <metadata>
        <title>The operating system installed on the system is Mac OS X 10.5 on i386</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.5</platform>
        </affected>
        <reference ref_id="cpe:/o:apple:mac_os_x:10.5" source="CPE" />
        <description>
The operating system installed on the system is Mac OS X 10.5 on i386
</description>
      </metadata>
      <criteria>
        <extend_definition comment="The installed operating system is part of the Apple Mac OSX family" definition_ref="oval:com.mcafee.oval:def:50279" />
        <criterion comment="Mac OS X 10.5. is installed" test_ref="oval:com.mcafee.oval:tst:200804170014" />
        <criterion comment="i386 processor" negate="false" test_ref="oval:com.mcafee.oval:tst:200804170016" />
      </criteria>
    </definition>
    <definition class="inventory" id="oval:com.mcafee.oval:def:200804170020" version="5">
      <metadata>
        <title>The operating system installed on the system is Mac OS X 10.4 on powerpc</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
        <reference ref_id="cpe:/o:apple:mac_os_x:10.4" source="CPE" />
        <description>
The operating system installed on the system is Mac OS X 10.4 on powerpc
</description>
      </metadata>
      <criteria>
        <extend_definition comment="The installed operating system is part of the Apple Mac OSX family" definition_ref="oval:com.mcafee.oval:def:50279" />
        <criterion comment="Mac OS X 10.4. is installed" test_ref="oval:com.mcafee.oval:tst:200804170011" />
        <criterion comment="powerpc processor" negate="false" test_ref="oval:com.mcafee.oval:tst:200804170018" />
      </criteria>
    </definition>
    <definition class="inventory" id="oval:com.mcafee.oval:def:200804170010" version="5">
      <metadata>
        <title>The operating system installed on the system is Mac OS X 10.4 on i386</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.4</platform>
        </affected>
        <reference ref_id="cpe:/o:apple:mac_os_x:10.4" source="CPE" />
        <description>
The operating system installed on the system is Mac OS X 10.4 on i386
</description>
      </metadata>
      <criteria>
        <extend_definition comment="The installed operating system is part of the Apple Mac OSX family" definition_ref="oval:com.mcafee.oval:def:50279" />
        <criterion comment="Mac OS X 10.4. is installed" test_ref="oval:com.mcafee.oval:tst:200804170011" />
        <criterion comment="i386 processor" negate="false" test_ref="oval:com.mcafee.oval:tst:200804170016" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:1412235" version="10">
      <metadata>
        <title>Verify that the sharing service Internet sharing is completely disabled by checking file existance of com.apple.nat.plist.</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
        <reference ref_id="2.4.2" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
        <description>
Internet Sharing uses the open source natd process to share an internet connection with other computers and devices on a local network. 
                    This allows the Mac to function as a router and share the connection to other, possibly unauthorized, devices.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of com.apple.nat.plist (Internet Sharing) file." test_ref="oval:com.mcafee.oval:tst:2250971" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:1412171" version="12">
      <metadata>
        <title>Verify that the Network File System server is not running</title>
        <affected family="macos">
          <platform>Apple Mac OS X 10.8</platform>
          <platform>Apple Mac OS X 10.9</platform>
          <platform>Apple Mac OS X 10.10</platform>
          <platform>Apple Mac OS X 10.11</platform>
          <platform>Apple macOS 10.12</platform>
          <platform>Apple macOS 10.13</platform>
        </affected>
        <reference ref_id="4.6" source="CIS_Apple_OSX_10.12_Benchmark_v1.0.0" />
        <reference ref_id="4.6" source="CIS_Apple_OSX_10.11_Benchmark_v1.1.0" />
        <reference ref_id="4.6" source="CIS_Apple_OSX_10.10_Benchmark_v1.2.0" />
        <reference ref_id="4.6" source="CIS_Apple_OSX_10.9_Benchmark_v1.3.0" />
        <reference ref_id="4.6" source="CIS_Apple_OSX_10.8_Benchmark_v1.3.0" />
        <description>
Ensure that the NFS Server is not running and is not set to start at boot.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test to verify the existence of /etc/exports file" test_ref="oval:com.mcafee.oval:tst:1413322" />
      </criteria>
    </definition>
  </definitions>
  <tests>
    <file_test check="all" comment="The file test is used to check metadata associated with UNIX files, of the sort returned by either an ls command, stat command or stat() system call. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references a file_object and the optional state element specifies the metadata to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType." id="oval:com.mcafee.primitives:tst:75845" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.primitives:obj:73246" />
    </file_test>
    <file_test check="all" comment="The file test is used to check metadata associated with UNIX files, of the sort returned by either an ls command, stat command or stat() system call. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references a file_object and the optional state element specifies the metadata to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType." id="oval:com.mcafee.primitives:tst:73245" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.primitives:obj:73246" />
      <state state_ref="oval:com.mcafee.primitives:ste:73247" />
    </file_test>
    <textfilecontent_test check='all' comment='The textfilecontent_test element is used to check the contents of a text file (aka a configuration file) by looking at individual lines.' id='oval:com.mcafee.primitives:tst:51102' version='1' xmlns='http://oval.mitre.org/XMLSchema/oval-definitions-5#independent'>
      <object object_ref='oval:com.mcafee.primitives:obj:51103' />
      <state state_ref='oval:com.mcafee.primitives:ste:51104' />
    </textfilecontent_test>
    <inetd_test check="all" check_existence="any_exist" comment="Test for a daemon running under inetd" id="oval:com.mcafee.primitives:tst:51040" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.primitives:obj:20071426253" />
      <state state_ref="oval:com.mcafee.oval:ste:5218" />
    </inetd_test>
    <macos-def:inetlisteningservers_test check="all" comment="The inet listening servers test is used to check what applications are listening on the network." id="oval:com.mcafee.primitives:tst:50972" version="1">
      <macos-def:object object_ref="oval:com.mcafee.primitives:obj:50972" />
      <macos-def:state state_ref="oval:com.mcafee.primitives:ste:50972" />
    </macos-def:inetlisteningservers_test>
    <accountinfo_test check="all" comment="Test account information" id="oval:com.mcafee.primitives:tst:50970" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <object object_ref="oval:com.mcafee.primitives:obj:50970" />
      <state state_ref="oval:com.mcafee.primitives:ste:50970" />
    </accountinfo_test>
    <nvram_test check="all" comment="This test pulls data from the 'nvram -p' output." id="oval:com.mcafee.primitives:tst:50966" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <object object_ref="oval:com.mcafee.primitives:obj:50966" />
      <state state_ref="oval:com.mcafee.primitives:ste:50966" />
    </nvram_test>
    <pwpolicy_test check="all" comment="Test password variables" id="oval:com.mcafee.primitives:tst:50964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <object object_ref="oval:com.mcafee.primitives:obj:50964" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos" />
      <state state_ref="oval:com.mcafee.primitives:ste:50964" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos" />
    </pwpolicy_test>
    <textfilecontent54_test check="all" comment="The textfilecontent54_test element is used to check the contents of a text file (aka a configuration file) by looking at individual blocks of text." id="oval:com.mcafee.primitives:tst:402697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.primitives:obj:402698" />
      <state state_ref="oval:com.mcafee.primitives:ste:402699" />
    </textfilecontent54_test>
    <file_test check="all" comment="The file test is used to check metadata associated with UNIX files, of the sort returned by either an ls command, stat command or stat() system call. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references a file_object and the optional state element specifies the metadata to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType." id="oval:com.mcafee.primitives:tst:200912221259" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.primitives:obj:200912221258" />
      <state state_ref="oval:com.mcafee.primitives:ste:200912221300" />
    </file_test>
    <ind-def:xmlfilecontent_test check="all" comment="The xmlfilecontent_test element is used to explore the contents of an xml file. This test basically allows specific pieces of an xml document specified using xpath to be tested." id="oval:com.mcafee.primitives:tst:20071425996" version="2">
      <ind-def:object object_ref="oval:com.mcafee.primitives:obj:20071426059" />
      <ind-def:state state_ref="oval:com.mcafee.primitives:ste:55430" />
    </ind-def:xmlfilecontent_test>
    <textfilecontent_test check="all" comment="The textfilecontent_test element is used to check the contents of a text file (aka a configuration file) by looking at individual lines." id="oval:com.mcafee.primitives:tst:20071425468" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.primitives:obj:1003" />
      <state state_ref="oval:com.mcafee.primitives:ste:1003" />
    </textfilecontent_test>
    <unix-def:file_test check="all" comment="Check permissions on a file" id="oval:com.mcafee.primitives:tst:20071425437" version="2">
      <unix-def:object object_ref="oval:com.mcafee.primitives:obj:20071426262" />
      <unix-def:state state_ref="oval:com.mcafee.primitives:ste:20071426100" />
    </unix-def:file_test>
    <unix-def:file_test check="all" comment="Check owner and group owner of a file" id="oval:com.mcafee.primitives:tst:20071425281" version="2">
      <unix-def:object object_ref="oval:com.mcafee.primitives:obj:20071426057" />
      <unix-def:state state_ref="oval:com.mcafee.primitives:ste:20071426177" />
    </unix-def:file_test>
    <ind-def:environmentvariable_test check='all' comment='The environmentvariable_test element is used to check an environment variable found on the system.' id='oval:com.mcafee.primitives:tst:20071425274' version='0'>
      <ind-def:object object_ref='oval:com.mcafee.primitives:obj:20071426726' />
      <ind-def:state state_ref='oval:com.mcafee.primitives:ste:20071426329' />
    </ind-def:environmentvariable_test>
    <textfilecontent_test check="all" comment="Ensure the file specified has the correct settings" id="oval:com.mcafee.primitives:tst:20071425197" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.primitives:obj:2003" />
      <state state_ref="oval:com.mcafee.primitives:ste:2003" />
    </textfilecontent_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Product Version is less than 3.5.10/3.6.3" id="oval:com.mcafee.oval:tst:87709" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75708" />
      <state state_ref="oval:com.mcafee.oval:ste:203970" />
    </textfilecontent54_test>
    <variable_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Product Version is greater than or equal to 3.6.0 and less than 3.6.2" id="oval:com.mcafee.oval:tst:87700" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:87701" />
      <state state_ref="oval:com.mcafee.oval:ste:87702" />
    </variable_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Mozilla Firefox Existence Test" id="oval:com.mcafee.oval:tst:87699" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75708" />
    </textfilecontent54_test>
    <variable_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Minimum Product Version should be equal to 4.0" id="oval:com.mcafee.oval:tst:87459" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:87334" />
      <state state_ref="oval:com.mcafee.oval:ste:87458" />
    </variable_test>
    <variable_test check="at least one" check_existence="at_least_one_exists" comment="Apple QuickTime Minimum Product Version should be greater than or equal to 7.0 and less than 7.6.6" id="oval:com.mcafee.oval:tst:87339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:87340" />
      <state state_ref="oval:com.mcafee.oval:ste:87341" />
    </variable_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple QuickTime for Mac is Present" id="oval:com.mcafee.oval:tst:87338" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75689" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari for Mac is Present" id="oval:com.mcafee.oval:tst:87332" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75654" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Yahoo! Messenger for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75743" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75744" />
      <state state_ref="oval:com.mcafee.oval:ste:75745" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Adobe Flash Player for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75738" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75739" />
      <state state_ref="oval:com.mcafee.oval:ste:75740" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Adobe Reader for 10 Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75723" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75725" />
      <state state_ref="oval:com.mcafee.oval:ste:75726" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Adobe Reader 9 for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75722" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75724" />
      <state state_ref="oval:com.mcafee.oval:ste:75726" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Firefox browser for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75707" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75708" />
      <state state_ref="oval:com.mcafee.oval:ste:75709" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Skype for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75692" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75693" />
      <state state_ref="oval:com.mcafee.oval:ste:75694" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="QuickTime Player for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75688" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75689" />
      <state state_ref="oval:com.mcafee.oval:ste:75690" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" comment="VLC media player for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75683" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75684" />
      <state state_ref="oval:com.mcafee.oval:ste:75685" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple iTunes for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75663" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75664" />
      <state state_ref="oval:com.mcafee.oval:ste:75665" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Opera browser for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:75658" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75659" />
      <state state_ref="oval:com.mcafee.oval:ste:75660" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Safari for Mac Minimum Product Version - version.plist file" id="oval:com.mcafee.oval:tst:75653" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75654" />
      <state state_ref="oval:com.mcafee.oval:ste:75655" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="Verify the timestamp_timeout value in /etc/sudoers" id="oval:com.mcafee.oval:tst:73991" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:73992" />
      <state state_ref="oval:com.mcafee.oval:ste:73993" />
    </textfilecontent54_test>
    <variable_test check="at least one" check_existence="at_least_one_exists" comment="McAfee ePO Agent (for Mac) Minimum Product Version" id="oval:com.mcafee.oval:tst:73772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:73774" />
      <state state_ref="oval:com.mcafee.oval:ste:73777" />
    </variable_test>
    <file_test check="all" check_existence="all_exist" comment="McAfee ePO Agent (for Mac) File Existence Test" id="oval:com.mcafee.oval:tst:73771" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:73773" />
    </file_test>
    <process_test check="at least one" check_existence="at_least_one_exists" comment="McAfee ePO agent framework service is running" id="oval:com.mcafee.oval:tst:73767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:73768" />
      <state state_ref="oval:com.mcafee.oval:ste:73769" />
    </process_test>
    <nvram_test check="all" comment="Verify Open Firmware or EFI security mode is command" id="oval:com.mcafee.oval:tst:73440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <object object_ref="oval:com.mcafee.oval:obj:73490" />
      <state state_ref="oval:com.mcafee.oval:ste:73590" />
    </nvram_test>
    <file_test check="at least one" check_existence="at_least_one_exists" comment="McAfee Security for Mac DAT File Existence Test" id="oval:com.mcafee.oval:tst:73372" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:73293" />
    </file_test>
    <file_test check="at least one" check_existence="at_least_one_exists" comment="McAfee Security for Mac ProductConfig.xml File Existence Test" id="oval:com.mcafee.oval:tst:73363" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:73365" />
    </file_test>
    <process_test check="all" comment="McAfee Security for Mac OAS Service is Running" id="oval:com.mcafee.oval:tst:73362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:73364" />
      <state state_ref="oval:com.mcafee.oval:ste:73138" />
    </process_test>
    <variable_test check="at least one" comment="Max Dat Age of McAfee Security for Mac Anti-malware" id="oval:com.mcafee.oval:tst:73291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:73292" />
      <state state_ref="oval:com.mcafee.oval:ste:73294" />
    </variable_test>
    <variable_test check="at least one" comment="Minimum Product Version" id="oval:com.mcafee.oval:tst:73139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:73140" />
      <state state_ref="oval:com.mcafee.oval:ste:73143" />
    </variable_test>
    <process_test check="all" comment="McAfee Security for Mac fmp service is Running" id="oval:com.mcafee.oval:tst:72132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:73137" />
      <state state_ref="oval:com.mcafee.oval:ste:73138" />
    </process_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Checking McAfee Security for Mac is Installed using ProductConfig.xml file" id="oval:com.mcafee.oval:tst:72104" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:72107" />
      <state state_ref="oval:com.mcafee.oval:ste:68493" />
    </textfilecontent54_test>
    <family_test check="only one" check_existence="at_least_one_exists" comment="the installed operating system is part of the Unix family" id="oval:com.mcafee.oval:tst:64764" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:64766" />
      <state state_ref="oval:com.mcafee.oval:ste:64771" />
    </family_test>
    <uname_test check="all" comment="OS is Apple OS X" id="oval:com.mcafee.oval:tst:50280" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759" />
    </uname_test>
    <file_test check="all" check_existence="all_exist" comment="File existence pre-req for /etc/pam.d/screensaver" id="oval:com.mcafee.oval:tst:482307" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:482306" />
    </file_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of install.log in com.apple.install file" id="oval:com.mcafee.oval:tst:481239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:481238" />
      <state state_ref="oval:com.mcafee.oval:ste:481235" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of authd.log" id="oval:com.mcafee.oval:tst:481225" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:481228" />
      <state state_ref="oval:com.mcafee.oval:ste:481229" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of appfirewall.log in /etc/asl.conf" id="oval:com.mcafee.oval:tst:481224" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:481227" />
      <state state_ref="oval:com.mcafee.oval:ste:481229" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of system.log in /etc/asl.conf" id="oval:com.mcafee.oval:tst:481223" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:481226" />
      <state state_ref="oval:com.mcafee.oval:ste:481229" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" check_existence="none_exist" comment="Test to disabling the admins and/or user's ability to log into another user's active and locked session" id="oval:com.mcafee.oval:tst:479107" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:479108" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of install.log" id="oval:com.mcafee.oval:tst:469317" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:469319" />
      <state state_ref="oval:com.mcafee.oval:ste:469321" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of appfirewall.log" id="oval:com.mcafee.oval:tst:466600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:466602" />
      <state state_ref="oval:com.mcafee.oval:ste:466590" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of secure.log" id="oval:com.mcafee.oval:tst:466594" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:466596" />
      <state state_ref="oval:com.mcafee.oval:ste:466590" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of system.log" id="oval:com.mcafee.oval:tst:466586" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:466588" />
      <state state_ref="oval:com.mcafee.oval:ste:466590" />
    </textfilecontent54_test>
    <xmlfilecontent_test check="all" comment="Test to verify the Java 6 is the default Java runtime" id="oval:com.mcafee.oval:tst:416305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:416306" />
    </xmlfilecontent_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of install.log." id="oval:com.mcafee.oval:tst:416297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:416299" />
      <state state_ref="oval:com.mcafee.oval:ste:416298" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of appfirewall.log." id="oval:com.mcafee.oval:tst:416293" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:416292" />
      <state state_ref="oval:com.mcafee.oval:ste:416294" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of wtmp.log." id="oval:com.mcafee.oval:tst:416287" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:416288" />
      <state state_ref="oval:com.mcafee.oval:ste:416289" />
    </textfilecontent54_test>
    <file_test check="all" check_existence="none_exist" comment="Test that ARDAgent file does exist" id="oval:com.mcafee.oval:tst:416272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:416273" />
    </file_test>
    <xmlfilecontent_test check="all" comment="Test to verify the session authorization ownership" id="oval:com.mcafee.oval:tst:416269" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:416270" />
    </xmlfilecontent_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of com.apple.smbd.plist (SMB) file." id="oval:com.mcafee.oval:tst:402029" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:402030" />
    </file_test>
    <textfilecontent54_test check="all" comment="Verify whether the UserDir is set appropriately in httpd-userdir.conf file" id="oval:com.mcafee.oval:tst:402026" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:402027" />
      <state state_ref="oval:com.mcafee.oval:ste:207327" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="Verify the restrict value in /etc/ntp-restrict.conf" id="oval:com.mcafee.oval:tst:2896471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:2896721" />
    </textfilecontent54_test>
    <file_test check="all" check_existence="all_exist" comment="File existence pre-req for /etc/sudoers" id="oval:com.mcafee.oval:tst:2896470" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:2896720" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of com.apple.nat.plist (Internet Sharing) file." id="oval:com.mcafee.oval:tst:2250971" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:1414320" />
    </file_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="This is only a test" id="oval:com.mcafee.oval:tst:220370" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:220370" />
      <state state_ref="oval:com.mcafee.oval:ste:220370" />
    </xmlfilecontent_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Product Version is less than 3.5.12/3.6.9" id="oval:com.mcafee.oval:tst:211684" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75708" />
      <state state_ref="oval:com.mcafee.oval:ste:211698" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Product Version is less than 3.6.9" id="oval:com.mcafee.oval:tst:211683" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75708" />
      <state state_ref="oval:com.mcafee.oval:ste:211697" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Thunderbird Product Version is less than 3.0.7" id="oval:com.mcafee.oval:tst:211682" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:203973" />
      <state state_ref="oval:com.mcafee.oval:ste:211696" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Thunderbird Product Version is less than 3.1.3" id="oval:com.mcafee.oval:tst:211681" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:203973" />
      <state state_ref="oval:com.mcafee.oval:ste:211695" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Thunderbird Product Version is less than 3.0.7/3.1.3" id="oval:com.mcafee.oval:tst:211680" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:203973" />
      <state state_ref="oval:com.mcafee.oval:ste:211694" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Product Version is less than 3.5.12" id="oval:com.mcafee.oval:tst:211679" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75708" />
      <state state_ref="oval:com.mcafee.oval:ste:211693" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 4.1.2 - Info.plist" id="oval:com.mcafee.oval:tst:211678" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:201664" />
      <state state_ref="oval:com.mcafee.oval:ste:211690" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 5.0.2 - Info.plist" id="oval:com.mcafee.oval:tst:211676" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:201664" />
      <state state_ref="oval:com.mcafee.oval:ste:211691" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 5.0.2 - version.plist" id="oval:com.mcafee.oval:tst:211675" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75654" />
      <state state_ref="oval:com.mcafee.oval:ste:211691" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 4.1.2 - version.plist" id="oval:com.mcafee.oval:tst:211674" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75654" />
      <state state_ref="oval:com.mcafee.oval:ste:211690" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of secure.log." id="oval:com.mcafee.oval:tst:207369" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207371" />
      <state state_ref="oval:com.mcafee.oval:ste:207373" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Test to verify the retention time of system.log." id="oval:com.mcafee.oval:tst:207368" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207370" />
      <state state_ref="oval:com.mcafee.oval:ste:207372" />
    </textfilecontent54_test>
    <file_test check="all" check_existence="any_exist" comment="verify the directory permission in /Users" id="oval:com.mcafee.oval:tst:207364" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207364" />
      <state state_ref="oval:com.mcafee.oval:ste:207366" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of com.apple.InternetSharing.plist (Internet Sharing) file." id="oval:com.mcafee.oval:tst:207352" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207362" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of com.apple.xgridcontrollerd.plist (Xgrid) file." id="oval:com.mcafee.oval:tst:207351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207361" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of com.apple.xgridagentd.plist (Xgrid) file." id="oval:com.mcafee.oval:tst:207350" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207360" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of com.apple.mDNSResponderHelper.plist (Bonjour) file." id="oval:com.mcafee.oval:tst:207349" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207359" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of com.apple.mDNSResponder.plist (Bonjour) file." id="oval:com.mcafee.oval:tst:207348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207358" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of eppc.plist (Remote Apple Events) file." id="oval:com.mcafee.oval:tst:207347" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207357" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of org.apache.httpd.plist (Web) file." id="oval:com.mcafee.oval:tst:207346" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207356" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of smbd.plist (SMB) file." id="oval:com.mcafee.oval:tst:207345" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207355" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Verify the existence of ftp.plist (FTP) file." id="oval:com.mcafee.oval:tst:207344" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207354" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="verify the existence of com.apple.AppleFileServer.plist (AFP) file." id="oval:com.mcafee.oval:tst:207343" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207353" />
    </file_test>
    <textfilecontent54_test check="all" comment="Verfiy the time server name for syncronization" id="oval:com.mcafee.oval:tst:207335" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207337" />
      <state state_ref="oval:com.mcafee.oval:ste:207339" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Verify whether the system time syncronization is enabled?" id="oval:com.mcafee.oval:tst:207334" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207336" />
      <state state_ref="oval:com.mcafee.oval:ste:207338" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Verify whether the TraceEnable is set appropriately" id="oval:com.mcafee.oval:tst:207320" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207324" />
      <state state_ref="oval:com.mcafee.oval:ste:207328" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Verify whether the UserDir is set appropriately" id="oval:com.mcafee.oval:tst:207319" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207323" />
      <state state_ref="oval:com.mcafee.oval:ste:207327" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Verify whether the ServerSignature is set appropriately" id="oval:com.mcafee.oval:tst:207318" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207322" />
      <state state_ref="oval:com.mcafee.oval:ste:207326" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Verify whether the ServerToken is set appropirately" id="oval:com.mcafee.oval:tst:207317" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207321" />
      <state state_ref="oval:com.mcafee.oval:ste:207325" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Verify whether the ntlmv2 authorizations is set as appropriate." id="oval:com.mcafee.oval:tst:207306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207309" />
      <state state_ref="oval:com.mcafee.oval:ste:207312" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Verfiy whether the guest access is set as appropriate." id="oval:com.mcafee.oval:tst:207305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207308" />
      <state state_ref="oval:com.mcafee.oval:ste:207311" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" comment="Verify whether the anonymous connections is set as appropriate" id="oval:com.mcafee.oval:tst:207304" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:207307" />
      <state state_ref="oval:com.mcafee.oval:ste:207310" />
    </textfilecontent54_test>
    <file_test check="none exist" comment="IOBluetoothHIDDriver.kext file exists" id="oval:com.mcafee.oval:tst:206975" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207018" />
    </file_test>
    <file_test check="none exist" comment="IOBluetoothFamily.kext file exists" id="oval:com.mcafee.oval:tst:206974" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:207017" />
    </file_test>
    <variable_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Product Version is equal to 3.6.7" id="oval:com.mcafee.oval:tst:206677" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:87701" />
      <state state_ref="oval:com.mcafee.oval:ste:206675" />
    </variable_test>
    <textfilecontent54_test check="at least one" comment="McAfee McAfee Site Advisor for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:206659" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:206660" />
      <state state_ref="oval:com.mcafee.oval:ste:206661" />
    </textfilecontent54_test>
    <process_test check="all" comment="McAfee Internet Security for Mac Application Protection Service is Running" id="oval:com.mcafee.oval:tst:206636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:206635" />
      <state state_ref="oval:com.mcafee.oval:ste:73138" />
    </process_test>
    <process_test check="all" comment="McAfee Internet Security for Mac Desktop Firewall Service is Running" id="oval:com.mcafee.oval:tst:206633" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:206634" />
      <state state_ref="oval:com.mcafee.oval:ste:73138" />
    </process_test>
    <variable_test check="at least one" comment="Max Dat Age of McAfee Internet Security for Mac Anti-malware" id="oval:com.mcafee.oval:tst:206618" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:73292" />
      <state state_ref="oval:com.mcafee.oval:ste:206619" />
    </variable_test>
    <process_test check="all" comment="McAfee Internet Security for Mac OAS Service is Running" id="oval:com.mcafee.oval:tst:206615" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:73364" />
      <state state_ref="oval:com.mcafee.oval:ste:73138" />
    </process_test>
    <process_test check="all" comment="McAfee Internet Security for Mac fmp service is Running" id="oval:com.mcafee.oval:tst:206614" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:73137" />
      <state state_ref="oval:com.mcafee.oval:ste:73138" />
    </process_test>
    <variable_test check="at least one" comment="McAfee Internet Security for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:206609" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:73140" />
      <state state_ref="oval:com.mcafee.oval:ste:206611" />
    </variable_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Checking McAfee Internet Security for Mac is Installed using ProductConfig.xml file" id="oval:com.mcafee.oval:tst:206608" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:72107" />
      <state state_ref="oval:com.mcafee.oval:ste:206610" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 5.0.1 - Info.plist" id="oval:com.mcafee.oval:tst:206600" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:201664" />
      <state state_ref="oval:com.mcafee.oval:ste:206598" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 5.0.1 - version.plist" id="oval:com.mcafee.oval:tst:206599" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75654" />
      <state state_ref="oval:com.mcafee.oval:ste:206598" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 4.1.1 - Info.plist" id="oval:com.mcafee.oval:tst:206596" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:201664" />
      <state state_ref="oval:com.mcafee.oval:ste:206594" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 4.1.1 - version.plist" id="oval:com.mcafee.oval:tst:206595" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75654" />
      <state state_ref="oval:com.mcafee.oval:ste:206594" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple iTunes for Mac installed version is less than 9.2.1" id="oval:com.mcafee.oval:tst:206579" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75664" />
      <state state_ref="oval:com.mcafee.oval:ste:206580" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Thunderbird Product Version is less than 3.0.6/3.1.1" id="oval:com.mcafee.oval:tst:206069" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:203973" />
      <state state_ref="oval:com.mcafee.oval:ste:206070" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Thunderbird Product Version is less than 3.1.1" id="oval:com.mcafee.oval:tst:206066" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:203973" />
      <state state_ref="oval:com.mcafee.oval:ste:206067" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Product Version is less than 3.6.7" id="oval:com.mcafee.oval:tst:206039" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75708" />
      <state state_ref="oval:com.mcafee.oval:ste:206040" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Product Version is less than 3.5.11/3.6.7" id="oval:com.mcafee.oval:tst:206036" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75708" />
      <state state_ref="oval:com.mcafee.oval:ste:206037" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" comment="VLC media player for Mac Minimum Product Version" id="oval:com.mcafee.oval:tst:204024" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:204025" />
      <state state_ref="oval:com.mcafee.oval:ste:75685" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Thunderbird Product Version is less than 3.0.5" id="oval:com.mcafee.oval:tst:204016" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:203973" />
      <state state_ref="oval:com.mcafee.oval:ste:203974" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Product Version is less than 3.5.10/3.6.4" id="oval:com.mcafee.oval:tst:203968" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75708" />
      <state state_ref="oval:com.mcafee.oval:ste:203969" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 4.1 - Info.plist" id="oval:com.mcafee.oval:tst:201665" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:201664" />
      <state state_ref="oval:com.mcafee.oval:ste:201657" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Safari for Mac Minimum Product Version - Info.plist file" id="oval:com.mcafee.oval:tst:201663" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:201664" />
      <state state_ref="oval:com.mcafee.oval:ste:75655" />
    </textfilecontent54_test>
    <textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="Apple Safari Product Version should be less than 4.1 - version.plist" id="oval:com.mcafee.oval:tst:201635" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:75654" />
      <state state_ref="oval:com.mcafee.oval:ste:201657" />
    </textfilecontent54_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/com.apple.xgridcontrollerd.plist file" id="oval:com.mcafee.oval:tst:200804290565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290565" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/com.apple.xgridcontrollerd.plist file" id="oval:com.mcafee.oval:tst:200804290562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290563" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290564" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/com.apple.xgridagentd.plist file" id="oval:com.mcafee.oval:tst:200804290560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290560" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/com.apple.xgridagentd.plist file" id="oval:com.mcafee.oval:tst:200804290557" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290558" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290559" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/eppc.plist file" id="oval:com.mcafee.oval:tst:200804290555" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290555" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/eppc.plist file" id="oval:com.mcafee.oval:tst:200804290552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290553" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290554" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/org.apache.httpd.plist file" id="oval:com.mcafee.oval:tst:200804290550" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290550" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/org.apache.httpd.plist file" id="oval:com.mcafee.oval:tst:200804290547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290548" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290549" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/com.apple.AppleFileServer.plist file" id="oval:com.mcafee.oval:tst:200804290545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290545" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/com.apple.AppleFileServer.plist file" id="oval:com.mcafee.oval:tst:200804290542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290543" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290544" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/nmbd.plist file" id="oval:com.mcafee.oval:tst:200804290540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290540" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/nmbd.plist file" id="oval:com.mcafee.oval:tst:200804290537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290538" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290539" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/printer.plist file" id="oval:com.mcafee.oval:tst:200804290535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290535" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/printer.plist file" id="oval:com.mcafee.oval:tst:200804290532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290533" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290534" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/smbd.plist file" id="oval:com.mcafee.oval:tst:200804290525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290525" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/smbd.plist file" id="oval:com.mcafee.oval:tst:200804290522" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290523" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290524" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/tftp.plist file" id="oval:com.mcafee.oval:tst:200804290510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290510" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/tftp.plist file" id="oval:com.mcafee.oval:tst:200804290507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290508" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290509" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="at_least_one_exists" comment="The key value 'Disabled is set as 'true' in /System/Library/LaunchDaemons/ftp.plist file" id="oval:com.mcafee.oval:tst:200804290505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290505" />
    </xmlfilecontent_test>
    <xmlfilecontent_test check="all" check_existence="any_exist" comment="The key value is 'Disabled in /System/Library/LaunchDaemons/ftp.plist file" id="oval:com.mcafee.oval:tst:200804290502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804290503" />
      <state state_ref="oval:com.mcafee.oval:ste:200804290504" />
    </xmlfilecontent_test>
    <textfilecontent_test check="all" check_existence="at_least_one_exists" comment="Local log files are available at /var/log" id="oval:com.mcafee.oval:tst:200804240512" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804240513" />
    </textfilecontent_test>
    <textfilecontent_test check="all" check_existence="at_least_one_exists" comment="Log messages are directed to a central log host" id="oval:com.mcafee.oval:tst:200804240510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804240511" />
    </textfilecontent_test>
    <textfilecontent_test check="all" check_existence="all_exist" comment="The Banner value is set appropriately in /etc/sshd_config file" id="oval:com.mcafee.oval:tst:200804240507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804240508" />
    </textfilecontent_test>
    <textfilecontent_test check="all" check_existence="all_exist" comment="The PermitRootLogin value is set to NO in /etc/sshd_config file" id="oval:com.mcafee.oval:tst:200804240504" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804240505" />
    </textfilecontent_test>
    <textfilecontent_test check="all" check_existence="all_exist" comment="The Protocol value is set to version 2 in /etc/sshd_config file" id="oval:com.mcafee.oval:tst:200804240501" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:200804240502" />
    </textfilecontent_test>
    <uname_test check="all" check_existence="at_least_one_exists" comment="powerpc processor" id="oval:com.mcafee.oval:tst:200804170018" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:200804170012" />
      <state state_ref="oval:com.mcafee.oval:ste:200804170019" />
    </uname_test>
    <uname_test check="all" check_existence="at_least_one_exists" comment="i386 processor" id="oval:com.mcafee.oval:tst:200804170016" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:200804170012" />
      <state state_ref="oval:com.mcafee.oval:ste:200804170017" />
    </uname_test>
    <uname_test check="all" check_existence="at_least_one_exists" comment="Mac OS X 10.5" id="oval:com.mcafee.oval:tst:200804170014" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:200804170012" />
      <state state_ref="oval:com.mcafee.oval:ste:200804170015" />
    </uname_test>
    <uname_test check="all" check_existence="at_least_one_exists" comment="Mac OS X 10.4" id="oval:com.mcafee.oval:tst:200804170011" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:200804170012" />
      <state state_ref="oval:com.mcafee.oval:ste:200804170013" />
    </uname_test>
    <file_test check="all" check_existence="all_exist" comment="File existence pre-req for /etc/sudoers" id="oval:com.mcafee.oval:tst:200803060071" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:200803060073" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="Test to verify the existence of /etc/exports file" id="oval:com.mcafee.oval:tst:1413322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:com.mcafee.oval:obj:1414198" />
    </file_test>
  </tests>
  <objects>
    <uname_object id="oval:org.mitre.oval:obj:2759" version="8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" />
    <file_object comment="The file_object element is used by a file test to define the specific file(s) to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. A file object defines the path and filename of the file(s). In addition, a number of behaviors may be provided that help guide the collection of objects. Please refer to the FileBehaviors complex type for more information about specific behaviors." id="oval:com.mcafee.primitives:obj:73246" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" var_ref="oval:com.mcafee.primitives:var:73248" />
      <filename datatype="string" var_ref="oval:com.mcafee.primitives:var:73249" />
    </file_object>
    <textfilecontent_object id="oval:com.mcafee.primitives:obj:51103" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals" var_ref="oval:com.mcafee.primitives:var:51105" />
      <filename datatype="string" operation="equals" var_ref="oval:com.mcafee.primitives:var:51106" />
      <line datatype="string" operation="pattern match" var_ref="oval:com.mcafee.primitives:var:51107" />
    </textfilecontent_object>
    <macos-def:inetlisteningservers_object id="oval:com.mcafee.primitives:obj:50972" version="1">
      <macos-def:program_name var_ref="oval:com.mcafee.primitives:var:20080529160" />
    </macos-def:inetlisteningservers_object>
    <accountinfo_object id="oval:com.mcafee.primitives:obj:50970" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <username datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529151" />
    </accountinfo_object>
    <nvram_object id="oval:com.mcafee.primitives:obj:50966" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <nvram_var var_ref="oval:com.mcafee.primitives:var:20090829001" />
    </nvram_object>
    <pwpolicy_object id='oval:com.mcafee.primitives:obj:50964' version='0' xmlns='http://oval.mitre.org/XMLSchema/oval-definitions-5#macos'>
      <username var_ref='oval:com.mcafee.primitives:var:20080529140' />
      <userpass var_ref='oval:com.mcafee.primitives:var:20080529141' />
      <directory_node var_ref='oval:com.mcafee.primitives:var:20080529142' />
    </pwpolicy_object>
    <textfilecontent54_object id="oval:com.mcafee.primitives:obj:402698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals" var_ref="oval:com.mcafee.primitives:var:402742" />
      <filename datatype="string" operation="equals" var_ref="oval:com.mcafee.primitives:var:51106" />
      <pattern datatype="string" operation="pattern match" var_ref="oval:com.mcafee.primitives:var:402700" />
      <instance datatype="int" operation="greater than or equal" var_ref="oval:com.mcafee.primitives:var:402701" />
    </textfilecontent54_object>
    <file_object comment="The file_object element is used by a file test to define the specific file(s) to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. A file object defines the path and filename of the file(s). In addition, a number of behaviors may be provided that help guide the collection of objects. Please refer to the FileBehaviors complex type for more information about specific behaviors." id="oval:com.mcafee.primitives:obj:200912221258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" var_ref="oval:com.mcafee.primitives:var:73248" />
      <filename xsi:nil="true" />
    </file_object>
    <ind-def:environmentvariable_object id='oval:com.mcafee.primitives:obj:20071426726' version='0'>
      <ind-def:name var_ref='oval:com.mcafee.primitives:var:20071426204' />
    </ind-def:environmentvariable_object>
    <file_object id="oval:com.mcafee.primitives:obj:20071426262" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path var_ref="oval:com.mcafee.primitives:var:20071427982" />
      <filename var_ref="oval:com.mcafee.primitives:var:20071427333" />
    </file_object>
    <inetd_object comment="Daemon name in inetd" id="oval:com.mcafee.primitives:obj:20071426253" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol var_ref="oval:com.mcafee.oval:var:5219" />
      <service_name var_ref="oval:com.mcafee.oval:var:5220" />
    </inetd_object>
    <ind-def:xmlfilecontent_object id="oval:com.mcafee.primitives:obj:20071426059" version="2">
      <ind-def:path var_ref="oval:com.mcafee.primitives:var:20071427627" />
      <ind-def:filename var_ref="oval:com.mcafee.primitives:var:20071427290" />
      <ind-def:xpath var_ref="oval:com.mcafee.primitives:var:20071427519" />
    </ind-def:xmlfilecontent_object>
    <unix-def:file_object id="oval:com.mcafee.primitives:obj:20071426057" version="1">
      <unix-def:path var_ref="oval:com.mcafee.primitives:var:20071427325" />
      <unix-def:filename var_ref="oval:com.mcafee.primitives:var:20071427431" />
    </unix-def:file_object>
    <textfilecontent_object id="oval:com.mcafee.primitives:obj:2003" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals" var_ref="oval:com.mcafee.primitives:var:20071428451" />
      <filename operation="equals" var_ref="oval:com.mcafee.primitives:var:20071428910" />
      <line operation="pattern match" var_ref="oval:com.mcafee.primitives:var:20071428500" />
    </textfilecontent_object>
    <textfilecontent_object id="oval:com.mcafee.primitives:obj:1003" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals" var_ref="oval:com.mcafee.primitives:var:20071429675" />
      <filename operation="equals" var_ref="oval:com.mcafee.primitives:var:20071429018" />
      <line operation="pattern match" var_ref="oval:com.mcafee.primitives:var:20071429828" />
    </textfilecontent_object>
    <variable_object id="oval:com.mcafee.oval:obj:87701" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <var_ref datatype="string" operation="equals">oval:com.mcafee.oval:var:87703</var_ref>
    </variable_object>
    <variable_object id="oval:com.mcafee.oval:obj:87340" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <var_ref datatype="string" operation="equals">oval:com.mcafee.oval:var:87342</var_ref>
    </variable_object>
    <variable_object id="oval:com.mcafee.oval:obj:87334" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <var_ref datatype="string" operation="equals">oval:com.mcafee.oval:var:87335</var_ref>
    </variable_object>
    <textfilecontent54_object comment="Yahoo! Messenger for Mac is Present in Application Folder" id="oval:com.mcafee.oval:obj:75744" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/Yahoo! Messenger.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">CFBundleShortVersionString.*\n.*string.([\d.]*)\s?(?:beta)?.{2}string.$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Adobe Flash Player for Mac Present in Library Folder" id="oval:com.mcafee.oval:obj:75739" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Library/Internet Plug-Ins/Flash Player.plugin/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">^.+CFBundleShortVersionString.*\n.*string.(\d\d.*).{2}string.$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Adobe Reader 10 for Mac Present in Application Folder" id="oval:com.mcafee.oval:obj:75725" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/Adobe Reader.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">^.*Adobe Reader X (\d+.\d+.\d+)\,.*Adobe Systems Incorporated.*</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Adobe Reader 9 for Mac Present in Application Folder" id="oval:com.mcafee.oval:obj:75724" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/Adobe Reader 9/Adobe Reader.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">(\d+.\d+.\d+)\, Copyright</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Firefox browser for Mac Present in Application Folder" id="oval:com.mcafee.oval:obj:75708" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/Firefox.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">^.*Firefox ([\d.]+).*string.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Skype for Mac is Present in Application Folder" id="oval:com.mcafee.oval:obj:75693" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/Skype.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">CFBundleShortVersionString.*\n.*string.([0-9.]+)..string.$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="QuickTime Player for Mac is Present in Application Folder" id="oval:com.mcafee.oval:obj:75689" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/QuickTime Player.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">^.*string.(\d.*)\,\s.*string.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="VLC media player for Mac is Present in Application Folder" id="oval:com.mcafee.oval:obj:75684" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/VLC.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">^.*VLC media player - version.(\d.*)\s.*.-.\(.*string.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Apple iTunes for Mac is Present in Application Folder" id="oval:com.mcafee.oval:obj:75664" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/iTunes.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">^.*iTunes.(\d.*)\,.*string.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Opera for Mac Present in Application Folder" id="oval:com.mcafee.oval:obj:75659" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/Opera.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">^.*Opera.(\d*\.\d*).*string.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Apple Safari for Mac Present in Application Folder - version.plist" id="oval:com.mcafee.oval:obj:75654" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/Safari.app/Contents</path>
      <filename datatype="string" operation="equals">version.plist</filename>
      <pattern datatype="string" operation="pattern match">^.*string.([0-9]\.[0-9].*).{2}string.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:73992" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>sudoers</filename>
      <pattern operation="pattern match">^Defaults\s*timestamp_timeout\s*=\s*(\d*)$</pattern>
      <instance datatype="int" operation="greater than or equal">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Build from cma.conf file" id="oval:com.mcafee.oval:obj:73776" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/</path>
      <filename>cma.conf</filename>
      <pattern datatype="string" operation="pattern match">^.*CMABuildNumber.(.*).\/CMABuildNumber.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Version from cma.conf file" id="oval:com.mcafee.oval:obj:73775" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/</path>
      <filename>cma.conf</filename>
      <pattern datatype="string" operation="pattern match">^.*CMAVersion.(.*).\/CMAVersion.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <variable_object id="oval:com.mcafee.oval:obj:73774" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <var_ref datatype="string" operation="equals">oval:com.mcafee.oval:var:73778</var_ref>
    </variable_object>
    <file_object id="oval:com.mcafee.oval:obj:73773" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc/</path>
      <filename>cma.conf</filename>
    </file_object>
    <process_object id="oval:com.mcafee.oval:obj:73768" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command datatype="string" operation="pattern match">^.*McAfee/cma/bin/cma$</command>
    </process_object>
    <nvram_object id="oval:com.mcafee.oval:obj:73490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <nvram_var datatype="string">security-mode</nvram_var>
    </nvram_object>
    <file_object id="oval:com.mcafee.oval:obj:73365" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" operation="equals">/usr/local/McAfee</path>
      <filename datatype="string" operation="equals">ProductConfig.xml</filename>
    </file_object>
    <process_object id="oval:com.mcafee.oval:obj:73364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command datatype="string" operation="pattern match">VShieldScanner OAS*</command>
    </process_object>
    <file_object id="oval:com.mcafee.oval:obj:73293" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" operation="pattern match">^/usr/local/McAfee/AntiMalware/dats/[1-9]+</path>
      <filename datatype="string" operation="equals">avvscan.dat</filename>
    </file_object>
    <variable_object id="oval:com.mcafee.oval:obj:73292" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <var_ref datatype="string" operation="equals">oval:com.mcafee.oval:var:73295</var_ref>
    </variable_object>
    <textfilecontent54_object comment="McAfee Security for Mac Build Number" id="oval:com.mcafee.oval:obj:73142" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/usr/local/McAfee</path>
      <filename datatype="string" operation="equals">ProductConfig.xml</filename>
      <pattern datatype="string" operation="pattern match">^.*BuildNumber.(.*).{2}BuildNumber</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="McAfee Security for Mac Product Version" id="oval:com.mcafee.oval:obj:73141" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/usr/local/McAfee</path>
      <filename datatype="string" operation="equals">ProductConfig.xml</filename>
      <pattern datatype="string" operation="pattern match">^.*ProductVersion.(.*).{2}ProductVersion.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <variable_object id="oval:com.mcafee.oval:obj:73140" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <var_ref datatype="string">oval:com.mcafee.oval:var:73144</var_ref>
    </variable_object>
    <process_object id="oval:com.mcafee.oval:obj:73137" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command datatype="string" operation="pattern match">fmpd*</command>
    </process_object>
    <textfilecontent54_object comment="McAfee Security for Mac Present in ProductConfig.xml" id="oval:com.mcafee.oval:obj:72107" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/usr/local/McAfee</path>
      <filename datatype="string" operation="equals">ProductConfig.xml</filename>
      <pattern datatype="string" operation="pattern match">^.*ProductName.(.*).{2}ProductName.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <family_object comment="The default family object." id="oval:com.mcafee.oval:obj:64766" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" />
    <file_object id="oval:com.mcafee.oval:obj:482306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc/pam.d</path>
      <filename>screensaver</filename>
    </file_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:481238" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/asl/</path>
      <filename>com.apple.install</filename>
      <pattern datatype="string" operation="pattern match">^.*/var/log/install.log.*ttl=(\d+)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:481228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/asl/</path>
      <filename>com.apple.authd</filename>
      <pattern datatype="string" operation="pattern match">^.*/var/log/authd.log.*ttl=(\d+)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:481227" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>asl.conf</filename>
      <pattern datatype="string" operation="pattern match">^&gt;\s?appfirewall\.log.*ttl=(\d+)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:481226" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>asl.conf</filename>
      <pattern datatype="string" operation="pattern match">^&gt;\s?system\.log.*ttl=(\d+)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Object for disabling the admins and/or user's ability to log into another user's active and locked session" id="oval:com.mcafee.oval:obj:479108" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/pam.d</path>
      <filename>screensaver</filename>
      <pattern datatype="string" operation="pattern match">^.*pam_group.so\s.*group=admin,wheel fail_safe$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:469319" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>newsyslog.conf</filename>
      <pattern datatype="string" operation="pattern match">^\/.*\/install.log\s+.*\s+\d{3}\s+(\d+)\s+[\W\d]+M\s.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:466602" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>newsyslog.conf</filename>
      <pattern datatype="string" operation="pattern match">^\/.*\/appfirewall.log\s+.*\s+\d{3}\s+(\d+)\s+[\W\d]+M\s.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:466596" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>newsyslog.conf</filename>
      <pattern datatype="string" operation="pattern match">^\/.*\/secure.log\s+.*\s+\d{3}\s+(\d+)\s+[\W\d]+M\s.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:466588" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>newsyslog.conf</filename>
      <pattern datatype="string" operation="pattern match">^\/.*\/system.log\s+.*\s+\d{3}\s+(\d+)\s+[\W\d]+M\s.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:416306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/System/Library/Frameworks/JavaVM.framework/Versions/CurrentJDK</path>
      <filename>Info.plist</filename>
      <xpath datatype="string">/plist/dict/dict[string='1.6']</xpath>
    </xmlfilecontent_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:416299" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>newsyslog.conf</filename>
      <pattern datatype="string" operation="pattern match">^\/.*\/install.log\s+.*\s+\d{3}\s+(\d+)\s.*</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:416292" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>newsyslog.conf</filename>
      <pattern datatype="string" operation="pattern match">^\/.*\/appfirewall.log\s+.*\s+\d{3}\s+(\d+)\s.*</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:416288" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>newsyslog.conf</filename>
      <pattern datatype="string" operation="pattern match">^\/.*\/wtmp\s+.*\s+\d{3}\s+(\d+)\s.*</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <file_object comment="Object for ARDAgent file check" id="oval:com.mcafee.oval:obj:416273" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS</path>
      <filename>ARDAgent</filename>
    </file_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:416270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>authorization</filename>
      <xpath datatype="string">/plist/dict/dict/dict[string='authenticate-session-owner-or-admin']</xpath>
    </xmlfilecontent_object>
    <file_object id="oval:com.mcafee.oval:obj:402030" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons</path>
      <filename>com.apple.smbd.plist</filename>
    </file_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:402027" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/private/etc/apache2/extra</path>
      <filename>httpd-userdir.conf</filename>
      <pattern operation="pattern match">^\s*UserDir\s*(.*)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:2896721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>ntp-restrict.conf</filename>
      <pattern operation="pattern match">^.*restrict lo.*$</pattern>
      <instance datatype="int" operation="greater than or equal">1</instance>
    </textfilecontent54_object>
    <file_object id="oval:com.mcafee.oval:obj:2896720" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc</path>
      <filename>ntp-restrict.conf</filename>
    </file_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:220370" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals" />
      <filename datatype="string" operation="pattern match" />
      <xpath datatype="string" operation="equals" />
    </xmlfilecontent_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207371" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>newsyslog.conf</filename>
      <pattern datatype="string" operation="pattern match">^\/.*\/secure.log\s+.*\s+\d{3}\s+(\d+)\s.*</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207370" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>newsyslog.conf</filename>
      <pattern datatype="string" operation="pattern match">^\/.*\/system.log\s+.*\s+\d{3}\s+(\d+)\s.*</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <file_object id="oval:com.mcafee.oval:obj:207365" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="pattern match">^/Users/[^/]+/$</path>
      <filename xsi:nil="true" />
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <object_reference>oval:com.mcafee.oval:obj:207365</object_reference>
        <filter>oval:com.mcafee.oval:ste:207365</filter>
      </set>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>com.apple.InternetSharing.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>com.apple.xgridcontrollerd.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>com.apple.xgridagentd.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207359" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>com.apple.mDNSResponderHelper.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207358" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>com.apple.mDNSResponder.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>eppc.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207356" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>org.apache.httpd.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207355" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>smbd.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207354" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>ftp.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207353" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/LaunchDaemons/</path>
      <filename>com.apple.AppleFileServer.plist</filename>
    </file_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207337" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/private/etc/</path>
      <filename>ntp.conf</filename>
      <pattern operation="pattern match">^\s*server\s*(.*)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207336" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/private/etc/</path>
      <filename>hostconfig</filename>
      <pattern operation="pattern match">^\s*TIMESYNC=-(YES|NO)-</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207324" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/apache2</path>
      <filename>httpd.conf</filename>
      <pattern operation="pattern match">^\s*TraceEnable\s*(.*)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207323" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/apache2</path>
      <filename>httpd.conf</filename>
      <pattern operation="pattern match">^\s*UserDir\s*(.*)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207322" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/apache2</path>
      <filename>httpd.conf</filename>
      <pattern operation="pattern match">^\s*ServerSignature\s*(.*)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207321" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/apache2</path>
      <filename>httpd.conf</filename>
      <pattern operation="pattern match">^\s*ServerTokens\s*(.*)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207309" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/</path>
      <filename>smb.conf</filename>
      <pattern operation="pattern match">^\s*client\sntlmv2\sauth\s*=\s*(yes|no)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207308" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/</path>
      <filename>smb.conf</filename>
      <pattern operation="pattern match">^\s*guest\sok\s*=\s*(yes|no)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:207307" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/</path>
      <filename>smb.conf</filename>
      <pattern operation="pattern match">^\s*restrict\sanonymous\s*=\s*(\d)</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <file_object id="oval:com.mcafee.oval:obj:207018" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/Extensions/IOBluetoothHIDDriver.kext</path>
      <filename xsi:nil="true" />
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:207017" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/System/Library/Extensions/IOBluetoothFamily.kext</path>
      <filename xsi:nil="true" />
    </file_object>
    <textfilecontent54_object comment="McAfee Site Advisor for Mac Product Version" id="oval:com.mcafee.oval:obj:206660" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/usr/local//McAfee/SiteAdvisor</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">.*string.*([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+).*string</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <process_object id="oval:com.mcafee.oval:obj:206635" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command datatype="string" operation="pattern match">appProtd</command>
    </process_object>
    <process_object id="oval:com.mcafee.oval:obj:206634" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command datatype="string" operation="pattern match">FWService</command>
    </process_object>
    <textfilecontent54_object id="oval:com.mcafee.oval:obj:204025" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/VLC.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">CFBundleShortVersionString.*\n.*string.([0-9.]+)..string.*\n.*\n.*VLC\#</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Mozilla Thunderbird for Mac in Application Folder" id="oval:com.mcafee.oval:obj:203973" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/Thunderbird.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">^.*Thunderbird.([0-9\.]+)\,?.*string.*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="Apple Safari for Mac Present in Application Folder - Info.plist" id="oval:com.mcafee.oval:obj:201664" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/Applications/Safari.app/Contents</path>
      <filename datatype="string" operation="equals">Info.plist</filename>
      <pattern datatype="string" operation="pattern match">^.*string.([0-9.]+).*Copyright.*string.*</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">com.apple.xgridcontrollerd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">com.apple.xgridcontrollerd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[1]/text()</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">com.apple.xgridagentd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290558" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">com.apple.xgridagentd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[2]/text()</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290555" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">eppc.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290553" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">eppc.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[1]/text()</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290550" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">org.apache.httpd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">org.apache.httpd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[1]/text()</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">com.apple.AppleFileServer.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">com.apple.AppleFileServer.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[1]/text()</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">nmbd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290538" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">nmbd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[1]/text()</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">printer.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">printer.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[1]/text()</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">smbd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290523" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">smbd.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[1]/text()</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">tftp.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">tftp.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[1]/text()</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">ftp.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/true[1]</xpath>
    </xmlfilecontent_object>
    <xmlfilecontent_object id="oval:com.mcafee.oval:obj:200804290503" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/System/Library/LaunchDaemons</path>
      <filename datatype="string" operation="equals">ftp.plist</filename>
      <xpath datatype="string" operation="equals">/plist/dict[1]/key[1]/text()</xpath>
    </xmlfilecontent_object>
    <textfilecontent_object id="oval:com.mcafee.oval:obj:200804240513" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>syslog.conf</filename>
      <line operation="pattern match">^[^#].*\/var\/log\/\w</line>
    </textfilecontent_object>
    <textfilecontent_object id="oval:com.mcafee.oval:obj:200804240511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>syslog.conf</filename>
      <line operation="pattern match">^\*\s+@((\d{1,3}\.){3}\d{1,3}|\w)</line>
    </textfilecontent_object>
    <textfilecontent_object id="oval:com.mcafee.oval:obj:200804240508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>sshd_config</filename>
      <line operation="pattern match">^Banner\s+\/etc()\/\w+</line>
    </textfilecontent_object>
    <textfilecontent_object id="oval:com.mcafee.oval:obj:200804240505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>sshd_config</filename>
      <line operation="pattern match">^PermitRootLogin\s+no</line>
    </textfilecontent_object>
    <textfilecontent_object id="oval:com.mcafee.oval:obj:200804240502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>sshd_config</filename>
      <line operation="pattern match">^Protocol\s+2</line>
    </textfilecontent_object>
    <uname_object comment="The single uname object." id="oval:com.mcafee.oval:obj:200804170012" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" />
    <file_object comment="/etc/sudoers" id="oval:com.mcafee.oval:obj:200803060073" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc</path>
      <filename>sudoers</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:1414320" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/Library/Preferences/SystemConfiguration</path>
      <filename>com.apple.nat.plist</filename>
    </file_object>
    <file_object id="oval:com.mcafee.oval:obj:1414198" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc</path>
      <filename>exports</filename>
    </file_object>
  </objects>
  <states>
    <file_state comment="The file_state element defines the different metadata associate with a UNIX file. This includes the path, filename, type, group id, user id, size, etc. In addition, the permission associated with the file are also included. Please refer to the individual elements in the schema for more details about what each represents." id="oval:com.mcafee.primitives:ste:73247" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" var_ref="oval:com.mcafee.primitives:var:73248" />
      <filename datatype="string" var_ref="oval:com.mcafee.primitives:var:73249" />
      <type datatype="string" var_ref="oval:com.mcafee.primitives:var:73263" />
      <group_id datatype="int" var_ref="oval:com.mcafee.primitives:var:73264" />
      <user_id datatype="int" var_ref="oval:com.mcafee.primitives:var:73265" />
      <a_time datatype="int" var_ref="oval:com.mcafee.primitives:var:73266" />
      <c_time datatype="int" var_ref="oval:com.mcafee.primitives:var:73267" />
      <m_time datatype="int" var_ref="oval:com.mcafee.primitives:var:73268" />
      <size datatype="int" var_ref="oval:com.mcafee.primitives:var:73269" />
      <suid datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73270" />
      <sgid datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73271" />
      <sticky datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73272" />
      <uread datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73273" />
      <uwrite datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73274" />
      <uexec datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73275" />
      <gread datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73276" />
      <gwrite datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73277" />
      <gexec datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73278" />
      <oread datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73279" />
      <owrite datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73280" />
      <oexec datatype="boolean" var_ref="oval:com.mcafee.primitives:var:74989" />
    </file_state>
    <ind-def:xmlfilecontent_state id="oval:com.mcafee.primitives:ste:55430" version="2">
      <ind-def:xpath var_ref="oval:com.mcafee.primitives:var:20071427519" />
      <ind-def:value_of var_ref="oval:com.mcafee.primitives:var:55431" />
    </ind-def:xmlfilecontent_state>
    <textfilecontent_state id="oval:com.mcafee.primitives:ste:51104" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" var_ref="oval:com.mcafee.primitives:var:51108" />
    </textfilecontent_state>
    <macos-def:inetlisteningservers_state id="oval:com.mcafee.primitives:ste:50972" version="6">
      <macos-def:program_name datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529160" />
      <macos-def:local_address datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529158" />
      <macos-def:local_full_address datatype="string" var_ref="oval:com.mcafee.primitives:var:20091218446" />
      <macos-def:local_port datatype="int" var_ref="oval:com.mcafee.primitives:var:20080529159" />
      <macos-def:foreign_address datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529161" />
      <macos-def:foreign_full_address datatype="string" var_ref="oval:com.mcafee.primitives:var:20091218450" />
      <macos-def:foreign_port datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529162" />
      <macos-def:pid datatype="int" var_ref="oval:com.mcafee.primitives:var:20080529163" />
      <macos-def:protocol datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529157" />
      <macos-def:user_id datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529164" />
    </macos-def:inetlisteningservers_state>
    <accountinfo_state id="oval:com.mcafee.primitives:ste:50970" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <username datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529151" />
      <password datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529152" />
      <uid datatype="int" var_ref="oval:com.mcafee.primitives:var:20091218117" />
      <gid datatype="int" var_ref="oval:com.mcafee.primitives:var:20080529153" />
      <realname datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529154" />
      <home_dir datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529155" />
      <login_shell datatype="string" var_ref="oval:com.mcafee.primitives:var:20080529156" />
    </accountinfo_state>
    <nvram_state comment="This specifies the nvram variable to check." id="oval:com.mcafee.primitives:ste:50966" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <nvram_value var_ref="oval:com.mcafee.primitives:var:20080529150" />
    </nvram_state>
    <pwpolicy_state id="oval:com.mcafee.primitives:ste:50964" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <username var_ref="oval:com.mcafee.primitives:var:20080529140" />
      <userpass var_ref="oval:com.mcafee.primitives:var:20080529141" />
      <directory_node var_ref="oval:com.mcafee.primitives:var:20080529142" />
      <maxChars datatype="int" var_ref="oval:com.mcafee.primitives:var:20080529143" />
      <maxFailedLoginAttempts datatype="int" var_ref="oval:com.mcafee.primitives:var:20080529144" />
      <minChars datatype="int" var_ref="oval:com.mcafee.primitives:var:20080529145" />
      <passwordCannotBeName datatype="boolean" var_ref="oval:com.mcafee.primitives:var:20080529146" />
      <requiresAlpha datatype="boolean" var_ref="oval:com.mcafee.primitives:var:20080529147" />
      <requiresNumeric datatype="boolean" var_ref="oval:com.mcafee.primitives:var:20080529148" />
    </pwpolicy_state>
    <textfilecontent54_state id="oval:com.mcafee.primitives:ste:402699" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" var_ref="oval:com.mcafee.primitives:var:402743" />
    </textfilecontent54_state>
    <file_state comment="The file_state element defines the different metadata associate with a UNIX file. This includes the path, filename, type, group id, user id, size, etc. In addition, the permission associated with the file are also included. Please refer to the individual elements in the schema for more details about what each represents." id="oval:com.mcafee.primitives:ste:200912221300" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" var_ref="oval:com.mcafee.primitives:var:73248" />
      <type datatype="string" var_ref="oval:com.mcafee.primitives:var:73263" />
      <group_id datatype="int" var_ref="oval:com.mcafee.primitives:var:73264" />
      <user_id datatype="int" var_ref="oval:com.mcafee.primitives:var:73265" />
      <a_time datatype="int" var_ref="oval:com.mcafee.primitives:var:73266" />
      <c_time datatype="int" var_ref="oval:com.mcafee.primitives:var:73267" />
      <m_time datatype="int" var_ref="oval:com.mcafee.primitives:var:73268" />
      <size datatype="int" var_ref="oval:com.mcafee.primitives:var:73269" />
      <suid datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73270" />
      <sgid datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73271" />
      <sticky datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73272" />
      <uread datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73273" />
      <uwrite datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73274" />
      <uexec datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73275" />
      <gread datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73276" />
      <gwrite datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73277" />
      <gexec datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73278" />
      <oread datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73279" />
      <owrite datatype="boolean" var_ref="oval:com.mcafee.primitives:var:73280" />
      <oexec datatype="boolean" var_ref="oval:com.mcafee.primitives:var:74989" />
    </file_state>
    <ind-def:environmentvariable_state id='oval:com.mcafee.primitives:ste:20071426329' version='0'>
      <ind-def:value var_ref='oval:com.mcafee.primitives:var:20071426858' />
    </ind-def:environmentvariable_state>
    <unix-def:file_state id="oval:com.mcafee.primitives:ste:20071426177" version="4">
      <unix-def:group_id datatype="int" var_ref="oval:com.mcafee.primitives:var:20071427164" />
      <unix-def:user_id datatype="int" var_ref="oval:com.mcafee.primitives:var:20071427188" />
    </unix-def:file_state>
    <unix-def:file_state id="oval:com.mcafee.primitives:ste:20071426100" version="2">
      <unix-def:uread datatype="boolean" var_ref="oval:com.mcafee.primitives:var:200802071001" />
      <unix-def:uwrite datatype="boolean" var_ref="oval:com.mcafee.primitives:var:20071427512" />
      <unix-def:uexec datatype="boolean" var_ref="oval:com.mcafee.primitives:var:20071427208" />
      <unix-def:gread datatype="boolean" var_ref="oval:com.mcafee.primitives:var:20071427444" />
      <unix-def:gwrite datatype="boolean" var_ref="oval:com.mcafee.primitives:var:20071427310" />
      <unix-def:gexec datatype="boolean" var_ref="oval:com.mcafee.primitives:var:20071427193" />
      <unix-def:oread datatype="boolean" var_ref="oval:com.mcafee.primitives:var:1011" />
      <unix-def:owrite datatype="boolean" var_ref="oval:com.mcafee.primitives:var:1012" />
      <unix-def:oexec datatype="boolean" var_ref="oval:com.mcafee.primitives:var:1013" />
    </unix-def:file_state>
    <textfilecontent_state id="oval:com.mcafee.primitives:ste:2003" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="int" var_ref="oval:com.mcafee.primitives:var:20071428766" />
    </textfilecontent_state>
    <textfilecontent_state comment="The setting that should be configured" id="oval:com.mcafee.primitives:ste:1003" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression var_ref="oval:com.mcafee.primitives:var:20071429978" />
    </textfilecontent_state>
    <variable_state comment="pattern to check if version is greater than or equal to 3.6 and less than 3.6.2" id="oval:com.mcafee.oval:ste:87702" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value datatype="string" operation="pattern match">^(3\.6(\.[01])?)($|\s)</value>
    </variable_state>
    <variable_state comment="pattern to check if version is greater than or equal to 4.0 and less than 4.0.5" id="oval:com.mcafee.oval:ste:87458" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value datatype="string" operation="pattern match">^4\.0(\.0)?$</value>
    </variable_state>
    <variable_state comment="check if version is less than 7.6.6" id="oval:com.mcafee.oval:ste:87341" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value datatype="version" operation="less than">7.6.6</value>
    </variable_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75745" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75746" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75740" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75741" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75726" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75727" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75709" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75710" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75694" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75695" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75690" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75691" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75685" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75686" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75665" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75666" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75660" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75661" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:75655" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:75656" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:73993" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="int" var_check="all" var_ref="oval:com.mcafee.oval:var:73995" />
    </textfilecontent54_state>
    <variable_state comment="McAfee ePO Agent (for Mac) Minimum Product Version" id="oval:com.mcafee.oval:ste:73777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value datatype="version" operation="greater than or equal" var_check="at least one" var_ref="oval:com.mcafee.oval:var:73779" />
    </variable_state>
    <process_state comment="McAfee ePO agent framework service status" id="oval:com.mcafee.oval:ste:73769" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <pid datatype="int" operation="greater than">0</pid>
    </process_state>
    <nvram_state id="oval:com.mcafee.oval:ste:73590" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos">
      <nvram_value datatype="string" operation="equals">command</nvram_value>
    </nvram_state>
    <variable_state id="oval:com.mcafee.oval:ste:73294" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value datatype="int" entity_check="at least one" operation="less than or equal" var_check="at least one" var_ref="oval:com.mcafee.oval:var:73296" />
    </variable_state>
    <variable_state id="oval:com.mcafee.oval:ste:73143" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value datatype="version" operation="greater than or equal" var_check="at least one" var_ref="oval:com.mcafee.oval:var:73145" />
    </variable_state>
    <process_state id="oval:com.mcafee.oval:ste:73138" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <pid datatype="int" operation="greater than">0</pid>
    </process_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:68493" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="equals">McAfee Security for Mac</subexpression>
    </textfilecontent54_state>
    <family_state comment="Unix family" id="oval:com.mcafee.oval:ste:64771" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <family>unix</family>
    </family_state>
    <inetd_state comment="The inetd_state element defines the different information associated with a specific Internet service. Please refer to the individual elements in the schema for more details about what each represents." id="oval:com.mcafee.oval:ste:5218" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program var_ref="oval:com.mcafee.oval:var:5221" />
      <server_arguments var_ref="oval:com.mcafee.oval:var:5222" />
      <endpoint_type var_ref="oval:com.mcafee.oval:var:5223" />
      <exec_as_user var_ref="oval:com.mcafee.oval:var:5224" />
      <wait_status var_ref="oval:com.mcafee.oval:var:5225" />
    </inetd_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:481235" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="int" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:481233" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:481229" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="int" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:481232" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:469321" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="int" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:469322" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:466590" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="int" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:466592" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:416298" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="int" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:416300" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:416294" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="int" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:416295" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:416289" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="int" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:416290" />
    </textfilecontent54_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:220370" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals" />
    </xmlfilecontent_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:211698" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^(3\.5((\.[0-9])?|\.1[01])|3\.6(\.[0-8])?)($|\s)</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:211697" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^(3\.6(\.[0-8])?)($|\s)</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:211696" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^3\.(0(\.[1-6])?)($|[^.0-9])</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:211695" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^3\.(1(\.[1-2])?)($|[^.0-9])</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:211694" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^3\.(0(\.[1-6])?|1|1\.[12])($|[^.0-9])</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:211693" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^(3\.5((\.[0-9])?|\.1[01]))($|\s)</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:211691" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="less than">5.0.2</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:211690" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="less than">4.1.2</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207373" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" var_ref="oval:com.mcafee.oval:var:207375" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207372" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" var_ref="oval:com.mcafee.oval:var:207374" />
    </textfilecontent54_state>
    <file_state id="oval:com.mcafee.oval:ste:207366" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uread datatype="boolean" var_ref="oval:com.mcafee.oval:var:207376" />
      <uwrite datatype="boolean" var_ref="oval:com.mcafee.oval:var:207377" />
      <uexec datatype="boolean" var_ref="oval:com.mcafee.oval:var:207378" />
      <gread datatype="boolean" var_ref="oval:com.mcafee.oval:var:207379" />
      <gwrite datatype="boolean" var_ref="oval:com.mcafee.oval:var:207380" />
      <gexec datatype="boolean" var_ref="oval:com.mcafee.oval:var:207381" />
      <oread datatype="boolean" var_ref="oval:com.mcafee.oval:var:207382" />
      <owrite datatype="boolean" var_ref="oval:com.mcafee.oval:var:207383" />
      <oexec datatype="boolean" var_ref="oval:com.mcafee.oval:var:207384" />
    </file_state>
    <file_state id="oval:com.mcafee.oval:ste:207365" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/Users/Shared/</path>
    </file_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression var_ref="oval:com.mcafee.oval:var:207341" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207338" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression var_ref="oval:com.mcafee.oval:var:207340" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207328" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression operation="pattern match" var_ref="oval:com.mcafee.oval:var:207332" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207327" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression var_ref="oval:com.mcafee.oval:var:207331" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression var_ref="oval:com.mcafee.oval:var:207330" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207325" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression var_ref="oval:com.mcafee.oval:var:207329" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207312" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression var_ref="oval:com.mcafee.oval:var:207315" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207311" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression var_ref="oval:com.mcafee.oval:var:207314" />
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:207310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression var_ref="oval:com.mcafee.oval:var:207313" />
    </textfilecontent54_state>
    <variable_state comment="check if version is equal to 3.6.7" id="oval:com.mcafee.oval:ste:206675" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value datatype="version" operation="equals">3.6.7</value>
    </variable_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:206661" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="greater than or equal" var_ref="oval:com.mcafee.oval:var:206662" />
    </textfilecontent54_state>
    <variable_state id="oval:com.mcafee.oval:ste:206619" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value datatype="int" entity_check="at least one" operation="less than or equal" var_check="at least one" var_ref="oval:com.mcafee.oval:var:206620" />
    </variable_state>
    <variable_state id="oval:com.mcafee.oval:ste:206611" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value datatype="version" operation="greater than or equal" var_check="at least one" var_ref="oval:com.mcafee.oval:var:206612" />
    </variable_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:206610" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="equals">McAfee Internet Security</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:206598" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="less than">5.0.1</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:206594" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="less than">4.1.1</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:206580" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="less than">9.2.1</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:206070" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^3\.(0(\.[1-5])?|1)($|[^.0-9])</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:206067" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^3\.1($|[^.0-9])</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:206040" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^(3\.6(\.[0-6])?)($|\s)</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:206037" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^(3\.5((\.[0-9])?|\.10)|3\.6(\.[0-6])?)($|\s)</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:203974" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="less than">3.0.5</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:203970" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^(3\.5(\.[0-9])?|3\.6(\.[0-2])?)($|\s)</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:203969" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^(3\.5(\.[0-9])?|3\.6(\.[0-3])?)($|\s)</subexpression>
    </textfilecontent54_state>
    <textfilecontent54_state id="oval:com.mcafee.oval:ste:201657" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="version" operation="less than">4.1</subexpression>
    </textfilecontent54_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290564" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290559" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290554" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290549" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290544" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290539" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290534" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290524" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290509" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <xmlfilecontent_state id="oval:com.mcafee.oval:ste:200804290504" operator="AND" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <value_of datatype="string" operation="equals">Disabled</value_of>
    </xmlfilecontent_state>
    <uname_state id="oval:com.mcafee.oval:ste:200804170019" operator="AND" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <processor_type operation="pattern match">powerpc</processor_type>
    </uname_state>
    <uname_state id="oval:com.mcafee.oval:ste:200804170017" operator="AND" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <processor_type operation="equals">i386</processor_type>
    </uname_state>
    <uname_state id="oval:com.mcafee.oval:ste:200804170015" operator="AND" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release operation="pattern match">^9\.\d+\.\d+$</os_release>
    </uname_state>
    <uname_state id="oval:com.mcafee.oval:ste:200804170013" operator="AND" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release operation="pattern match">^8\.\d+\.\d+$</os_release>
    </uname_state>
  </states>
  <variables>
    <external_variable comment="Scorecard Benchmark Version" datatype="version" id="oval:org.Trellix.windows.DISA.oval:var:4408" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Maximum Security Log Size" datatype="int" id="oval:mil.disa.stig.windows:var:419900" version="1">
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
      <possible_value hint="enabled:196608_kb">196608</possible_value>
      <possible_value hint="enabled:1024000_kb">1024000</possible_value>
    </external_variable>
    <external_variable comment="Solicited Remote Assistance" datatype="int" id="oval:mil.disa.stig.windows:var:402900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Status of Guest Account" datatype="boolean" id="oval:mil.disa.stig.windows:var:13000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Status of Admin Account" datatype="boolean" id="oval:mil.disa.stig.windows:var:12900" version="3">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Accounts: Limit local account use to blank passwords to console logon only" datatype="int" id="oval:mil.disa.stig.windows:var:118400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Status of Guest Account" datatype="boolean" id="oval:mil.disa.stig.windows:var:118301" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="WinRM Client: Allow unencrypted traffic" datatype="int" id="oval:mil.disa.stig.windows:var:112400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent Internet Explorer security prompt for Windows Installer scripts" datatype="int" id="oval:mil.disa.stig.windows:var:112100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Allow user control over installs" datatype="int" id="oval:mil.disa.stig.windows:var:111900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn on Basic feed authentication over HTTP" datatype="int" id="oval:mil.disa.stig.windows:var:111800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent downloading of enclosures" datatype="int" id="oval:mil.disa.stig.windows:var:111700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Set client connection encryption level" datatype="int" id="oval:mil.disa.stig.windows:var:111600" version="2">
      <possible_value hint="low_level">1</possible_value>
      <possible_value hint="client_compatible">2</possible_value>
      <possible_value hint="high_level">3</possible_value>
    </external_variable>
    <external_variable comment="Require secure RPC communication" datatype="int" id="oval:mil.disa.stig.windows:var:111500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Always prompt for password upon connection" datatype="int" id="oval:mil.disa.stig.windows:var:111400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow drive redirection" datatype="int" id="oval:mil.disa.stig.windows:var:111300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow passwords to be saved" datatype="int" id="oval:mil.disa.stig.windows:var:111200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off shell protocol protected mode" datatype="int" id="oval:mil.disa.stig.windows:var:111100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Heap termination on corruption" datatype="int" id="oval:mil.disa.stig.windows:var:111000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Data Execution Protection" datatype="int" id="oval:mil.disa.stig.windows:var:110900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Maximum System Log Size" datatype="int" id="oval:mil.disa.stig.windows:var:110700" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Maximum Security Log Size" datatype="int" id="oval:mil.disa.stig.windows:var:110600" version="1">
      <possible_value hint="enabled:49152_kb">49152</possible_value>
      <possible_value hint="enabled:98304_kb">98304</possible_value>
      <possible_value hint="enabled:196608_kb">196608</possible_value>
    </external_variable>
    <external_variable comment="Maximum Application Log Size" datatype="int" id="oval:mil.disa.stig.windows:var:110500" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Enumerate administrator accounts on elevation" datatype="int" id="oval:mil.disa.stig.windows:var:110400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Default behavior for AutoRun" datatype="int" id="oval:mil.disa.stig.windows:var:109800" version="1">
      <possible_value hint="do_not_execute_autorun_commands">1</possible_value>
      <possible_value hint="automatically_execute_autorun_commands">2</possible_value>
    </external_variable>
    <external_variable comment="Turn off Autoplay for non-volume devices" datatype="int" id="oval:mil.disa.stig.windows:var:109700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Program Inventory" datatype="int" id="oval:mil.disa.stig.windows:var:109600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (Plugged)" datatype="int" id="oval:mil.disa.stig.windows:var:109500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (On Battery)" datatype="int" id="oval:mil.disa.stig.windows:var:109400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off printing over HTTP" datatype="int" id="oval:mil.disa.stig.windows:var:109200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off downloading of print drivers over HTTP" datatype="int" id="oval:mil.disa.stig.windows:var:109100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers" datatype="int" id="oval:mil.disa.stig.windows:var:108700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes" datatype="int" id="oval:mil.disa.stig.windows:var:108600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)" datatype="int" id="oval:mil.disa.stig.windows:var:108500" version="1">
      <possible_value hint="source_routing_packets_allowed">0</possible_value>
      <possible_value hint="source_routing_packets_ignored">1</possible_value>
      <possible_value hint="source_routing_packets_disabled">2</possible_value>
    </external_variable>
    <external_variable comment="MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)" datatype="int" id="oval:mil.disa.stig.windows:var:108400" version="1">
      <possible_value hint="No_additional_protection">0</possible_value>
      <possible_value hint="Medium_protection">1</possible_value>
      <possible_value hint="Highest_protection">2</possible_value>
    </external_variable>
    <external_variable comment="Enforce Reversible Encryption When Storing Passwords" datatype="boolean" id="oval:mil.disa.stig.windows:var:101900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enforce Password Complexity" datatype="boolean" id="oval:mil.disa.stig.windows:var:101800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Minimum Password Length" datatype="int" id="oval:mil.disa.stig.windows:var:101700" version="1">
      <possible_value hint="8_characters">8</possible_value>
      <possible_value hint="9_characters">9</possible_value>
      <possible_value hint="12_characters">12</possible_value>
      <possible_value hint="14_characters">14</possible_value>
      <possible_value hint="15_characters">15</possible_value>
    </external_variable>
    <external_variable comment="Minimum Password Age" datatype="int" id="oval:mil.disa.stig.windows:var:101600" version="1">
      <possible_value hint="86400_seconds">86400</possible_value>
      <possible_value hint="172800_seconds">172800</possible_value>
      <possible_value hint="432000_seconds">432000</possible_value>
    </external_variable>
    <external_variable comment="Maximum Password Age" datatype="int" id="oval:mil.disa.stig.windows:var:101500" version="1">
      <possible_value hint="5184000_seconds">5184000</possible_value>
      <possible_value hint="7776000_seconds">7776000</possible_value>
    </external_variable>
    <external_variable comment="Enforce Password History" datatype="int" id="oval:mil.disa.stig.windows:var:101400" version="1">
      <possible_value hint="5_passwords">5</possible_value>
      <possible_value hint="24_passwords">24</possible_value>
    </external_variable>
    <external_variable comment="Reset Account Lockout Counter After" datatype="int" id="oval:mil.disa.stig.windows:var:101300" version="1">
      <possible_value hint="900_seconds">900</possible_value>
      <possible_value hint="3600_seconds">3600</possible_value>
      <possible_value hint="86400_seconds">86400</possible_value>
    </external_variable>
    <external_variable comment="Account Lockout Threshold" datatype="int" id="oval:mil.disa.stig.windows:var:101200" version="1">
      <possible_value hint="3_attempts">3</possible_value>
      <possible_value hint="5_attempts">5</possible_value>
      <possible_value hint="10_attempts">10</possible_value>
      <possible_value hint="50_attempts">50</possible_value>
    </external_variable>
    <external_variable comment="Value of var_accounts_user_umask (the required umask) as string" datatype="string" id="oval:mil.disa.stig.rhel7:var:4211" version="1" />
    <external_variable comment="SSH Approved MACs by FIPS" datatype="string" id="oval:mil.disa.stig.rhel7:var:4175" version="3" />
    <external_variable comment="timeout value" datatype="int" id="oval:mil.disa.stig.rhel7:var:3866" version="1" />
    <external_variable comment="external variable for selinux state" datatype="string" id="oval:mil.disa.stig.rhel7:var:3865" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="External variable: name of selinux policy in /etc/selinux/config" datatype="string" id="oval:mil.disa.stig.rhel7:var:3864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="inactivity timeout variable" datatype="int" id="oval:mil.disa.stig.rhel7:var:3828" version="1" />
    <external_variable comment="audit action_mail_acct setting" datatype="string" id="oval:mil.disa.stig.rhel7:var:3821" version="1" />
    <external_variable comment="number of passwords that should be remembered" datatype="int" id="oval:mil.disa.stig.rhel7:var:3806" version="1" />
    <external_variable comment="External variable for pam_pwquality ucredit" datatype="int" id="oval:mil.disa.stig.rhel7:var:3805" version="1" />
    <external_variable comment="External variable for pam_pwquality ocredit" datatype="int" id="oval:mil.disa.stig.rhel7:var:3803" version="1" />
    <external_variable comment="External variable for pam_pwquality minlen" datatype="int" id="oval:mil.disa.stig.rhel7:var:3802" version="1" />
    <external_variable comment="External variable for pam_pwquality minclass" datatype="int" id="oval:mil.disa.stig.rhel7:var:3801" version="1" />
    <external_variable comment="External variable for pam_pwquality maxrepeat" datatype="int" id="oval:mil.disa.stig.rhel7:var:3800" version="1" />
    <external_variable comment="External variable for pam_pwquality maxclassrepeat" datatype="int" id="oval:mil.disa.stig.rhel7:var:3799" version="1" />
    <external_variable comment="External variable for pam_pwquality lcredit" datatype="int" id="oval:mil.disa.stig.rhel7:var:3798" version="1" />
    <external_variable comment="External variable for pam_pwquality difok" datatype="int" id="oval:mil.disa.stig.rhel7:var:3797" version="1" />
    <external_variable comment="External variable for pam_pwquality dcredit" datatype="int" id="oval:mil.disa.stig.rhel7:var:3796" version="1" />
    <external_variable comment="Minimum password age in days" datatype="int" id="oval:mil.disa.stig.rhel7:var:3794" version="1" />
    <external_variable comment="Maximum password age" datatype="int" id="oval:mil.disa.stig.rhel7:var:3793" version="1" />
    <external_variable comment="maximum number of concurrent logins per user" datatype="int" id="oval:mil.disa.stig.rhel7:var:3792" version="1" />
    <external_variable comment="inactive days expiration" datatype="int" id="oval:mil.disa.stig.rhel7:var:3790" version="1" />
    <external_variable comment="External variable for net.ipv6.conf.all.accept_source_route" datatype="int" id="oval:mil.disa.stig.rhel7:var:3785" version="1" />
    <external_variable comment="External variable for net.ipv4.icmp_echo_ignore_broadcasts" datatype="int" id="oval:mil.disa.stig.rhel7:var:3780" version="1" />
    <external_variable comment="External variable for net.ipv4.conf.default.accept_source_route" datatype="int" id="oval:mil.disa.stig.rhel7:var:3776" version="1" />
    <external_variable comment="External variable for net.ipv4.conf.default.accept_redirects" datatype="int" id="oval:mil.disa.stig.rhel7:var:3775" version="1" />
    <external_variable comment="External variable for net.ipv4.conf.all.accept_source_route" datatype="int" id="oval:mil.disa.stig.rhel7:var:3771" version="1" />
    <external_variable comment="External variable for net.ipv4.conf.all.accept_redirects" datatype="int" id="oval:mil.disa.stig.rhel7:var:3770" version="1" />
    <external_variable comment="Expected fail_delay" datatype="int" id="oval:mil.disa.stig.rhel7:var:3761" version="1" />
    <external_variable comment="warning banner text variable" datatype="string" id="oval:mil.disa.stig.rhel7:var:3745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Disable Windows Error Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:488700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Disable Windows Error Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:488600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Always install with elevated privileges" datatype="int" id="oval:mil.disa.fso.windows:var:479400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn on Basic feed authentication over HTTP" datatype="int" id="oval:mil.disa.fso.windows:var:478900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do Not Show First Use Dialog Boxes" datatype="int" id="oval:mil.disa.fso.windows:var:478700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent Windows Media DRM Internet Access" datatype="int" id="oval:mil.disa.fso.windows:var:478600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Number of Previous Logons to Cache (in Case Domain Controller Is Not Available)" datatype="int" id="oval:mil.disa.fso.windows:var:478500" version="1">
      <possible_value hint="0_cached">0</possible_value>
      <possible_value hint="1_cached">1</possible_value>
      <possible_value hint="2_cached">2</possible_value>
      <possible_value hint="4_cached">4</possible_value>
      <possible_value hint="10_cached">10</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Event Views Events.asp Links" datatype="int" id="oval:mil.disa.fso.windows:var:478400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Status of Admin Account" datatype="boolean" id="oval:mil.disa.fso.windows:var:478200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Virtualize file and registry write failures to per-user locations" datatype="int" id="oval:mil.disa.fso.windows:var:461100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Switch to the secure desktop when prompting for elevation" datatype="int" id="oval:mil.disa.fso.windows:var:461000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Run all administrators in Admin Approval Mode" datatype="int" id="oval:mil.disa.fso.windows:var:460900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Only elevate UIAccess applications that are installed in secure locations" datatype="int" id="oval:mil.disa.fso.windows:var:460800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Only elevate executables that are signed and validated" datatype="int" id="oval:mil.disa.fso.windows:var:460700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Detect application installations and prompt for elevation" datatype="int" id="oval:mil.disa.fso.windows:var:460600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Behavior of the elevation prompt for standard users" datatype="int" id="oval:mil.disa.fso.windows:var:460500" version="1">
      <possible_value hint="automatically_deny">0</possible_value>
      <possible_value hint="prompt_for_credentials_on_the_secure_desktop">1</possible_value>
      <possible_value hint="prompt_for_credentials">3</possible_value>
    </external_variable>
    <external_variable comment="Admin Approval Mode for the Built-in Administrator account" datatype="int" id="oval:mil.disa.fso.windows:var:460300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="System objects: Strengthen default permissions of internal system objects" datatype="int" id="oval:mil.disa.fso.windows:var:460200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="System objects: Require case insensitivity for non-Windows subsystems" datatype="int" id="oval:mil.disa.fso.windows:var:460100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" datatype="int" id="oval:mil.disa.fso.windows:var:460000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Shutdown: Allow System to be Shut Down Without Having to Log On" datatype="int" id="oval:mil.disa.fso.windows:var:459900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Recovery Console: Allow Floppy Copy and Access to All Drives and All Folders" datatype="int" id="oval:mil.disa.fso.windows:var:459800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Recovery Console: Allow Automatic Administrative Logon" datatype="int" id="oval:mil.disa.fso.windows:var:459700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network Security: LDAP client signing requirements" datatype="int" id="oval:mil.disa.fso.windows:var:459400" version="1">
      <possible_value hint="none">0</possible_value>
      <possible_value hint="negotiate_signing">1</possible_value>
      <possible_value hint="require_signing">2</possible_value>
    </external_variable>
    <external_variable comment="Network Security: LAN Manager Authentication Level" datatype="int" id="oval:mil.disa.fso.windows:var:459300" version="1">
      <possible_value hint="send_LM_and_NTLM_responses">0</possible_value>
      <possible_value hint="send_LM_and_NTLM_use_NTLMv2_session_security_if_negotiated">1</possible_value>
      <possible_value hint="send_NTLM_response_only">2</possible_value>
      <possible_value hint="send_NTLMv2_response_only">3</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM">4</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM_and_NTLM">5</possible_value>
    </external_variable>
    <external_variable comment="Network security: Force logoff when logon hours expire" datatype="int" id="oval:mil.disa.fso.windows:var:459200" version="1">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network security: Do not store LAN Manager hash value on next password change" datatype="int" id="oval:mil.disa.fso.windows:var:459100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network Security: Allow PKU2U authentication requests to this computer to use online identities" datatype="int" id="oval:mil.disa.fso.windows:var:458900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network security: Allow LocalSystem NULL session fallback" datatype="int" id="oval:mil.disa.fso.windows:var:458800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network security: Allow Local System to use computer identity for NTLM" datatype="int" id="oval:mil.disa.fso.windows:var:458700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Sharing and security model for local accounts" datatype="int" id="oval:mil.disa.fso.windows:var:458600" version="1">
      <possible_value hint="classic">0</possible_value>
      <possible_value hint="guests_only">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Restrict anonymous access to Named Pipes and Shares" datatype="int" id="oval:mil.disa.fso.windows:var:458400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Let Everyone permissions apply to anonymous users" datatype="int" id="oval:mil.disa.fso.windows:var:458100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Do not allow storage of credentials or .NET Passports for network authentication" datatype="int" id="oval:mil.disa.fso.windows:var:458000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Do not allow anonymous enumeration of SAM accounts and shares" datatype="int" id="oval:mil.disa.fso.windows:var:457900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Do not allow anonymous enumeration of SAM accounts" datatype="int" id="oval:mil.disa.fso.windows:var:457800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning" datatype="int" id="oval:mil.disa.fso.windows:var:457700" version="1">
      <possible_value hint="90_percent">90</possible_value>
    </external_variable>
    <external_variable comment="MSS: (TCPMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)" datatype="int" id="oval:mil.disa.fso.windows:var:457600" version="1">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable comment="MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)" datatype="int" id="oval:mil.disa.fso.windows:var:457500" version="1">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable comment="MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)" datatype="int" id="oval:mil.disa.fso.windows:var:457400" version="1">
      <possible_value hint="zero_seconds">0</possible_value>
      <possible_value hint="5_seconds">5</possible_value>
    </external_variable>
    <external_variable comment="MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)" datatype="int" id="oval:mil.disa.fso.windows:var:457300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure DefaultGateway addresses (could lead to DoS)" datatype="int" id="oval:mil.disa.fso.windows:var:457200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
      <possible_value hint="enabled_only_if_dhcp_sends_perform_router_discovery_option">2</possible_value>
    </external_variable>
    <external_variable comment="MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers" datatype="int" id="oval:mil.disa.fso.windows:var:457100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic" datatype="int" id="oval:mil.disa.fso.windows:var:457000" version="1">
      <possible_value hint="multicast_broadcast_rsvp_kerberos_isakmp_exempt">0</possible_value>
      <possible_value hint="multicast_broadcast_isakmp_exempt">1</possible_value>
      <possible_value hint="rsvp_kerberos_isakmp_exempt">2</possible_value>
      <possible_value hint="isakmp_exempt">3</possible_value>
    </external_variable>
    <external_variable comment="MSS: (KeepAliveTime)How often keep-alive packets are sent in milliseconds" datatype="int" id="oval:mil.disa.fso.windows:var:456900" version="1">
      <possible_value hint="300000_seconds">300000</possible_value>
    </external_variable>
    <external_variable comment="MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes" datatype="int" id="oval:mil.disa.fso.windows:var:456800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)" datatype="int" id="oval:mil.disa.fso.windows:var:456700" version="1">
      <possible_value hint="source_routing_packets_allowed">0</possible_value>
      <possible_value hint="source_routing_packets_ignored">1</possible_value>
      <possible_value hint="source_routing_packets_disabled">2</possible_value>
    </external_variable>
    <external_variable comment="MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)" datatype="int" id="oval:mil.disa.fso.windows:var:456600" version="1">
      <possible_value hint="No_additional_protection">0</possible_value>
      <possible_value hint="Medium_protection">1</possible_value>
      <possible_value hint="Highest_protection">2</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: SPN Target name validation" datatype="int" id="oval:mil.disa.fso.windows:var:456400" version="1">
      <possible_value hint="off">0</possible_value>
      <possible_value hint="accept_if_provided_by_client">1</possible_value>
      <possible_value hint="required_from_client">2</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: Disconnect clients when logon hours expire" datatype="int" id="oval:mil.disa.fso.windows:var:456300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: Digitally sign communications (if client agrees)" datatype="int" id="oval:mil.disa.fso.windows:var:456200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: Digitally sign communications (always)" datatype="int" id="oval:mil.disa.fso.windows:var:456100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Amount of Idle Time Required Before Suspending Session" datatype="int" id="oval:mil.disa.fso.windows:var:456000" version="1">
      <possible_value hint="15_minutes">15</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network client: Send unencrypted password to third-party SMB servers" datatype="int" id="oval:mil.disa.fso.windows:var:455900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network client: Digitally sign communications (if server agrees)" datatype="int" id="oval:mil.disa.fso.windows:var:455800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Client Digitally Sign Communications (Always)" datatype="int" id="oval:mil.disa.fso.windows:var:455700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prompt User to Change Password Before Expiration" datatype="int" id="oval:mil.disa.fso.windows:var:455500" version="1">
      <possible_value hint="14_days">14</possible_value>
    </external_variable>
    <external_variable comment="Interactive logon: Do not require CTRL+ALT+DEL" datatype="int" id="oval:mil.disa.fso.windows:var:455400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Interactive logon: Do not display last user name" datatype="int" id="oval:mil.disa.fso.windows:var:455300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require Strong Session Key" datatype="int" id="oval:mil.disa.fso.windows:var:455200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Maximum Machine Account Password Age" datatype="int" id="oval:mil.disa.fso.windows:var:455100" version="1">
      <possible_value hint="7_days">7</possible_value>
      <possible_value hint="30_days">30</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Disable machine account password changes" datatype="int" id="oval:mil.disa.fso.windows:var:455000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Digitally sign secure channel data (when possible)" datatype="int" id="oval:mil.disa.fso.windows:var:454900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Digitally encrypt secure channel data (when possible)" datatype="int" id="oval:mil.disa.fso.windows:var:454800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Digitally encrypt or sign secure channel data (always)" datatype="int" id="oval:mil.disa.fso.windows:var:454700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Devices: Allow only administrators to format and eject removable media" datatype="int" id="oval:mil.disa.fso.windows:var:454600" version="1">
      <possible_value hint="administrator_only">0</possible_value>
      <possible_value hint="administrator_and_powerusers_only">1</possible_value>
      <possible_value hint="administrator_and_interactiveuser_only">2</possible_value>
    </external_variable>
    <external_variable comment="Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings" datatype="int" id="oval:mil.disa.fso.windows:var:454500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Audit: Audit the use of Backup and Restore privilege" datatype="binary" id="oval:mil.disa.fso.windows:var:454400" version="1">
      <possible_value hint="disabled">00</possible_value>
      <possible_value hint="enabled">01</possible_value>
    </external_variable>
    <external_variable comment="Audit: Audit the access of global system objects" datatype="int" id="oval:mil.disa.fso.windows:var:454300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Accounts: Limit local account use to blank passwords to console logon only" datatype="int" id="oval:mil.disa.fso.windows:var:454000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Status of Guest Account" datatype="boolean" id="oval:mil.disa.fso.windows:var:453901" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent Automatic Updates" datatype="int" id="oval:mil.disa.fso.windows:var:453000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Report when logon server was not available during user logon" datatype="int" id="oval:mil.disa.fso.windows:var:452900" version="2">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prohibit non-administrators from applying vendor signed updates" datatype="int" id="oval:mil.disa.fso.windows:var:452800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do Not Send Additional Data" datatype="int" id="oval:mil.disa.fso.windows:var:452400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Disable Logging" datatype="int" id="oval:mil.disa.fso.windows:var:452300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Microsoft SpyNet Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:452200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not use temporary folders per session" datatype="int" id="oval:mil.disa.fso.windows:var:451800" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not delete temp folder upon exit" datatype="int" id="oval:mil.disa.fso.windows:var:451700" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Set client connection encryption level" datatype="int" id="oval:mil.disa.fso.windows:var:451400" version="1">
      <possible_value hint="low_level">1</possible_value>
      <possible_value hint="client_compatible">2</possible_value>
      <possible_value hint="high_level">3</possible_value>
    </external_variable>
    <external_variable comment="Always prompt for password upon connection" datatype="int" id="oval:mil.disa.fso.windows:var:451300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow drive redirection" datatype="int" id="oval:mil.disa.fso.windows:var:451200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow passwords to be saved" datatype="int" id="oval:mil.disa.fso.windows:var:451100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off shell protocol protected mode" datatype="int" id="oval:mil.disa.fso.windows:var:450900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Heap termination on corruption" datatype="int" id="oval:mil.disa.fso.windows:var:450800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Data Execution Protection" datatype="int" id="oval:mil.disa.fso.windows:var:450700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Maximum System Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:450500" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Maximum Setup Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:450400" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Maximum Security Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:450300" version="2">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
      <possible_value hint="enabled:196608_kb">196608</possible_value>
    </external_variable>
    <external_variable comment="Maximum Application Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:450200" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Enumerate administrator accounts on elevation" datatype="int" id="oval:mil.disa.fso.windows:var:449500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Default behavior for AutoRun" datatype="int" id="oval:mil.disa.fso.windows:var:449100" version="1">
      <possible_value hint="do_not_execute_autorun_commands">1</possible_value>
      <possible_value hint="automatically_execute_autorun_commands">2</possible_value>
    </external_variable>
    <external_variable comment="Turn off Autoplay for non-volume devices" datatype="int" id="oval:mil.disa.fso.windows:var:449000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Program Inventory" datatype="int" id="oval:mil.disa.fso.windows:var:448900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enable/Disable PerfTrack" datatype="int" id="oval:mil.disa.fso.windows:var:448700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Troubleshooting: Allow user to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)" datatype="int" id="oval:mil.disa.fso.windows:var:448600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider" datatype="int" id="oval:mil.disa.fso.windows:var:448500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Restrictions for Unauthenticated RPC clients" datatype="int" id="oval:mil.disa.fso.windows:var:448300" version="1">
      <possible_value hint="enabled:none">0</possible_value>
      <possible_value hint="enabled:authenticated">1</possible_value>
      <possible_value hint="enabled:authenticated_with_exceptions">2</possible_value>
    </external_variable>
    <external_variable comment="RPC Endpoint Mapper Client Authentication" datatype="int" id="oval:mil.disa.fso.windows:var:448200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn on session logging" datatype="int" id="oval:mil.disa.fso.windows:var:448100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Solicited Remote Assistance" datatype="int" id="oval:mil.disa.fso.windows:var:448000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Offer Remote Assistance" datatype="int" id="oval:mil.disa.fso.windows:var:447900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (Plugged)" datatype="int" id="oval:mil.disa.fso.windows:var:447600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (On Battery)" datatype="int" id="oval:mil.disa.fso.windows:var:447500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Always Use Classic Logon" datatype="int" id="oval:mil.disa.fso.windows:var:447200" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Update device driver searching" datatype="int" id="oval:mil.disa.fso.windows:var:447000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Customer Experience Improvement Program" datatype="int" id="oval:mil.disa.fso.windows:var:446800" version="1">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off printing over HTTP" datatype="int" id="oval:mil.disa.fso.windows:var:446200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Internet File Association Service" datatype="int" id="oval:mil.disa.fso.windows:var:446100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Handwriting Recognition Error Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:445800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off downloading of print drivers over HTTP" datatype="int" id="oval:mil.disa.fso.windows:var:445700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Registry Policy Processing" datatype="int" id="oval:mil.disa.fso.windows:var:445400" version="1">
      <possible_value hint="not configured">-1</possible_value>
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy">1</possible_value>
      <possible_value hint="enabled:nogpolistchanges">2</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy_and_nogpolistchanges">3</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Update device driver search prompt" datatype="int" id="oval:mil.disa.fso.windows:var:445200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Specify Search Order for device driver source locations" datatype="int" id="oval:mil.disa.fso.windows:var:445000" version="1">
      <possible_value hint="do_not_search_windows_update">0</possible_value>
      <possible_value hint="search_windows_update_first">1</possible_value>
      <possible_value hint="search_windows_update_last">2</possible_value>
    </external_variable>
    <external_variable comment="Prevent device metadata retrieval from the Internet" datatype="int" id="oval:mil.disa.fso.windows:var:444800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not create system restore point when new device driver installed" datatype="int" id="oval:mil.disa.fso.windows:var:444700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not send a Windows Error Report when a generic driver is installed on a device" datatype="int" id="oval:mil.disa.fso.windows:var:444600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Allow remote access to the PnP interface" datatype="int" id="oval:mil.disa.fso.windows:var:444500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Extend Point and Print connection to search Windows Update and use alternate connection if needed" datatype="int" id="oval:mil.disa.fso.windows:var:444300" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prohibit Access of the Windows Connect Now Wizards" datatype="int" id="oval:mil.disa.fso.windows:var:444200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Teredo State" datatype="string" id="oval:mil.disa.fso.windows:var:444000" version="1">
      <possible_value hint="disabled">Disabled</possible_value>
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="client">Client</possible_value>
      <possible_value hint="enterprise_client">Enterprise Client</possible_value>
    </external_variable>
    <external_variable comment="ISATAP State" datatype="string" id="oval:mil.disa.fso.windows:var:443900" version="1">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="IP HTTPS State" datatype="int" id="oval:mil.disa.fso.windows:var:443800" version="1">
      <possible_value hint="default">0</possible_value>
      <possible_value hint="disabled">3</possible_value>
      <possible_value hint="enabled">2</possible_value>
    </external_variable>
    <external_variable comment="6to4 State" datatype="string" id="oval:mil.disa.fso.windows:var:443700" version="1">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Route all traffic through the internal network" datatype="string" id="oval:mil.disa.fso.windows:var:443600" version="1">
      <possible_value hint="enabled_enabled_state">Enabled</possible_value>
      <possible_value hint="enabled_disabled_state">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Require domain users to elevate when setting a network's location" datatype="int" id="oval:mil.disa.fso.windows:var:443500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prohibit installation and configuration of Network Bridge on your DNS domain network" datatype="int" id="oval:mil.disa.fso.windows:var:443400" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Microsoft Peer-to-Peer Networking Services" datatype="int" id="oval:mil.disa.fso.windows:var:443300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enforce Reversible Encryption When Storing Passwords" datatype="boolean" id="oval:mil.disa.fso.windows:var:443000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enforce Password Complexity" datatype="boolean" id="oval:mil.disa.fso.windows:var:442900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Minimum Password Length" datatype="int" id="oval:mil.disa.fso.windows:var:442800" version="1">
      <possible_value hint="8_characters">8</possible_value>
      <possible_value hint="9_characters">9</possible_value>
      <possible_value hint="12_characters">12</possible_value>
      <possible_value hint="14_characters">14</possible_value>
      <possible_value hint="15_characters">15</possible_value>
    </external_variable>
    <external_variable comment="Minimum Password Age" datatype="int" id="oval:mil.disa.fso.windows:var:442700" version="1">
      <possible_value hint="86400_seconds">86400</possible_value>
      <possible_value hint="172800_seconds">172800</possible_value>
      <possible_value hint="432000_seconds">432000</possible_value>
    </external_variable>
    <external_variable comment="Maximum Password Age" datatype="int" id="oval:mil.disa.fso.windows:var:442600" version="1">
      <possible_value hint="5184000_seconds">5184000</possible_value>
      <possible_value hint="7776000_seconds">7776000</possible_value>
    </external_variable>
    <external_variable comment="Enforce Password History" datatype="int" id="oval:mil.disa.fso.windows:var:442500" version="1">
      <possible_value hint="5_passwords">5</possible_value>
      <possible_value hint="24_passwords">24</possible_value>
    </external_variable>
    <external_variable comment="Reset Account Lockout Counter After" datatype="int" id="oval:mil.disa.fso.windows:var:442400" version="1">
      <possible_value hint="900_seconds">900</possible_value>
      <possible_value hint="3600_seconds">3600</possible_value>
      <possible_value hint="86400_seconds">86400</possible_value>
    </external_variable>
    <external_variable comment="Account Lockout Threshold" datatype="int" id="oval:mil.disa.fso.windows:var:442300" version="1">
      <possible_value hint="3_attempts">3</possible_value>
      <possible_value hint="5_attempts">5</possible_value>
      <possible_value hint="10_attempts">10</possible_value>
      <possible_value hint="50_attempts">50</possible_value>
    </external_variable>
    <external_variable comment="Virtualize file and registry write failures to per-user locations" datatype="int" id="oval:mil.disa.fso.windows:var:422400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Switch to the secure desktop when prompting for elevation" datatype="int" id="oval:mil.disa.fso.windows:var:422300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Run all administrators in Admin Approval Mode" datatype="int" id="oval:mil.disa.fso.windows:var:422200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Only elevate UIAccess applications that are installed in secure locations" datatype="int" id="oval:mil.disa.fso.windows:var:422100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Only elevate executables that are signed and validated" datatype="int" id="oval:mil.disa.fso.windows:var:422000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Detect application installations and prompt for elevation" datatype="int" id="oval:mil.disa.fso.windows:var:421900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Behavior of the elevation prompt for standard users" datatype="int" id="oval:mil.disa.fso.windows:var:421800" version="1">
      <possible_value hint="automatically_deny">0</possible_value>
      <possible_value hint="prompt_for_credentials_on_the_secure_desktop">1</possible_value>
      <possible_value hint="prompt_for_credentials">3</possible_value>
    </external_variable>
    <external_variable comment="Behavior of the elevation prompt for administrators in Admin Approval Mode" datatype="int" id="oval:mil.disa.fso.windows:var:421700" version="1">
      <possible_value hint="elevate_without_prompting">0</possible_value>
      <possible_value hint="prompt_for_credentials_on_the_secure_desktop">1</possible_value>
      <possible_value hint="prompt_for_consent_on_the_secure_desktop">2</possible_value>
      <possible_value hint="prompt_for_credentials">3</possible_value>
      <possible_value hint="prompt_for_consent">4</possible_value>
      <possible_value hint="prompt_for_consent_for_non_windows_binaries">5</possible_value>
    </external_variable>
    <external_variable comment="Admin Approval Mode for the Built-in Administrator account" datatype="int" id="oval:mil.disa.fso.windows:var:421600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="System objects: Strengthen default permissions of internal system objects" datatype="int" id="oval:mil.disa.fso.windows:var:421500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="System objects: Require case insensitivity for non-Windows subsystems" datatype="int" id="oval:mil.disa.fso.windows:var:421400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" datatype="int" id="oval:mil.disa.fso.windows:var:421300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Shutdown: Allow System to be Shut Down Without Having to Log On" datatype="int" id="oval:mil.disa.fso.windows:var:421200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Recovery Console: Allow Floppy Copy and Access to All Drives and All Folders" datatype="int" id="oval:mil.disa.fso.windows:var:421100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Recovery Console: Allow Automatic Administrative Logon" datatype="int" id="oval:mil.disa.fso.windows:var:421000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network Security: LDAP client signing requirements" datatype="int" id="oval:mil.disa.fso.windows:var:420700" version="1">
      <possible_value hint="none">0</possible_value>
      <possible_value hint="negotiate_signing">1</possible_value>
      <possible_value hint="require_signing">2</possible_value>
    </external_variable>
    <external_variable comment="Network Security: LAN Manager Authentication Level" datatype="int" id="oval:mil.disa.fso.windows:var:420600" version="1">
      <possible_value hint="send_LM_and_NTLM_responses">0</possible_value>
      <possible_value hint="send_LM_and_NTLM_use_NTLMv2_session_security_if_negotiated">1</possible_value>
      <possible_value hint="send_NTLM_response_only">2</possible_value>
      <possible_value hint="send_NTLMv2_response_only">3</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM">4</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM_and_NTLM">5</possible_value>
    </external_variable>
    <external_variable comment="Network security: Force logoff when logon hours expire" datatype="int" id="oval:mil.disa.fso.windows:var:420500" version="1">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network security: Do not store LAN Manager hash value on next password change" datatype="int" id="oval:mil.disa.fso.windows:var:420400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network Security: Configure encryption types allowed for Kerberos" datatype="int" id="oval:mil.disa.fso.windows:var:420300" version="2">
      <possible_value hint="AES128_HMAC_SHA1__AES256_HMAC_SHA1__Future_Encryption_Types">2147483640</possible_value>
      <possible_value hint="RC4_HMAC_MD5__AES128_HMAC_SHA1__AES256_HMAC_SHA1__Future_Encryption_Types">2147483644</possible_value>
    </external_variable>
    <external_variable comment="Network Security: Allow PKU2U authentication requests to this computer to use online identities" datatype="int" id="oval:mil.disa.fso.windows:var:420200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network security: Allow LocalSystem NULL session fallback" datatype="int" id="oval:mil.disa.fso.windows:var:420100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network security: Allow Local System to use computer identity for NTLM" datatype="int" id="oval:mil.disa.fso.windows:var:420000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Sharing and security model for local accounts" datatype="int" id="oval:mil.disa.fso.windows:var:419900" version="1">
      <possible_value hint="classic">0</possible_value>
      <possible_value hint="guests_only">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Restrict anonymous access to Named Pipes and Shares" datatype="int" id="oval:mil.disa.fso.windows:var:419700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Let Everyone permissions apply to anonymous users" datatype="int" id="oval:mil.disa.fso.windows:var:419300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Do not allow storage of credentials or .NET Passports for network authentication" datatype="int" id="oval:mil.disa.fso.windows:var:419200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Do not allow anonymous enumeration of SAM accounts and shares" datatype="int" id="oval:mil.disa.fso.windows:var:419100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Do not allow anonymous enumeration of SAM accounts" datatype="int" id="oval:mil.disa.fso.windows:var:419000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning" datatype="int" id="oval:mil.disa.fso.windows:var:418800" version="1">
      <possible_value hint="90_percent">90</possible_value>
    </external_variable>
    <external_variable comment="MSS: (TCPMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)" datatype="int" id="oval:mil.disa.fso.windows:var:418700" version="1">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable comment="MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)" datatype="int" id="oval:mil.disa.fso.windows:var:418600" version="1">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable comment="MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)" datatype="int" id="oval:mil.disa.fso.windows:var:418500" version="1">
      <possible_value hint="zero_seconds">0</possible_value>
      <possible_value hint="5_seconds">5</possible_value>
    </external_variable>
    <external_variable comment="MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)" datatype="int" id="oval:mil.disa.fso.windows:var:418400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure DefaultGateway addresses (could lead to DoS)" datatype="int" id="oval:mil.disa.fso.windows:var:418300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
      <possible_value hint="enabled_only_if_dhcp_sends_perform_router_discovery_option">2</possible_value>
    </external_variable>
    <external_variable comment="MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers" datatype="int" id="oval:mil.disa.fso.windows:var:418200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic" datatype="int" id="oval:mil.disa.fso.windows:var:418100" version="1">
      <possible_value hint="multicast_broadcast_rsvp_kerberos_isakmp_exempt">0</possible_value>
      <possible_value hint="multicast_broadcast_isakmp_exempt">1</possible_value>
      <possible_value hint="rsvp_kerberos_isakmp_exempt">2</possible_value>
      <possible_value hint="isakmp_exempt">3</possible_value>
    </external_variable>
    <external_variable comment="MSS: (KeepAliveTime)How often keep-alive packets are sent in milliseconds" datatype="int" id="oval:mil.disa.fso.windows:var:418000" version="1">
      <possible_value hint="300000_seconds">300000</possible_value>
    </external_variable>
    <external_variable comment="MSS: (Hidden) Hide computer from the browse list (Not Recommended except for highly secure environments)" datatype="int" id="oval:mil.disa.fso.windows:var:417900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes" datatype="int" id="oval:mil.disa.fso.windows:var:417800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)" datatype="int" id="oval:mil.disa.fso.windows:var:417700" version="1">
      <possible_value hint="source_routing_packets_allowed">0</possible_value>
      <possible_value hint="source_routing_packets_ignored">1</possible_value>
      <possible_value hint="source_routing_packets_disabled">2</possible_value>
    </external_variable>
    <external_variable comment="MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)" datatype="int" id="oval:mil.disa.fso.windows:var:417600" version="1">
      <possible_value hint="No_additional_protection">0</possible_value>
      <possible_value hint="Medium_protection">1</possible_value>
      <possible_value hint="Highest_protection">2</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: SPN Target name validation" datatype="int" id="oval:mil.disa.fso.windows:var:417400" version="1">
      <possible_value hint="off">0</possible_value>
      <possible_value hint="accept_if_provided_by_client">1</possible_value>
      <possible_value hint="required_from_client">2</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: Disconnect clients when logon hours expire" datatype="int" id="oval:mil.disa.fso.windows:var:417300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: Digitally sign communications (if client agrees)" datatype="int" id="oval:mil.disa.fso.windows:var:417200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: Digitally sign communications (always)" datatype="int" id="oval:mil.disa.fso.windows:var:417100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Amount of Idle Time Required Before Suspending Session" datatype="int" id="oval:mil.disa.fso.windows:var:417000" version="1">
      <possible_value hint="15_minutes">15</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network client: Send unencrypted password to third-party SMB servers" datatype="int" id="oval:mil.disa.fso.windows:var:416900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network client: Digitally sign communications (if server agrees)" datatype="int" id="oval:mil.disa.fso.windows:var:416800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Client Digitally Sign Communications (Always)" datatype="int" id="oval:mil.disa.fso.windows:var:416700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require Domain Controller Authentication to Unlock Workstation" datatype="int" id="oval:mil.disa.fso.windows:var:416500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prompt User to Change Password Before Expiration" datatype="int" id="oval:mil.disa.fso.windows:var:416400" version="1">
      <possible_value hint="14_days">14</possible_value>
    </external_variable>
    <external_variable comment="Interactive logon: Do not require CTRL+ALT+DEL" datatype="int" id="oval:mil.disa.fso.windows:var:415800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Interactive logon: Do not display last user name" datatype="int" id="oval:mil.disa.fso.windows:var:415700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require Strong Session Key" datatype="int" id="oval:mil.disa.fso.windows:var:415600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Maximum Machine Account Password Age" datatype="int" id="oval:mil.disa.fso.windows:var:415500" version="1">
      <possible_value hint="7_days">7</possible_value>
      <possible_value hint="30_days">30</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Disable machine account password changes" datatype="int" id="oval:mil.disa.fso.windows:var:415400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Digitally sign secure channel data (when possible)" datatype="int" id="oval:mil.disa.fso.windows:var:415300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Digitally encrypt secure channel data (when possible)" datatype="int" id="oval:mil.disa.fso.windows:var:415200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Digitally encrypt or sign secure channel data (always)" datatype="int" id="oval:mil.disa.fso.windows:var:415100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Devices: Allow only administrators to format and eject removable media" datatype="int" id="oval:mil.disa.fso.windows:var:415000" version="1">
      <possible_value hint="administrator_only">0</possible_value>
      <possible_value hint="administrator_and_powerusers_only">1</possible_value>
      <possible_value hint="administrator_and_interactiveuser_only">2</possible_value>
    </external_variable>
    <external_variable comment="Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings" datatype="int" id="oval:mil.disa.fso.windows:var:414800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Audit: Audit the use of Backup and Restore privilege" datatype="binary" id="oval:mil.disa.fso.windows:var:414700" version="1">
      <possible_value hint="disabled">00</possible_value>
      <possible_value hint="enabled">01</possible_value>
    </external_variable>
    <external_variable comment="Audit: Audit the access of global system objects" datatype="int" id="oval:mil.disa.fso.windows:var:414600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Accounts: Limit local account use to blank passwords to console logon only" datatype="int" id="oval:mil.disa.fso.windows:var:414300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Status of Guest Account" datatype="boolean" id="oval:mil.disa.fso.windows:var:414201" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent Automatic Updates" datatype="int" id="oval:mil.disa.fso.windows:var:409100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Report when logon server was not available during user logon" datatype="int" id="oval:mil.disa.fso.windows:var:408800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prohibit non-administrators from applying vendor signed updates" datatype="int" id="oval:mil.disa.fso.windows:var:408700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do Not Send Additional Data" datatype="int" id="oval:mil.disa.fso.windows:var:408300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Disable Logging" datatype="int" id="oval:mil.disa.fso.windows:var:408200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Microsoft SpyNet Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:408100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent indexing uncached Exchange folders" datatype="int" id="oval:mil.disa.fso.windows:var:407800" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow indexing of encrypted files" datatype="int" id="oval:mil.disa.fso.windows:var:407700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not use temporary folders per session" datatype="int" id="oval:mil.disa.fso.windows:var:407400" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not delete temp folder upon exit" datatype="int" id="oval:mil.disa.fso.windows:var:407300" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Set client connection encryption level" datatype="int" id="oval:mil.disa.fso.windows:var:407000" version="1">
      <possible_value hint="low_level">1</possible_value>
      <possible_value hint="client_compatible">2</possible_value>
      <possible_value hint="high_level">3</possible_value>
    </external_variable>
    <external_variable comment="Always prompt for password upon connection" datatype="int" id="oval:mil.disa.fso.windows:var:406900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow drive redirection" datatype="int" id="oval:mil.disa.fso.windows:var:406800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Allow users to connect remotely using Remote Desktop Services" datatype="int" id="oval:mil.disa.fso.windows:var:406700" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not allow passwords to be saved" datatype="int" id="oval:mil.disa.fso.windows:var:406600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent the computer from joining a HomeGroup" datatype="int" id="oval:mil.disa.fso.windows:var:406400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off game updates" datatype="int" id="oval:mil.disa.fso.windows:var:406300" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Downloading of Game Information" datatype="int" id="oval:mil.disa.fso.windows:var:406200" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off shell protocol protected mode" datatype="int" id="oval:mil.disa.fso.windows:var:406100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Heap termination on corruption" datatype="int" id="oval:mil.disa.fso.windows:var:406000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Data Execution Protection" datatype="int" id="oval:mil.disa.fso.windows:var:405900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Maximum System Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:405700" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Maximum Setup Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:405600" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Maximum Security Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:405500" version="2">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
      <possible_value hint="enabled:196608_kb">196608</possible_value>
    </external_variable>
    <external_variable comment="Maximum Application Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:405400" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Enumerate administrator accounts on elevation" datatype="int" id="oval:mil.disa.fso.windows:var:404700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Default behavior for AutoRun" datatype="int" id="oval:mil.disa.fso.windows:var:404300" version="1">
      <possible_value hint="do_not_execute_autorun_commands">1</possible_value>
      <possible_value hint="automatically_execute_autorun_commands">2</possible_value>
    </external_variable>
    <external_variable comment="Turn off Autoplay for non-volume devices" datatype="int" id="oval:mil.disa.fso.windows:var:404200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Program Inventory" datatype="int" id="oval:mil.disa.fso.windows:var:404100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enable/Disable PerfTrack" datatype="int" id="oval:mil.disa.fso.windows:var:403800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Troubleshooting: Allow user to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)" datatype="int" id="oval:mil.disa.fso.windows:var:403700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider" datatype="int" id="oval:mil.disa.fso.windows:var:403600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Restrictions for Unauthenticated RPC clients" datatype="int" id="oval:mil.disa.fso.windows:var:403400" version="1">
      <possible_value hint="enabled:none">0</possible_value>
      <possible_value hint="enabled:authenticated">1</possible_value>
      <possible_value hint="enabled:authenticated_with_exceptions">2</possible_value>
    </external_variable>
    <external_variable comment="RPC Endpoint Mapper Client Authentication" datatype="int" id="oval:mil.disa.fso.windows:var:403300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn on session logging" datatype="int" id="oval:mil.disa.fso.windows:var:403200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Solicited Remote Assistance" datatype="int" id="oval:mil.disa.fso.windows:var:402900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Offer Remote Assistance" datatype="int" id="oval:mil.disa.fso.windows:var:402800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (Plugged)" datatype="int" id="oval:mil.disa.fso.windows:var:402500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (On Battery)" datatype="int" id="oval:mil.disa.fso.windows:var:402400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Always Use Classic Logon" datatype="int" id="oval:mil.disa.fso.windows:var:401900" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Update device driver searching" datatype="int" id="oval:mil.disa.fso.windows:var:401700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Customer Experience Improvement Program" datatype="int" id="oval:mil.disa.fso.windows:var:401500" version="1">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off the Order Prints Picture Task" datatype="int" id="oval:mil.disa.fso.windows:var:401200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off printing over HTTP" datatype="int" id="oval:mil.disa.fso.windows:var:400900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Internet File Association Service" datatype="int" id="oval:mil.disa.fso.windows:var:400800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Internet download for Web publishing and online ordering wizards" datatype="int" id="oval:mil.disa.fso.windows:var:400700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Handwriting Recognition Error Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:400500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off handwriting personalization data sharing" datatype="int" id="oval:mil.disa.fso.windows:var:400400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off downloading of print drivers over HTTP" datatype="int" id="oval:mil.disa.fso.windows:var:400200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Registry Policy Processing" datatype="int" id="oval:mil.disa.fso.windows:var:399800" version="1">
      <possible_value hint="not configured">-1</possible_value>
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy">1</possible_value>
      <possible_value hint="enabled:nogpolistchanges">2</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy_and_nogpolistchanges">3</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Update device driver search prompt" datatype="int" id="oval:mil.disa.fso.windows:var:399600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Specify Search Order for device driver source locations" datatype="int" id="oval:mil.disa.fso.windows:var:399400" version="1">
      <possible_value hint="do_not_search_windows_update">0</possible_value>
      <possible_value hint="search_windows_update_first">1</possible_value>
      <possible_value hint="search_windows_update_last">2</possible_value>
    </external_variable>
    <external_variable comment="Prevent device metadata retrieval from internet" datatype="int" id="oval:mil.disa.fso.windows:var:399200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not create system restore point when new device driver installed" datatype="int" id="oval:mil.disa.fso.windows:var:399100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not send a Windows Error Report when a generic driver is installed on a device" datatype="int" id="oval:mil.disa.fso.windows:var:399000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Allow remote access to the PnP interface" datatype="int" id="oval:mil.disa.fso.windows:var:398900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Extend Point and Print connection to search Windows Update and use alternate connection if needed" datatype="int" id="oval:mil.disa.fso.windows:var:398600" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prohibit Access of the Windows Connect Now Wizards" datatype="int" id="oval:mil.disa.fso.windows:var:398300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Teredo State" datatype="string" id="oval:mil.disa.fso.windows:var:398000" version="1">
      <possible_value hint="disabled">Disabled</possible_value>
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="client">Client</possible_value>
      <possible_value hint="enterprise_client">Enterprise Client</possible_value>
    </external_variable>
    <external_variable comment="ISATAP State" datatype="string" id="oval:mil.disa.fso.windows:var:397900" version="1">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="IP HTTPS State" datatype="int" id="oval:mil.disa.fso.windows:var:397800" version="1">
      <possible_value hint="default">0</possible_value>
      <possible_value hint="disabled">3</possible_value>
      <possible_value hint="enabled">2</possible_value>
    </external_variable>
    <external_variable comment="6to4 State" datatype="string" id="oval:mil.disa.fso.windows:var:397700" version="1">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Route all traffic through the internal network" datatype="string" id="oval:mil.disa.fso.windows:var:397600" version="1">
      <possible_value hint="enabled_enabled_state">Enabled</possible_value>
      <possible_value hint="enabled_disabled_state">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Require domain users to elevate when setting a network's location" datatype="int" id="oval:mil.disa.fso.windows:var:397500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prohibit installation and configuration of Network Bridge on your DNS domain network" datatype="int" id="oval:mil.disa.fso.windows:var:397400" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Microsoft Peer-to-Peer Networking Services" datatype="int" id="oval:mil.disa.fso.windows:var:397300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enforce Reversible Encryption When Storing Passwords" datatype="boolean" id="oval:mil.disa.fso.windows:var:393900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enforce Password Complexity" datatype="boolean" id="oval:mil.disa.fso.windows:var:393800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Minimum Password Length" datatype="int" id="oval:mil.disa.fso.windows:var:393700" version="1">
      <possible_value hint="8_characters">8</possible_value>
      <possible_value hint="9_characters">9</possible_value>
      <possible_value hint="12_characters">12</possible_value>
      <possible_value hint="14_characters">14</possible_value>
      <possible_value hint="15_characters">15</possible_value>
    </external_variable>
    <external_variable comment="Minimum Password Age" datatype="int" id="oval:mil.disa.fso.windows:var:393600" version="1">
      <possible_value hint="86400_seconds">86400</possible_value>
      <possible_value hint="172800_seconds">172800</possible_value>
      <possible_value hint="432000_seconds">432000</possible_value>
    </external_variable>
    <external_variable comment="Maximum Password Age" datatype="int" id="oval:mil.disa.fso.windows:var:393500" version="1">
      <possible_value hint="5184000_seconds">5184000</possible_value>
      <possible_value hint="7776000_seconds">7776000</possible_value>
    </external_variable>
    <external_variable comment="Enforce Password History" datatype="int" id="oval:mil.disa.fso.windows:var:393400" version="1">
      <possible_value hint="5_passwords">5</possible_value>
      <possible_value hint="24_passwords">24</possible_value>
    </external_variable>
    <external_variable comment="Reset Account Lockout Counter After" datatype="int" id="oval:mil.disa.fso.windows:var:393300" version="1">
      <possible_value hint="900_seconds">900</possible_value>
      <possible_value hint="3600_seconds">3600</possible_value>
      <possible_value hint="86400_seconds">86400</possible_value>
    </external_variable>
    <external_variable comment="Account Lockout Threshold" datatype="int" id="oval:mil.disa.fso.windows:var:393200" version="1">
      <possible_value hint="3_attempts">3</possible_value>
      <possible_value hint="5_attempts">5</possible_value>
      <possible_value hint="10_attempts">10</possible_value>
      <possible_value hint="50_attempts">50</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Update device driver searching" datatype="int" id="oval:mil.disa.fso.windows:var:388500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Devices: Allow only administrators to format and eject removable media" datatype="int" id="oval:mil.disa.fso.windows:var:388400" version="1">
      <possible_value hint="administrator_only">0</possible_value>
      <possible_value hint="administrator_and_powerusers_only">1</possible_value>
      <possible_value hint="administrator_and_interactiveuser_only">2</possible_value>
    </external_variable>
    <external_variable comment="MSS: (NtfsDisable8dot3NameCreation) Enable the computer to stop generating 8.3 style filenames (recommended) (Disabled = 0)" datatype="int" id="oval:mil.disa.fso.windows:var:388300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Customer Experience Improvement Program" datatype="int" id="oval:mil.disa.fso.windows:var:388200" version="1">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Update device driver search prompt" datatype="int" id="oval:mil.disa.fso.windows:var:387900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Automatic Root Certificates Update" datatype="int" id="oval:mil.disa.fso.windows:var:387500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow drive redirection" datatype="int" id="oval:mil.disa.fso.windows:var:387400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Allow users to connect remotely using Remote Desktop Services" datatype="int" id="oval:mil.disa.fso.windows:var:387300" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic" datatype="int" id="oval:mil.disa.fso.windows:var:387200" version="1">
      <possible_value hint="multicast_broadcast_rsvp_kerberos_isakmp_exempt">0</possible_value>
      <possible_value hint="multicast_broadcast_isakmp_exempt">1</possible_value>
      <possible_value hint="rsvp_kerberos_isakmp_exempt">2</possible_value>
      <possible_value hint="isakmp_exempt">3</possible_value>
    </external_variable>
    <external_variable comment="MSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers" datatype="int" id="oval:mil.disa.fso.windows:var:387100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not delete temp folder upon exit" datatype="int" id="oval:mil.disa.fso.windows:var:386800" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not use temporary folders per session" datatype="int" id="oval:mil.disa.fso.windows:var:386700" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Set client connection encryption level" datatype="int" id="oval:mil.disa.fso.windows:var:386600" version="1">
      <possible_value hint="low_level">1</possible_value>
      <possible_value hint="client_compatible">2</possible_value>
      <possible_value hint="high_level">3</possible_value>
    </external_variable>
    <external_variable comment="Always prompt for password upon connection" datatype="int" id="oval:mil.disa.fso.windows:var:386500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Audit: Shut down system immediately if unable to log security audits" datatype="int" id="oval:mil.disa.fso.windows:var:386300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Automatic Updates" datatype="int" id="oval:mil.disa.fso.windows:var:386000" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prevent Automatic Updates" datatype="int" id="oval:mil.disa.fso.windows:var:385900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do Not Show First Use Dialog Boxes" datatype="int" id="oval:mil.disa.fso.windows:var:385800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent Windows Media DRM Internet Access" datatype="int" id="oval:mil.disa.fso.windows:var:385700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Report when logon server was not available during user logon" datatype="int" id="oval:mil.disa.fso.windows:var:385600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prohibit non-administrators from applying vendor signed updates" datatype="int" id="oval:mil.disa.fso.windows:var:385500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enable user control over installs" datatype="int" id="oval:mil.disa.fso.windows:var:385400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Disable IE security prompt for Windows Installer scripts" datatype="int" id="oval:mil.disa.fso.windows:var:385300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off shell protocol protected mode" datatype="int" id="oval:mil.disa.fso.windows:var:385200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Heap termination on corruption" datatype="int" id="oval:mil.disa.fso.windows:var:385100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Data Execution Protection" datatype="int" id="oval:mil.disa.fso.windows:var:385000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do Not Send Additional Data" datatype="int" id="oval:mil.disa.fso.windows:var:384900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Disable Windows Error Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:384800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Disable Logging" datatype="int" id="oval:mil.disa.fso.windows:var:384700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Microsoft SpyNet Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:384600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent Windows Anytime Upgrade from running" datatype="int" id="oval:mil.disa.fso.windows:var:384500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent indexing uncached Exchange folders" datatype="int" id="oval:mil.disa.fso.windows:var:384400" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow indexing of encrypted files" datatype="int" id="oval:mil.disa.fso.windows:var:384300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off downloading of enclosures" datatype="int" id="oval:mil.disa.fso.windows:var:384200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow passwords to be saved" datatype="int" id="oval:mil.disa.fso.windows:var:384100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent the computer from joining a HomeGroup" datatype="int" id="oval:mil.disa.fso.windows:var:384000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off game updates" datatype="int" id="oval:mil.disa.fso.windows:var:383900" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Downloading of Game Information" datatype="int" id="oval:mil.disa.fso.windows:var:383800" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Maximum System Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:383700" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Maximum Setup Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:383600" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Maximum Security Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:383500" version="2">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
      <possible_value hint="enabled:196608_kb">196608</possible_value>
    </external_variable>
    <external_variable comment="Maximum Application Log Size" datatype="int" id="oval:mil.disa.fso.windows:var:383400" version="1">
      <possible_value hint="enabled:16384_kb">16384</possible_value>
      <possible_value hint="enabled:32768_kb">32768</possible_value>
      <possible_value hint="enabled:81920_kb">81920</possible_value>
    </external_variable>
    <external_variable comment="Turn Off User Installed Windows Sidebar Gadgets" datatype="int" id="oval:mil.disa.fso.windows:var:383300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Disable unpacking and installation of gadgets that are not digitally signed" datatype="int" id="oval:mil.disa.fso.windows:var:383200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enumerate administrator accounts on elevation" datatype="int" id="oval:mil.disa.fso.windows:var:383000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Autoplay for non-volume devices" datatype="int" id="oval:mil.disa.fso.windows:var:382900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Default behavior for AutoRun" datatype="int" id="oval:mil.disa.fso.windows:var:382700" version="1">
      <possible_value hint="do_not_execute_autorun_commands">1</possible_value>
      <possible_value hint="automatically_execute_autorun_commands">2</possible_value>
    </external_variable>
    <external_variable comment="Turn off Program Inventory" datatype="int" id="oval:mil.disa.fso.windows:var:382600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enable/Disable PerfTrack" datatype="int" id="oval:mil.disa.fso.windows:var:382500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Troubleshooting: Allow user to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)" datatype="int" id="oval:mil.disa.fso.windows:var:382400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider" datatype="int" id="oval:mil.disa.fso.windows:var:382300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="RPC Endpoint Mapper Client Authentication" datatype="int" id="oval:mil.disa.fso.windows:var:382200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Restrictions for Unauthenticated RPC clients" datatype="int" id="oval:mil.disa.fso.windows:var:382100" version="1">
      <possible_value hint="enabled:none">0</possible_value>
      <possible_value hint="enabled:authenticated">1</possible_value>
      <possible_value hint="enabled:authenticated_with_exceptions">2</possible_value>
    </external_variable>
    <external_variable comment="Turn on session logging" datatype="int" id="oval:mil.disa.fso.windows:var:382000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Solicited Remote Assistance" datatype="int" id="oval:mil.disa.fso.windows:var:381900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Offer Remote Assistance" datatype="int" id="oval:mil.disa.fso.windows:var:381800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (Plugged)" datatype="int" id="oval:mil.disa.fso.windows:var:381700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (On Battery)" datatype="int" id="oval:mil.disa.fso.windows:var:381600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Always Use Classic Logon" datatype="int" id="oval:mil.disa.fso.windows:var:381500" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Error Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:381400" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Customer Experience Improvement Program" datatype="int" id="oval:mil.disa.fso.windows:var:381300" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">2</possible_value>
    </external_variable>
    <external_variable comment="Turn off the Publish to Web task for files and folders" datatype="int" id="oval:mil.disa.fso.windows:var:381200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off the Order Prints Picture Task" datatype="int" id="oval:mil.disa.fso.windows:var:381100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Search Companion content file updates" datatype="int" id="oval:mil.disa.fso.windows:var:381000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Registration if URL Connection is Referring to Microsoft.com" datatype="int" id="oval:mil.disa.fso.windows:var:380900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off printing over HTTP" datatype="int" id="oval:mil.disa.fso.windows:var:380800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Internet File Association Service" datatype="int" id="oval:mil.disa.fso.windows:var:380700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Internet download for Web publishing and online ordering wizards" datatype="int" id="oval:mil.disa.fso.windows:var:380600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com" datatype="int" id="oval:mil.disa.fso.windows:var:380500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Handwriting Recognition Error Reporting" datatype="int" id="oval:mil.disa.fso.windows:var:380400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off handwriting personalization data sharing" datatype="int" id="oval:mil.disa.fso.windows:var:380300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Event Views Events.asp Links" datatype="int" id="oval:mil.disa.fso.windows:var:380200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off downloading of print drivers over HTTP" datatype="int" id="oval:mil.disa.fso.windows:var:380100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Registry Policy Processing" datatype="int" id="oval:mil.disa.fso.windows:var:380000" version="1">
      <possible_value hint="not configured">-1</possible_value>
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy">1</possible_value>
      <possible_value hint="enabled:nogpolistchanges">2</possible_value>
      <possible_value hint="enabled:nobackgroundpolicy_and_nogpolistchanges">3</possible_value>
    </external_variable>
    <external_variable comment="Specify Search Order for device driver source locations" datatype="int" id="oval:mil.disa.fso.windows:var:379900" version="1">
      <possible_value hint="do_not_search_windows_update">0</possible_value>
      <possible_value hint="search_windows_update_first">1</possible_value>
      <possible_value hint="search_windows_update_last">2</possible_value>
    </external_variable>
    <external_variable comment="Prevent device metadata retrieval from internet" datatype="int" id="oval:mil.disa.fso.windows:var:379800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not create system restore point when new device driver installed" datatype="int" id="oval:mil.disa.fso.windows:var:379700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not send a Windows Error Report when a generic driver is installed on a device" datatype="int" id="oval:mil.disa.fso.windows:var:379600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Allow remote access to the PnP interface" datatype="int" id="oval:mil.disa.fso.windows:var:379500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Extend Point and Print connection to search Windows Update and use alternate connection if needed" datatype="int" id="oval:mil.disa.fso.windows:var:379400" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prohibit Access of the Windows Connect Now Wizards" datatype="int" id="oval:mil.disa.fso.windows:var:379300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="IP HTTPS State" datatype="int" id="oval:mil.disa.fso.windows:var:379200" version="1">
      <possible_value hint="default">0</possible_value>
      <possible_value hint="disabled">3</possible_value>
      <possible_value hint="enabled">2</possible_value>
    </external_variable>
    <external_variable comment="Teredo State" datatype="string" id="oval:mil.disa.fso.windows:var:379100" version="1">
      <possible_value hint="disabled">Disabled</possible_value>
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="client">Client</possible_value>
      <possible_value hint="enterprise_client">Enterprise Client</possible_value>
    </external_variable>
    <external_variable comment="ISATAP State" datatype="string" id="oval:mil.disa.fso.windows:var:379000" version="1">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="6to4 State" datatype="string" id="oval:mil.disa.fso.windows:var:378900" version="1">
      <possible_value hint="default">Default</possible_value>
      <possible_value hint="enabled">Enabled</possible_value>
      <possible_value hint="disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Disabled IPv6 Components" datatype="int" id="oval:mil.disa.fso.windows:var:378800" version="1">
      <possible_value hint="none">0</possible_value>
      <possible_value hint="tunnel_interfaces">1</possible_value>
      <possible_value hint="native_interfaces">16</possible_value>
      <possible_value hint="all_interfaces_except_loopback">17</possible_value>
      <possible_value hint="prefix_policies">32</possible_value>
      <possible_value hint="prefix_policies_and_all_interfaces_except_loopback">255</possible_value>
    </external_variable>
    <external_variable comment="Route all traffic through the internal network" datatype="string" id="oval:mil.disa.fso.windows:var:378700" version="1">
      <possible_value hint="enabled_enabled_state">Enabled</possible_value>
      <possible_value hint="enabled_disabled_state">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Require domain users to elevate when setting a network's location" datatype="int" id="oval:mil.disa.fso.windows:var:378600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prohibit installation and configuration of Network Bridge on your DNS domain network" datatype="int" id="oval:mil.disa.fso.windows:var:378500" version="1">
      <possible_value hint="disabled">1</possible_value>
      <possible_value hint="enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Microsoft Peer-to-Peer Networking Services" datatype="int" id="oval:mil.disa.fso.windows:var:378400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network Security: Configure encryption types allowed for Kerberos" datatype="int" id="oval:mil.disa.fso.windows:var:375300" version="1">
      <possible_value hint="RC4_HMAC_MD5__AES128_HMAC_SHA1__AES256_HMAC_SHA1__Future_Encryption_Types">2147483644</possible_value>
    </external_variable>
    <external_variable comment="Network Security: Allow PKU2U authentication requests to this computer to use online identities" datatype="int" id="oval:mil.disa.fso.windows:var:375200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network security: Allow LocalSystem NULL session fallback" datatype="int" id="oval:mil.disa.fso.windows:var:375100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network security: Allow Local System to use computer identity for NTLM" datatype="int" id="oval:mil.disa.fso.windows:var:375000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)" datatype="int" id="oval:mil.disa.fso.windows:var:374900" version="1">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable comment="MSS: (Hidden) Hide computer from the browse list (Not Recommended except for highly secure environments)" datatype="int" id="oval:mil.disa.fso.windows:var:374800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)" datatype="int" id="oval:mil.disa.fso.windows:var:374700" version="1">
      <possible_value hint="No_additional_protection">0</possible_value>
      <possible_value hint="Medium_protection">1</possible_value>
      <possible_value hint="Highest_protection">2</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: SPN Target name validation" datatype="int" id="oval:mil.disa.fso.windows:var:374600" version="1">
      <possible_value hint="off">0</possible_value>
      <possible_value hint="accept_if_provided_by_client">1</possible_value>
      <possible_value hint="required_from_client">2</possible_value>
    </external_variable>
    <external_variable comment="MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning" datatype="int" id="oval:mil.disa.fso.windows:var:374500" version="1">
      <possible_value hint="90_percent">90</possible_value>
    </external_variable>
    <external_variable comment="MSS: (TCPMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)" datatype="int" id="oval:mil.disa.fso.windows:var:374400" version="1">
      <possible_value hint="value_of_3">3</possible_value>
      <possible_value hint="value_of_5">5</possible_value>
    </external_variable>
    <external_variable comment="MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)" datatype="int" id="oval:mil.disa.fso.windows:var:374300" version="1">
      <possible_value hint="zero_seconds">0</possible_value>
      <possible_value hint="5_seconds">5</possible_value>
    </external_variable>
    <external_variable comment="MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)" datatype="int" id="oval:mil.disa.fso.windows:var:374200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure DefaultGateway addresses (could lead to DoS)" datatype="int" id="oval:mil.disa.fso.windows:var:374100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
      <possible_value hint="enabled_only_if_dhcp_sends_perform_router_discovery_option">2</possible_value>
    </external_variable>
    <external_variable comment="MSS: (KeepAliveTime)How often keep-alive packets are sent in milliseconds" datatype="int" id="oval:mil.disa.fso.windows:var:374000" version="1">
      <possible_value hint="300000_seconds">300000</possible_value>
    </external_variable>
    <external_variable comment="MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes" datatype="int" id="oval:mil.disa.fso.windows:var:373900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)" datatype="int" id="oval:mil.disa.fso.windows:var:373800" version="1">
      <possible_value hint="source_routing_packets_allowed">0</possible_value>
      <possible_value hint="source_routing_packets_ignored">1</possible_value>
      <possible_value hint="source_routing_packets_disabled">2</possible_value>
    </external_variable>
    <external_variable comment="MSS: (AutoAdminLogon) Enable Automatic Logon (Not Recommended)" datatype="string" id="oval:mil.disa.fso.windows:var:373700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Restrict Access to Floppy Drive" datatype="string" id="oval:mil.disa.fso.windows:var:373600" version="1">
      <possible_value hint="not_restricted">0</possible_value>
      <possible_value hint="restricted">1</possible_value>
    </external_variable>
    <external_variable comment="Accounts: Administrator account status" datatype="boolean" id="oval:mil.disa.fso.windows:var:373501" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Virtualize file and registry write failures to per-user locations" datatype="int" id="oval:mil.disa.fso.windows:var:373400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Switch to the secure desktop when prompting for elevation" datatype="int" id="oval:mil.disa.fso.windows:var:373300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Run all administrators in Admin Approval Mode" datatype="int" id="oval:mil.disa.fso.windows:var:373200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Only elevate UIAccess applications that are installed in secure locations" datatype="int" id="oval:mil.disa.fso.windows:var:373100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Only elevate executables that are signed and validated" datatype="int" id="oval:mil.disa.fso.windows:var:373000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Detect application installations and prompt for elevation" datatype="int" id="oval:mil.disa.fso.windows:var:372900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Behavior of the elevation prompt for standard users" datatype="int" id="oval:mil.disa.fso.windows:var:372800" version="1">
      <possible_value hint="automatically_deny">0</possible_value>
      <possible_value hint="prompt_for_credentials_on_the_secure_desktop">1</possible_value>
      <possible_value hint="prompt_for_credentials">3</possible_value>
    </external_variable>
    <external_variable comment="Behavior of the elevation prompt for administrators in Admin Approval Mode" datatype="int" id="oval:mil.disa.fso.windows:var:372700" version="1">
      <possible_value hint="elevate_without_prompting">0</possible_value>
      <possible_value hint="prompt_for_credentials_on_the_secure_desktop">1</possible_value>
      <possible_value hint="prompt_for_consent_on_the_secure_desktop">2</possible_value>
      <possible_value hint="prompt_for_credentials">3</possible_value>
      <possible_value hint="prompt_for_consent">4</possible_value>
      <possible_value hint="prompt_for_consent_for_non_windows_binaries">5</possible_value>
    </external_variable>
    <external_variable comment="Admin Approval Mode for the Built-in Administrator account" datatype="int" id="oval:mil.disa.fso.windows:var:372600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="System objects: Strengthen default permissions of internal system objects" datatype="int" id="oval:mil.disa.fso.windows:var:372500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="System objects: Require case insensitivity for non-Windows subsystems" datatype="int" id="oval:mil.disa.fso.windows:var:372400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" datatype="int" id="oval:mil.disa.fso.windows:var:372300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Shutdown: Clear Virtual Memory Pagefile" datatype="int" id="oval:mil.disa.fso.windows:var:372200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Shutdown: Allow System to be Shut Down Without Having to Log On" datatype="int" id="oval:mil.disa.fso.windows:var:372100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Recovery Console: Allow Floppy Copy and Access to All Drives and All Folders" datatype="int" id="oval:mil.disa.fso.windows:var:372000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Recovery Console: Allow Automatic Administrative Logon" datatype="int" id="oval:mil.disa.fso.windows:var:371900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network Security: LDAP client signing requirements" datatype="int" id="oval:mil.disa.fso.windows:var:371600" version="1">
      <possible_value hint="none">0</possible_value>
      <possible_value hint="negotiate_signing">1</possible_value>
      <possible_value hint="require_signing">2</possible_value>
    </external_variable>
    <external_variable comment="Network Security: LAN Manager Authentication Level" datatype="int" id="oval:mil.disa.fso.windows:var:371500" version="2">
      <possible_value hint="send_LM_and_NTLM_responses">0</possible_value>
      <possible_value hint="send_LM_and_NTLM_use_NTLMv2_session_security_if_negotiated">1</possible_value>
      <possible_value hint="send_NTLM_response_only">2</possible_value>
      <possible_value hint="send_NTLMv2_response_only">3</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM">4</possible_value>
      <possible_value hint="send_NTLMv2_response_only_refuse_LM_and_NTLM">5</possible_value>
    </external_variable>
    <external_variable comment="Network security: Force logoff when logon hours expire" datatype="int" id="oval:mil.disa.fso.windows:var:371400" version="1">
      <possible_value hint="enabled">0</possible_value>
      <possible_value hint="disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network security: Do not store LAN Manager hash value on next password change" datatype="int" id="oval:mil.disa.fso.windows:var:371300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Sharing and security model for local accounts" datatype="int" id="oval:mil.disa.fso.windows:var:371200" version="1">
      <possible_value hint="classic">0</possible_value>
      <possible_value hint="guests_only">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Restrict anonymous access to Named Pipes and Shares" datatype="int" id="oval:mil.disa.fso.windows:var:371000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Let Everyone permissions apply to anonymous users" datatype="int" id="oval:mil.disa.fso.windows:var:370600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Do not allow storage of credentials or .NET Passports for network authentication" datatype="int" id="oval:mil.disa.fso.windows:var:370500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Do not allow anonymous enumeration of SAM accounts and shares" datatype="int" id="oval:mil.disa.fso.windows:var:370400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Network access: Do not allow anonymous enumeration of SAM accounts" datatype="int" id="oval:mil.disa.fso.windows:var:370300" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: Disconnect clients when logon hours expire" datatype="int" id="oval:mil.disa.fso.windows:var:370200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: Digitally sign communications (if client agrees)" datatype="int" id="oval:mil.disa.fso.windows:var:370100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network server: Digitally sign communications (always)" datatype="int" id="oval:mil.disa.fso.windows:var:370000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Amount of Idle Time Required Before Suspending Session" datatype="int" id="oval:mil.disa.fso.windows:var:369900" version="1">
      <possible_value hint="15_minutes">15</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network client: Send unencrypted password to third-party SMB servers" datatype="int" id="oval:mil.disa.fso.windows:var:369800" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network client: Digitally sign communications (if server agrees)" datatype="int" id="oval:mil.disa.fso.windows:var:369700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Client Digitally Sign Communications (Always)" datatype="int" id="oval:mil.disa.fso.windows:var:369600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Smart Card Removal Behavior" datatype="int" id="oval:mil.disa.fso.windows:var:369500" version="1">
      <possible_value hint="no_action">0</possible_value>
      <possible_value hint="lock_workstation">1</possible_value>
      <possible_value hint="force_logoff">2</possible_value>
    </external_variable>
    <external_variable comment="Require Domain Controller Authentication to Unlock Workstation" datatype="int" id="oval:mil.disa.fso.windows:var:369400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prompt User to Change Password Before Expiration" datatype="int" id="oval:mil.disa.fso.windows:var:369300" version="1">
      <possible_value hint="14_days">14</possible_value>
    </external_variable>
    <external_variable comment="Number of Previous Logons to Cache (in Case Domain Controller Is Not Available)" datatype="int" id="oval:mil.disa.fso.windows:var:369200" version="1">
      <possible_value hint="0_cached">0</possible_value>
      <possible_value hint="1_cached">1</possible_value>
      <possible_value hint="2_cached">2</possible_value>
      <possible_value hint="5_cached">5</possible_value>
      <possible_value hint="10_cached">10</possible_value>
    </external_variable>
    <external_variable comment="Interactive logon: Do not require CTRL+ALT+DEL" datatype="int" id="oval:mil.disa.fso.windows:var:369100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Interactive logon: Do not display last user name" datatype="int" id="oval:mil.disa.fso.windows:var:369000" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Require Strong Session Key" datatype="int" id="oval:mil.disa.fso.windows:var:368900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Maximum Machine Account Password Age" datatype="int" id="oval:mil.disa.fso.windows:var:368800" version="1">
      <possible_value hint="7_days">7</possible_value>
      <possible_value hint="30_days">30</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Disable machine account password changes" datatype="int" id="oval:mil.disa.fso.windows:var:368700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Digitally sign secure channel data (when possible)" datatype="int" id="oval:mil.disa.fso.windows:var:368600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Digitally encrypt secure channel data (when possible)" datatype="int" id="oval:mil.disa.fso.windows:var:368500" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Domain member: Digitally encrypt or sign secure channel data (always)" datatype="int" id="oval:mil.disa.fso.windows:var:368400" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Restrict Access to CDROM Drive" datatype="string" id="oval:mil.disa.fso.windows:var:368300" version="1">
      <possible_value hint="not_restricted">0</possible_value>
      <possible_value hint="restricted">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent Users From Installing Printer Drivers" datatype="int" id="oval:mil.disa.fso.windows:var:368200" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings" datatype="int" id="oval:mil.disa.fso.windows:var:368100" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Audit: Audit the use of Backup and Restore privilege" datatype="binary" id="oval:mil.disa.fso.windows:var:368000" version="1">
      <possible_value hint="disabled">00</possible_value>
      <possible_value hint="enabled">01</possible_value>
    </external_variable>
    <external_variable comment="Audit: Audit the access of global system objects" datatype="int" id="oval:mil.disa.fso.windows:var:367900" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Accounts: Limit local account use to blank passwords to console logon only" datatype="int" id="oval:mil.disa.fso.windows:var:367600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Status of Guest Account" datatype="boolean" id="oval:mil.disa.fso.windows:var:367501" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enforce Password History" datatype="int" id="oval:mil.disa.fso.windows:var:365800" version="1">
      <possible_value hint="5_passwords">5</possible_value>
      <possible_value hint="24_passwords">24</possible_value>
    </external_variable>
    <external_variable comment="Enforce Reversible Encryption When Storing Passwords" datatype="boolean" id="oval:mil.disa.fso.windows:var:365700" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enforce Password Complexity" datatype="boolean" id="oval:mil.disa.fso.windows:var:365600" version="1">
      <possible_value hint="disabled">0</possible_value>
      <possible_value hint="enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Minimum Password Length" datatype="int" id="oval:mil.disa.fso.windows:var:365500" version="1">
      <possible_value hint="8_characters">8</possible_value>
      <possible_value hint="9_characters">9</possible_value>
      <possible_value hint="12_characters">12</possible_value>
      <possible_value hint="14_characters">14</possible_value>
      <possible_value hint="15_characters">15</possible_value>
    </external_variable>
    <external_variable comment="Minimum Password Age" datatype="int" id="oval:mil.disa.fso.windows:var:365400" version="1">
      <possible_value hint="86400_seconds">86400</possible_value>
      <possible_value hint="172800_seconds">172800</possible_value>
      <possible_value hint="432000_seconds">432000</possible_value>
    </external_variable>
    <external_variable comment="Maximum Password Age" datatype="int" id="oval:mil.disa.fso.windows:var:365300" version="1">
      <possible_value hint="5184000_seconds">5184000</possible_value>
      <possible_value hint="7776000_seconds">7776000</possible_value>
    </external_variable>
    <external_variable comment="Reset Account Lockout Counter After" datatype="int" id="oval:mil.disa.fso.windows:var:365200" version="5">
      <possible_value hint="900_seconds">900</possible_value>
      <possible_value hint="3600_seconds">3600</possible_value>
      <possible_value hint="86400_seconds">86400</possible_value>
    </external_variable>
    <external_variable comment="Account Lockout Threshold" datatype="int" id="oval:mil.disa.fso.windows:var:365100" version="1">
      <possible_value hint="3_attempts">3</possible_value>
      <possible_value hint="5_attempts">5</possible_value>
      <possible_value hint="10_attempts">10</possible_value>
      <possible_value hint="50_attempts">50</possible_value>
    </external_variable>
    <external_variable comment="Outbound Connections - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:364900" version="1">
      <possible_value hint="allow">0</possible_value>
      <possible_value hint="block">1</possible_value>
    </external_variable>
    <external_variable comment="Inbound Connections - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:364800" version="1">
      <possible_value hint="allow">0</possible_value>
      <possible_value hint="block">1</possible_value>
    </external_variable>
    <external_variable comment="Firewall state - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:364700" version="1">
      <possible_value hint="off">0</possible_value>
      <possible_value hint="on">1</possible_value>
    </external_variable>
    <external_variable comment="Allow Unicast Response - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:364600" version="1">
      <possible_value hint="yes">0</possible_value>
      <possible_value hint="no">1</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Firewall Rules - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:364500" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Connection Security Rules - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:364400" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Display a Notification - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:364300" version="1">
      <possible_value hint="yes">0</possible_value>
      <possible_value hint="no">1</possible_value>
    </external_variable>
    <external_variable comment="Size Limit - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:364200" version="1">
      <possible_value hint="16384_kb">16384</possible_value>
    </external_variable>
    <external_variable comment="Name - Public Profile" datatype="string" id="oval:mil.disa.fso.windows:var:364100" version="1">
      <possible_value hint="firewall_dir">((%[Ss][Yy][Ss][Tt][Ee][Mm][Rr][Oo][Oo][Tt]%)|(%[Ww][Ii][Nn][Dd][Ii][Rr]%)|([C-Zc-z]:\\[Ww][Ii][Nn][Dd][Oo][Ww][Ss]))\\[Ss][Yy][Ss][Tt][Ee][Mm]32\\[Ll][Oo][Gg][Ff][Ii][Ll][Ee][Ss]\\[Ff][Ii][Rr][Ee][Ww][Aa][Ll][Ll]\\[^\.][^\\]*</possible_value>
    </external_variable>
    <external_variable comment="Logged Successful Connections - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:364000" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Log Dropped Packets - Public Profile" datatype="int" id="oval:mil.disa.fso.windows:var:363900" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Outbound Connections - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:363800" version="1">
      <possible_value hint="allow">0</possible_value>
      <possible_value hint="block">1</possible_value>
    </external_variable>
    <external_variable comment="Inbound Connections - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:363700" version="1">
      <possible_value hint="allow">0</possible_value>
      <possible_value hint="block">1</possible_value>
    </external_variable>
    <external_variable comment="Firewall state - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:363600" version="1">
      <possible_value hint="off">0</possible_value>
      <possible_value hint="on">1</possible_value>
    </external_variable>
    <external_variable comment="Allow Unicast Response - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:363500" version="1">
      <possible_value hint="yes">0</possible_value>
      <possible_value hint="no">1</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Firewall Rules - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:363400" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Connection Security Rules - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:363300" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Display a Notification - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:363200" version="1">
      <possible_value hint="yes">0</possible_value>
      <possible_value hint="no">1</possible_value>
    </external_variable>
    <external_variable comment="Size Limit - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:363100" version="1">
      <possible_value hint="16384_kb">16384</possible_value>
    </external_variable>
    <external_variable comment="Name - Private Profile" datatype="string" id="oval:mil.disa.fso.windows:var:363000" version="1">
      <possible_value hint="firewall_dir">((%[Ss][Yy][Ss][Tt][Ee][Mm][Rr][Oo][Oo][Tt]%)|(%[Ww][Ii][Nn][Dd][Ii][Rr]%)|([C-Zc-z]:\\[Ww][Ii][Nn][Dd][Oo][Ww][Ss]))\\[Ss][Yy][Ss][Tt][Ee][Mm]32\\[Ll][Oo][Gg][Ff][Ii][Ll][Ee][Ss]\\[Ff][Ii][Rr][Ee][Ww][Aa][Ll][Ll]\\[^\.][^\\]*</possible_value>
    </external_variable>
    <external_variable comment="Logged Successful Connections - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362900" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Log Dropped Packets - Private Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362800" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Outbound Connections - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362700" version="1">
      <possible_value hint="allow">0</possible_value>
      <possible_value hint="block">1</possible_value>
    </external_variable>
    <external_variable comment="Inbound Connections - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362600" version="1">
      <possible_value hint="allow">0</possible_value>
      <possible_value hint="block">1</possible_value>
    </external_variable>
    <external_variable comment="Firewall state - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362500" version="1">
      <possible_value hint="off">0</possible_value>
      <possible_value hint="on">1</possible_value>
    </external_variable>
    <external_variable comment="Allow Unicast Response - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362400" version="1">
      <possible_value hint="yes">0</possible_value>
      <possible_value hint="no">1</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Firewall Rules - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362300" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Connection Security Rules - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362200" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Display a Notification - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362100" version="1">
      <possible_value hint="yes">0</possible_value>
      <possible_value hint="no">1</possible_value>
    </external_variable>
    <external_variable comment="Size Limit - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:362000" version="1">
      <possible_value hint="16384_kb">16384</possible_value>
    </external_variable>
    <external_variable comment="Name - Domain Profile" datatype="string" id="oval:mil.disa.fso.windows:var:361900" version="1">
      <possible_value hint="firewall_dir">((%[Ss][Yy][Ss][Tt][Ee][Mm][Rr][Oo][Oo][Tt]%)|(%[Ww][Ii][Nn][Dd][Ii][Rr]%)|([C-Zc-z]:\\[Ww][Ii][Nn][Dd][Oo][Ww][Ss]))\\[Ss][Yy][Ss][Tt][Ee][Mm]32\\[Ll][Oo][Gg][Ff][Ii][Ll][Ee][Ss]\\[Ff][Ii][Rr][Ee][Ww][Aa][Ll][Ll]\\[^\.][^\\]*</possible_value>
    </external_variable>
    <external_variable comment="Logged Successful Connections - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:361800" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="Log Dropped Packets - Domain Profile" datatype="int" id="oval:mil.disa.fso.windows:var:361700" version="1">
      <possible_value hint="no">0</possible_value>
      <possible_value hint="yes">1</possible_value>
    </external_variable>
    <external_variable comment="number of failed login attempts allowed" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:3276" version="10" />
    <external_variable comment="password expiration warning age in days" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:3272" version="1" />
    <external_variable comment="maximum password age" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:3270" version="1" />
    <external_variable comment="minimum password age in days" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:3269" version="1" />
    <external_variable comment="password minimum length" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:3268" version="1" />
    <external_variable comment="external variable for selinux state" datatype="string" id="oval:mil.disa.fso.redhat.rhel6:var:3267" version="1" />
    <external_variable comment="maximum number of concurrent logins per user" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:3266" version="1" />
    <external_variable comment="user umask" datatype="string" id="oval:mil.disa.fso.redhat.rhel6:var:3265" version="1" />
    <external_variable comment="Lower limit for unlock_time" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:3264" version="4" />
    <external_variable comment="external variable for daemon umask" datatype="string" id="oval:mil.disa.fso.redhat.rhel6:var:2143" version="1" />
    <external_variable comment="External variable for pam_cracklib ucredit" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2142" version="1" />
    <external_variable comment="audit num_logs settting" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2139" version="1" />
    <external_variable comment="External variable for pam_cracklib lcredit" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2138" version="1" />
    <external_variable comment="audit max_log_file settting" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2136" version="1" />
    <external_variable comment="audit space_left_action setting" datatype="string" id="oval:mil.disa.fso.redhat.rhel6:var:2135" version="2" />
    <external_variable comment="number of failed login attempts allowed" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2131" version="3" />
    <external_variable comment="audit admin_space_left_action setting" datatype="string" id="oval:mil.disa.fso.redhat.rhel6:var:2130" version="1" />
    <external_variable comment="External variable: name of selinux policy in /etc/selinux/config" datatype="string" id="oval:mil.disa.fso.redhat.rhel6:var:2127" version="1" />
    <external_variable comment="inactivity timeout variable" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2125" version="1" />
    <external_variable comment="audit action_mail_acct setting" datatype="string" id="oval:mil.disa.fso.redhat.rhel6:var:2122" version="1" />
    <external_variable comment="External variable for pam_cracklib difok" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2120" version="1" />
    <external_variable comment="External variable for pam_cracklib ocredit" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2119" version="1" />
    <external_variable comment="External variable for pam_cracklib dcredit" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2118" version="1" />
    <external_variable comment="inactive days expiration" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2115" version="1" />
    <external_variable comment="timeout value" datatype="int" id="oval:mil.disa.fso.redhat.rhel6:var:2113" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Initialize and script ActiveX controls not marked as safe" datatype="int" id="oval:mil.disa.fso.ie:var:9900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download unsigned ActiveX controls" datatype="int" id="oval:mil.disa.fso.ie:var:9800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download signed ActiveX controls" datatype="int" id="oval:mil.disa.fso.ie:var:9700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Make Proxy Settings Per-Machine (Rather Then Per-User)" datatype="int" id="oval:mil.disa.fso.ie:var:9600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Add/Delete Sites" datatype="int" id="oval:mil.disa.fso.ie:var:9500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Change Policies" datatype="int" id="oval:mil.disa.fso.ie:var:9400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow Scriptlets" datatype="int" id="oval:mil.disa.fso.ie:var:9200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components signed with Authenticode" datatype="int" id="oval:mil.disa.fso.ie:var:9100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components not signed with Authenticode" datatype="int" id="oval:mil.disa.fso.ie:var:9000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Initialize and script ActiveX controls not marked as safe" datatype="int" id="oval:mil.disa.fso.ie:var:900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn on Cross-Site Scripting (XSS) Filter" datatype="int" id="oval:mil.disa.fso.ie:var:8900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Only allow approved domains to use ActiveX controls without prompt" datatype="int" id="oval:mil.disa.fso.ie:var:8800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching programs and unsafe files" datatype="int" id="oval:mil.disa.fso.ie:var:8700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Include local directory path when uploading files to a server" datatype="int" id="oval:mil.disa.fso.ie:var:8600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow scripting of Internet Explorer web browser control" datatype="int" id="oval:mil.disa.fso.ie:var:8500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Only allow approved domains to use ActiveX controls without prompt" datatype="int" id="oval:mil.disa.fso.ie:var:8400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching programs and unsafe files" datatype="int" id="oval:mil.disa.fso.ie:var:8300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Include local directory path when uploading files to a server" datatype="int" id="oval:mil.disa.fso.ie:var:8200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow scripting of Internet Explorer web browser control" datatype="int" id="oval:mil.disa.fso.ie:var:8100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\InPrivate\Turn off InPrivate Browsing" datatype="int" id="oval:mil.disa.fso.ie:var:8000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download unsigned ActiveX controls" datatype="int" id="oval:mil.disa.fso.ie:var:800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Prevent Deleting Web sites that the User has Visited" datatype="int" id="oval:mil.disa.fso.ie:var:7900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Configure Delete Browsing History on exit" datatype="int" id="oval:mil.disa.fso.ie:var:7800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Compatibility View\Include updated Web site lists from Microsoft" datatype="int" id="oval:mil.disa.fso.ie:var:7700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Include updated Web site lists from Microsoft" datatype="int" id="oval:mil.disa.fso.ie:var:7600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Prevent performance of First Run Customize settings" datatype="int" id="oval:mil.disa.fso.ie:var:7500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone\Download Signed ActiveX Controls" datatype="int" id="oval:mil.disa.fso.ie:var:7400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Turn Off Crash Detection" datatype="int" id="oval:mil.disa.fso.ie:var:7300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off Configuring the Update Check Interval (In Days)" datatype="int" id="oval:mil.disa.fso.ie:var:7200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Scripting of Java applets" datatype="int" id="oval:mil.disa.fso.ie:var:7100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components signed with Authenticode" datatype="int" id="oval:mil.disa.fso.ie:var:7000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Download signed ActiveX controls" datatype="int" id="oval:mil.disa.fso.ie:var:700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components not signed with Authenticode" datatype="int" id="oval:mil.disa.fso.ie:var:6900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow binary and script behaviors" datatype="int" id="oval:mil.disa.fso.ie:var:6800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Web sites in less privileged Web content zones can navigate into this zone" datatype="int" id="oval:mil.disa.fso.ie:var:6700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Web sites in less privileged Web content zones can navigate into this zone" datatype="int" id="oval:mil.disa.fso.ie:var:6600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Use Pop-up Blocker" datatype="int" id="oval:mil.disa.fso.ie:var:6500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Use Pop-up Blocker" datatype="int" id="oval:mil.disa.fso.ie:var:6400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn On Protected Mode" datatype="int" id="oval:mil.disa.fso.ie:var:6300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\TTurn On Protected Mode" datatype="int" id="oval:mil.disa.fso.ie:var:6200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First- Run Opt-In" datatype="int" id="oval:mil.disa.fso.ie:var:6100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First- Run Opt-In" datatype="int" id="oval:mil.disa.fso.ie:var:6000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Make Proxy Settings Per-Machine (Rather Then Per-User)" datatype="int" id="oval:mil.disa.fso.ie:var:600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Open files based on content, not file extension" datatype="int" id="oval:mil.disa.fso.ie:var:5900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Open files based on content, not file extension" datatype="int" id="oval:mil.disa.fso.ie:var:5800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Loose XAML files" datatype="int" id="oval:mil.disa.fso.ie:var:5700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Loose or un-compiled XAML files" datatype="int" id="oval:mil.disa.fso.ie:var:5600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Restricted Sites Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:5500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Internet Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:5400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Trusted Sites Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:5300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Intranet Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:5200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Local Machine Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:5100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:5000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Add/Delete Sites" datatype="int" id="oval:mil.disa.fso.ie:var:500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Automatic prompting for file downloads" datatype="int" id="oval:mil.disa.fso.ie:var:4900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow Scriptlets" datatype="int" id="oval:mil.disa.fso.ie:var:4800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow script-initiated windows without size or position constraints" datatype="int" id="oval:mil.disa.fso.ie:var:4700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow script-initiated windows without size or position constraints" datatype="int" id="oval:mil.disa.fso.ie:var:4600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Sites: Include all network paths (UNCs)" datatype="int" id="oval:mil.disa.fso.ie:var:4500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Signature on Downloaded Programs" datatype="string" id="oval:mil.disa.fso.ie:var:4400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Server Certificate Revocation" datatype="int" id="oval:mil.disa.fso.ie:var:4300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Third-Party Browser Extensions" datatype="string" id="oval:mil.disa.fso.ie:var:4200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Software to Run or Install Even if the Signature is Invalid" datatype="int" id="oval:mil.disa.fso.ie:var:4100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Active Content from CD's to Run on User Machine" datatype="int" id="oval:mil.disa.fso.ie:var:4000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Security Zones: Do Not Allow Users to Change Policies" datatype="int" id="oval:mil.disa.fso.ie:var:400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Turn off the Security Settings Check feature" datatype="int" id="oval:mil.disa.fso.ie:var:3900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Disable Changing Automatic Configuration Settings" datatype="int" id="oval:mil.disa.fso.ie:var:3800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:3700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Logon options" datatype="int" id="oval:mil.disa.fso.ie:var:3600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow cut, copy, or paste operations from the clipboard via script" datatype="int" id="oval:mil.disa.fso.ie:var:3500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow active scripting" datatype="int" id="oval:mil.disa.fso.ie:var:3400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Userdata persistence" datatype="int" id="oval:mil.disa.fso.ie:var:3300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Software channel permissions" datatype="int" id="oval:mil.disa.fso.ie:var:3200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Navigate windows and frames across different domains" datatype="int" id="oval:mil.disa.fso.ie:var:3100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching applications and files in an IFRAME" datatype="int" id="oval:mil.disa.fso.ie:var:3000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Security Zones: Use Only Machine Settings" datatype="int" id="oval:mil.disa.fso.ie:var:300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow installation of desktop items" datatype="int" id="oval:mil.disa.fso.ie:var:2900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow drag and drop or copy and paste files" datatype="int" id="oval:mil.disa.fso.ie:var:2800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow META REFRESH" datatype="int" id="oval:mil.disa.fso.ie:var:2700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Access data sources across domains" datatype="int" id="oval:mil.disa.fso.ie:var:2600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow font downloads" datatype="int" id="oval:mil.disa.fso.ie:var:2500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow file downloads" datatype="int" id="oval:mil.disa.fso.ie:var:2400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Script ActiveX controls marked safe for scripting" datatype="int" id="oval:mil.disa.fso.ie:var:2300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Security Zones: Use Only Machine Settings" datatype="int" id="oval:mil.disa.fso.ie:var:22700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run ActiveX controls and plugins" datatype="int" id="oval:mil.disa.fso.ie:var:2200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow Scriptlets" datatype="int" id="oval:mil.disa.fso.ie:var:21400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components signed with Authenticode" datatype="int" id="oval:mil.disa.fso.ie:var:21300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Run .NET Framework-reliant components not signed with Authenticode" datatype="int" id="oval:mil.disa.fso.ie:var:21200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Initialize and script ActiveX controls not marked as safe" datatype="int" id="oval:mil.disa.fso.ie:var:2100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn on Cross-Site Scripting (XSS) Filter" datatype="int" id="oval:mil.disa.fso.ie:var:20900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Only allow approved domains to use ActiveX controls without prompt" datatype="int" id="oval:mil.disa.fso.ie:var:20800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching programs and unsafe files" datatype="int" id="oval:mil.disa.fso.ie:var:20700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Include local directory path when uploading files to a server" datatype="int" id="oval:mil.disa.fso.ie:var:20600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow scripting of Internet Explorer web browser control" datatype="int" id="oval:mil.disa.fso.ie:var:20500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn on Cross-Site Scripting (XSS) Filter" datatype="int" id="oval:mil.disa.fso.ie:var:20400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Only allow approved domains to use ActiveX controls without prompt" datatype="int" id="oval:mil.disa.fso.ie:var:20300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching programs and unsafe files" datatype="int" id="oval:mil.disa.fso.ie:var:20200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Include local directory path when uploading files to a server" datatype="int" id="oval:mil.disa.fso.ie:var:20100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow scripting of Internet Explorer web browser control" datatype="int" id="oval:mil.disa.fso.ie:var:20000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download unsigned ActiveX controls" datatype="int" id="oval:mil.disa.fso.ie:var:2000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\InPrivate\Turn off InPrivate Browsing" datatype="int" id="oval:mil.disa.fso.ie:var:19900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Prevent Deleting Web sites that the User has Visited" datatype="int" id="oval:mil.disa.fso.ie:var:19800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Delete Browsing History\Configure Delete Browsing History on exit" datatype="int" id="oval:mil.disa.fso.ie:var:19700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Compatibility View\Include updated Web site lists from Microsoft" datatype="int" id="oval:mil.disa.fso.ie:var:19600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Include updated Web site lists from Microsoft" datatype="int" id="oval:mil.disa.fso.ie:var:19500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Prevent performance of First Run Customize settings" datatype="int" id="oval:mil.disa.fso.ie:var:19300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download signed ActiveX controls" datatype="int" id="oval:mil.disa.fso.ie:var:1900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Turn Off Crash Detection" datatype="int" id="oval:mil.disa.fso.ie:var:18900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Logon options" datatype="int" id="oval:mil.disa.fso.ie:var:1800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off Configuring the Update Check Interval (In Days)" datatype="int" id="oval:mil.disa.fso.ie:var:17900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Internet Settings\Component Updates\Periodic Check for Updates to Internet Explorer and Internet Tools\Turn Off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools" datatype="string" id="oval:mil.disa.fso.ie:var:17800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Scripting of Java applets" datatype="int" id="oval:mil.disa.fso.ie:var:17700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components signed with Authenticode" datatype="int" id="oval:mil.disa.fso.ie:var:17600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run .NET Framework-reliant components not signed with Authenticode" datatype="int" id="oval:mil.disa.fso.ie:var:17500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow cut, copy, or paste operations from the clipboard via script" datatype="int" id="oval:mil.disa.fso.ie:var:1700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Automatic prompting for file downloads" datatype="int" id="oval:mil.disa.fso.ie:var:16500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow binary and script behaviors" datatype="int" id="oval:mil.disa.fso.ie:var:16400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Web sites in less privileged Web content zones can navigate into this zone" datatype="int" id="oval:mil.disa.fso.ie:var:16300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Web sites in less privileged Web content zones can navigate into this zone" datatype="int" id="oval:mil.disa.fso.ie:var:16200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Use Pop-up Blocker" datatype="int" id="oval:mil.disa.fso.ie:var:16100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Use Pop-up Blocker" datatype="int" id="oval:mil.disa.fso.ie:var:16000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Userdata persistence" datatype="int" id="oval:mil.disa.fso.ie:var:1600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn On Protected Mode" datatype="int" id="oval:mil.disa.fso.ie:var:15900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\TTurn On Protected Mode" datatype="int" id="oval:mil.disa.fso.ie:var:15800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Turn Off First- Run Opt-In" datatype="int" id="oval:mil.disa.fso.ie:var:15700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn Off First- Run Opt-In" datatype="int" id="oval:mil.disa.fso.ie:var:15600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Loose XAML files" datatype="int" id="oval:mil.disa.fso.ie:var:15300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Loose or un-compiled XAML files" datatype="int" id="oval:mil.disa.fso.ie:var:15200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Restricted Sites Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:15100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Internet Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:15000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel permissions" datatype="int" id="oval:mil.disa.fso.ie:var:1500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Trusted Sites Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:14900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Intranet Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:14800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Locked Down Local Machine Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:14700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:14600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Automatic prompting for file downloads" datatype="int" id="oval:mil.disa.fso.ie:var:14500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow Scriptlets" datatype="int" id="oval:mil.disa.fso.ie:var:14400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow script-initiated windows without size or position constraints" datatype="int" id="oval:mil.disa.fso.ie:var:14300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow script-initiated windows without size or position constraints" datatype="int" id="oval:mil.disa.fso.ie:var:14200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Sites: Include all network paths (UNCs)" datatype="int" id="oval:mil.disa.fso.ie:var:14100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Signature on Downloaded Programs" datatype="string" id="oval:mil.disa.fso.ie:var:14000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching applications and files in an IFRAME" datatype="int" id="oval:mil.disa.fso.ie:var:1400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Check for Server Certificate Revocation" datatype="int" id="oval:mil.disa.fso.ie:var:13900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Third-Party Browser Extensions" datatype="string" id="oval:mil.disa.fso.ie:var:13800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Software to Run or Install Even if the Signature is Invalid" datatype="int" id="oval:mil.disa.fso.ie:var:13700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Advanced Page \Allow Active Content from CD's to Run on User Machine" datatype="int" id="oval:mil.disa.fso.ie:var:13600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Turn off the Security Settings Check feature" datatype="int" id="oval:mil.disa.fso.ie:var:13500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Prevent participation in the Customer Experience Improvement Programs" datatype="int" id="oval:mil.disa.fso.ie:var:13400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Disable Changing Automatic Configuration Settings" datatype="int" id="oval:mil.disa.fso.ie:var:13300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons is disabled" datatype="int" id="oval:mil.disa.fso.ie:var:13200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:13100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Logon options" datatype="int" id="oval:mil.disa.fso.ie:var:13000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow installation of desktop items" datatype="int" id="oval:mil.disa.fso.ie:var:1300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow cut, copy, or paste operations from the clipboard via script" datatype="int" id="oval:mil.disa.fso.ie:var:12900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow active scripting" datatype="int" id="oval:mil.disa.fso.ie:var:12800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Userdata persistence" datatype="int" id="oval:mil.disa.fso.ie:var:12700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Software channel permissions" datatype="int" id="oval:mil.disa.fso.ie:var:12600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Navigate windows and frames across different domains" datatype="int" id="oval:mil.disa.fso.ie:var:12500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Launching applications and files in an IFRAME" datatype="int" id="oval:mil.disa.fso.ie:var:12400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow installation of desktop items" datatype="int" id="oval:mil.disa.fso.ie:var:12300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow drag and drop or copy and paste files" datatype="int" id="oval:mil.disa.fso.ie:var:12200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow META REFRESH" datatype="int" id="oval:mil.disa.fso.ie:var:12100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Access data sources across domains" datatype="int" id="oval:mil.disa.fso.ie:var:12000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow drag and drop or copy and paste files" datatype="int" id="oval:mil.disa.fso.ie:var:1200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Allow font downloads" datatype="int" id="oval:mil.disa.fso.ie:var:11900" version="1" />
    <external_variable comment="Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" datatype="int" id="oval:mil.disa.fso.ie:var:11800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Script ActiveX controls marked safe for scripting" datatype="int" id="oval:mil.disa.fso.ie:var:11700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Run ActiveX controls and plugins" datatype="int" id="oval:mil.disa.fso.ie:var:11600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Initialize and script ActiveX controls not marked as safe" datatype="int" id="oval:mil.disa.fso.ie:var:11500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download unsigned ActiveX controls" datatype="int" id="oval:mil.disa.fso.ie:var:11400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Download signed ActiveX controls" datatype="int" id="oval:mil.disa.fso.ie:var:11300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:11200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:11100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Logon options" datatype="int" id="oval:mil.disa.fso.ie:var:11000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Access data sources across domains" datatype="int" id="oval:mil.disa.fso.ie:var:1100" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow cut, copy, or paste operations from the clipboard via script" datatype="int" id="oval:mil.disa.fso.ie:var:10900" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Userdata persistence" datatype="int" id="oval:mil.disa.fso.ie:var:10800" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel permissions" datatype="int" id="oval:mil.disa.fso.ie:var:10700" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Navigate windows and frames across different domains" datatype="int" id="oval:mil.disa.fso.ie:var:10600" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Launching applications and files in an IFRAME" datatype="int" id="oval:mil.disa.fso.ie:var:10500" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow installation of desktop items" datatype="int" id="oval:mil.disa.fso.ie:var:10400" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow drag and drop or copy and paste files" datatype="int" id="oval:mil.disa.fso.ie:var:10300" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Access data sources across domains" datatype="int" id="oval:mil.disa.fso.ie:var:10200" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Java permissions" datatype="int" id="oval:mil.disa.fso.ie:var:10100" version="1" />
    <external_variable comment="Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" datatype="int" id="oval:mil.disa.fso.ie:var:10000" version="1" />
    <external_variable comment="Computer Configuration\Network\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Allow font downloads" datatype="int" id="oval:mil.disa.fso.ie:var:1000" version="1" />
    <external_variable comment="optional:Indicates whether the administrative lock on the account is set" datatype="boolean" id="oval:com.mcafee.primitives:var:80482" version="2" />
    <external_variable comment="optional:The maximum number of unsuccessful login attempts before the account is locked" datatype="int" id="oval:com.mcafee.primitives:var:80481" version="2" />
    <external_variable comment="optional:The number of unsuccessful login attempts since that last successful login" datatype="int" id="oval:com.mcafee.primitives:var:80480" version="2" />
    <external_variable comment="optional:The terminal or remote hosts associated with the last unsuccessful login to the account" datatype="int" id="oval:com.mcafee.primitives:var:80479" version="2" />
    <external_variable comment="optional:The terminal or remote host associated with the last successful login to the account" datatype="string" id="oval:com.mcafee.primitives:var:80478" version="1" />
    <external_variable comment="optional:The time of the last unsuccessful login using this account" datatype="string" id="oval:com.mcafee.primitives:var:80477" version="1" />
    <external_variable comment="optional:The time of the last successful login using this account" datatype="string" id="oval:com.mcafee.primitives:var:80476" version="1" />
    <external_variable comment="optional:The user ID of the user who last changed the password on the user's account, if it was not the account owner" datatype="int" id="oval:com.mcafee.primitives:var:80475" version="2" />
    <external_variable comment="optional:Specifies the times when the user may login to this account" datatype="string" id="oval:com.mcafee.primitives:var:80474" version="1" />
    <external_variable comment="optional:Allows password generator to use random printable ASCII characters" datatype="string" id="oval:com.mcafee.primitives:var:80473" version="1" />
    <external_variable comment="optional:Determines if null passwords are allowed for this account" datatype="string" id="oval:com.mcafee.primitives:var:80472" version="1" />
    <external_variable comment="optional:Whether a triviality check is performed on user-generated passwords" datatype="string" id="oval:com.mcafee.primitives:var:80471" version="1" />
    <external_variable comment="optional:Allows user to use system-generated passwords" datatype="string" id="oval:com.mcafee.primitives:var:80470" version="1" />
    <external_variable comment="optional:Who can change this user's password" datatype="string" id="oval:com.mcafee.primitives:var:80469" version="1" />
    <external_variable comment="optional:The time in seconds before expiration when a warning will appear" datatype="int" id="oval:com.mcafee.primitives:var:80468" version="2" />
    <external_variable comment="optional:Maximum time allowed between logins before the account is locked" datatype="string" id="oval:com.mcafee.primitives:var:80467" version="1" />
    <external_variable comment="optional:Absolute account lifetime in seconds" datatype="int" id="oval:com.mcafee.primitives:var:80466" version="2" />
    <external_variable comment="optional:Time of last unsuccessful password change" datatype="string" id="oval:com.mcafee.primitives:var:80465" version="1" />
    <external_variable comment="optional:Time of last successful password change" datatype="string" id="oval:com.mcafee.primitives:var:80464" version="1" />
    <external_variable comment="optional:Trusted lifetime, after which the account is locked" datatype="string" id="oval:com.mcafee.primitives:var:80463" version="1" />
    <external_variable comment="optional:Password expiration time in seconds" datatype="int" id="oval:com.mcafee.primitives:var:80462" version="2" />
    <external_variable comment="optional:Maximum password length in characters" datatype="int" id="oval:com.mcafee.primitives:var:80461" version="2" />
    <external_variable comment="optional:Minimum time between password changes" datatype="string" id="oval:com.mcafee.primitives:var:80460" version="1" />
    <external_variable comment="optional:Audit Flag" datatype="string" id="oval:com.mcafee.primitives:var:80459" version="1" />
    <external_variable comment="optional:getprpwaid uses the audit ID rather than the UID" datatype="string" id="oval:com.mcafee.primitives:var:80458" version="1" />
    <external_variable comment="optional:Boot authorization" datatype="string" id="oval:com.mcafee.primitives:var:80457" version="1" />
    <external_variable comment="optional:The Account owner for pseudo-users" datatype="int" id="oval:com.mcafee.primitives:var:80456" version="2" />
    <external_variable comment="optional:This is the encrypted version of the user's password" datatype="string" id="oval:com.mcafee.primitives:var:80455" version="1" />
    <external_variable comment="optional:The user's ID" datatype="int" id="oval:com.mcafee.primitives:var:80454" version="2" />
    <external_variable comment="optional:Can the other users execute this file or, if a directory, change into the directory?" datatype="boolean" id="oval:com.mcafee.primitives:var:74989" version="2">
      <possible_value hint="True: Others Execute enabled">true</possible_value>
      <possible_value hint="False: Others Execute disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:This is a reserved field that the shadow file may use in the future" datatype="string" id="oval:com.mcafee.primitives:var:73282" version="2" />
    <external_variable comment="The command element specifies the command/program name to check" datatype="string" id="oval:com.mcafee.primitives:var:73281" version="2" />
    <external_variable comment="optional:Can the other users write to this file or directory?" datatype="boolean" id="oval:com.mcafee.primitives:var:73280" version="2">
      <possible_value hint="True: Others Write enabled">true</possible_value>
      <possible_value hint="False: Others Write disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can all other users read this file or, if a directory, read the directory contents?" datatype="boolean" id="oval:com.mcafee.primitives:var:73279" version="2">
      <possible_value hint="True: Others Read enabled">true</possible_value>
      <possible_value hint="False: Others Read disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can the group owner of the file execute it or, if a directory, change into the directory?" datatype="boolean" id="oval:com.mcafee.primitives:var:73278" version="2">
      <possible_value hint="True: Group Execute enabled">true</possible_value>
      <possible_value hint="False: Group Execute disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can the group owner of the file write to this file or directory?" datatype="boolean" id="oval:com.mcafee.primitives:var:73277" version="2">
      <possible_value hint="True: Group Write enabled">true</possible_value>
      <possible_value hint="False: Group Write disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can the group owner of the file read this file or, if a directory, read the directory contents?" datatype="boolean" id="oval:com.mcafee.primitives:var:73276" version="2">
      <possible_value hint="True: Group Read enabled">true</possible_value>
      <possible_value hint="False: Group Read disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can the owner (user owner) of the file execute it or, if a directory, change into the directory?" datatype="boolean" id="oval:com.mcafee.primitives:var:73275" version="2">
      <possible_value hint="True: User Execute enabled">true</possible_value>
      <possible_value hint="False: User Execute disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can the owner (user owner) of the file write to this file or, if a directory, write the directory contents?" datatype="boolean" id="oval:com.mcafee.primitives:var:73274" version="2">
      <possible_value hint="True: User Write enabled">true</possible_value>
      <possible_value hint="False: User Write disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can the owner (user owner) of the file read this file or, if a directory, read the directory contents?" datatype="boolean" id="oval:com.mcafee.primitives:var:73273" version="2">
      <possible_value hint="True: User Read enabled">true</possible_value>
      <possible_value hint="False: User Read disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can users delete each other's files in this directory, when said directory is writable by those users?" datatype="boolean" id="oval:com.mcafee.primitives:var:73272" version="2">
      <possible_value hint="True: Sticky Bit is set">true</possible_value>
      <possible_value hint="False: Sticky Bit is NOT set">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Does the program run with the gid (thus privileges) of the file's group owner, rather than the calling user's group?" datatype="boolean" id="oval:com.mcafee.primitives:var:73271" version="2">
      <possible_value hint="True: SGID Bit is set">true</possible_value>
      <possible_value hint="False: SGID Bit is NOT set">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Does the program run with the uid (thus privileges) of the file's owner, rather than the calling user?" datatype="boolean" id="oval:com.mcafee.primitives:var:73270" version="2">
      <possible_value hint="True: SUID Bit is set">true</possible_value>
      <possible_value hint="False: SUID Bit is NOT set">false</possible_value>
    </external_variable>
    <external_variable comment="optional:This is the size of the file in bytes" datatype="int" id="oval:com.mcafee.primitives:var:73269" version="2" />
    <external_variable comment="optional:This is the time of the last change to the file's contents" datatype="int" id="oval:com.mcafee.primitives:var:73268" version="2" />
    <external_variable comment="optional:This is the time of the last change to the file's inode, which stores all" datatype="int" id="oval:com.mcafee.primitives:var:73267" version="2" />
    <external_variable comment="optional:This is the time of the last access, in seconds since the last epoch" datatype="int" id="oval:com.mcafee.primitives:var:73266" version="2" />
    <external_variable comment="optional:The numeric user id, or uid, is the third column of each user's entry in /etc/passwd. This element represents the owner of the file" datatype="int" id="oval:com.mcafee.primitives:var:73265" version="2" />
    <external_variable comment="optional:This is the group owner of the file, by group number" datatype="int" id="oval:com.mcafee.primitives:var:73264" version="2" />
    <external_variable comment="optional:This is the file's type: regular file (regular), directory, named pipe (fifo), symbolic link, socket or block special" datatype="string" id="oval:com.mcafee.primitives:var:73263" version="1" />
    <external_variable comment="The filename element specifies the name of the file" datatype="string" id="oval:com.mcafee.primitives:var:73249" version="1" />
    <external_variable comment="The path element specifies the absolute path to a file on the machine. This should include the trailing backslash." datatype="string" id="oval:com.mcafee.primitives:var:73248" version="2" />
    <external_variable comment="This is the package name to check." datatype="string" id="oval:com.mcafee.primitives:var:73223" version="1" />
    <external_variable comment="optional:This is the revision" datatype="string" id="oval:com.mcafee.primitives:var:73222" version="1" />
    <external_variable comment="optional:This is the architecture" datatype="string" id="oval:com.mcafee.primitives:var:73221" version="1" />
    <external_variable comment="optional:This is the version number of the package" datatype="string" id="oval:com.mcafee.primitives:var:73220" version="1" />
    <external_variable comment="optional:This represents the epoch, version, and release fields as a single version string. It has the form &quot;EPOCH:VERSION-RELEASE" datatype="evr_string" id="oval:com.mcafee.primitives:var:73215" version="2" />
    <external_variable comment="optional:This is the version number of the build" datatype="string" id="oval:com.mcafee.primitives:var:73214" version="1" />
    <external_variable comment="optional:This is the release number of the build, changed by the vendor/builder" datatype="string" id="oval:com.mcafee.primitives:var:73213" version="1" />
    <external_variable comment="optional:This is the epoch number of the package, this is used as a kludge for version-release comparisons where the vendor has done some kind of re-numbering or version forking" datatype="string" id="oval:com.mcafee.primitives:var:73212" version="1" />
    <external_variable comment="optional:This is the architecture for which the package was built, like : i386, ppc, sparc, noarch" datatype="string" id="oval:com.mcafee.primitives:var:73211" version="1" />
    <external_variable comment="This is the DPKG package name to check" datatype="string" id="oval:com.mcafee.primitives:var:73210" version="1" />
    <external_variable comment="optional:Element about maintenance level (system version). Please refer to the individual elements in the schema for more details about what each represents." datatype="version" id="oval:com.mcafee.primitives:var:67746" version="2" />
    <external_variable comment="optional:Leave this empty." datatype="string" id="oval:com.mcafee.primitives:var:67745" version="1" />
    <external_variable comment="optional:The installation status of files associated with the APAR. This cannot be gotten from the output of the instfix command directly. The last line of the output is &quot;All filesets for XXXXXXX were found&quot;, or &quot;Not all filesets for XXXXXXX were found&quot; or &quot;No filesets which have fixes for XXXXXXX are currently installed.&quot;" datatype="string" id="oval:com.mcafee.primitives:var:67740" version="4">
      <possible_value hint="All Installed">ALL_INSTALLED</possible_value>
      <possible_value hint="Some Installed">SOME_INSTALLED</possible_value>
      <possible_value hint="None Installed">NONE_INSTALLED</possible_value>
    </external_variable>
    <external_variable comment="optional:The symptom text related to an APAR. Example, the symptom text for &quot;IY75211&quot; is Daylight savings change for year 2007 and beyond" datatype="string" id="oval:com.mcafee.primitives:var:67739" version="3" />
    <external_variable comment="optional:The abstract of APAR. For instance, &quot;LL syas rXct are available even when not susea&quot; is the abstract of APAR &quot;IY78751&quot;" datatype="string" id="oval:com.mcafee.primitives:var:67738" version="3" />
    <external_variable comment="APAR Number? (Example IY78751)" datatype="string" id="oval:com.mcafee.primitives:var:67737" version="4" />
    <external_variable comment="optional:Short description of a fileset? (Example bos.rte)" datatype="string" id="oval:com.mcafee.primitives:var:67732" version="1" />
    <external_variable comment="optional:This gives the state of a fileset. The state can be 'APPLIED', 'APPLYING','BROKEN', 'COMMITTED', 'EFIX LOCKED', 'OBSOLETE', 'COMMITTING','REJECTING'. See the manpage of the 'lslpp' command more information." datatype="string" id="oval:com.mcafee.primitives:var:67731" version="2">
      <possible_value hint="APPLIED: The specified fileset is installed on the system.">APPLIED</possible_value>
      <possible_value hint="APPLYING: An attempt was made to apply the specified fileset, but it did not complete successfully, and cleanup was not performed.">APPLYING</possible_value>
      <possible_value hint="BROKEN: The specified fileset or fileset update is broken and should be reinstalled before being used.">BROKEN</possible_value>
      <possible_value hint="COMMITTED: The specified fileset is installed on the system. The COMMITTED state means that a commitment has been made to this level of the software.">COMMITTED</possible_value>
      <possible_value hint="COMMITTING: An attempt was made to commit the specified fileset, but it did not complete successfully, and cleanup was not performed.">COMMITTING</possible_value>
      <possible_value hint="EFIX LOCKED: The specified fileset was installed sucessfully and locked by the interim fix (interim fix) manager.">EFIX LOCKED</possible_value>
      <possible_value hint="OBSOLETE: The specified fileset was installed with an earlier version of the operating system but has been replaced by a repackaged (renamed) newer version.">OBSOLETE</possible_value>
      <possible_value hint="REJECTING: An attempt was made to reject the specified fileset, but it did not complete successfully, and cleanup was not performed.">REJECTING</possible_value>
    </external_variable>
    <external_variable comment="optional:Maintenance level (also known as version in Solaris or Linux) of a fileset. For example, '5.3.0.10' is the level for 'bos.txt.tfs' fileset in one AIX machine." datatype="version" id="oval:com.mcafee.primitives:var:67730" version="3" />
    <external_variable comment="optional:The fileset name we want to check. For example, if we want to check the status of the fileset 'bos.rte', we can use fileset test and the flstinst entity will be 'bos.rte' or 'bot.*' or etc." datatype="string" id="oval:com.mcafee.primitives:var:67729" version="1" />
    <external_variable comment="Which fileset? (Example bos.rte)" datatype="string" id="oval:com.mcafee.primitives:var:67715" version="4" />
    <external_variable comment="optional: Value of xpath" datatype="string" id="oval:com.mcafee.primitives:var:55431" version="1" />
    <external_variable comment="optional:This is the number of bits in the address space of the native instruction set." datatype="int" id="oval:com.mcafee.primitives:var:5242" version="3" />
    <external_variable comment="optional:The name of the package" datatype="string" id="oval:com.mcafee.primitives:var:5241" version="1" />
    <external_variable comment="The instance of the package" datatype="string" id="oval:com.mcafee.primitives:var:5240" version="1" />
    <external_variable comment="Each subexpression in the regular expression of the line element is then tested against the value specified in the subexpression element." datatype="string" id="oval:com.mcafee.primitives:var:51108" version="2" />
    <external_variable comment="The line element represents a line in the file and is represented using a regular expression. A single subexpression can be called out using parentheses. The value of this subexpression can then be checked using a textfilecontent_state. Example: A line equal to DEBUG=(\d) where you want to evaluate the digit with a testfilecontent state. Please note that the only valid operation for this parameter is Pattern Match, using any other operation will cause the check created to execute incorrectly" datatype="string" id="oval:com.mcafee.primitives:var:51107" version="2" />
    <external_variable comment="The filename element specifies the name of the file." datatype="string" id="oval:com.mcafee.primitives:var:51106" version="2" />
    <external_variable comment="Specifies the absolute path to a file on the machine, not including the filename." datatype="string" id="oval:com.mcafee.primitives:var:51105" version="2" />
    <external_variable comment="optional:This field contains the 64-bit PGP key ID that the RPM issuer (generally the original operating system vendor) uses to sign the key. Note that the value should NOT contain a hyphen to seperat the higher 32-bits from the lower 32-bits. It should simply be a 16 character hex string. PGP is used to verify the authenticity and integrity of the RPM being considered. Software packages and patches are signed cryptographically to allow administrators to allay concerns that the distribution mechanism has been compromised, whether that mechanism is web site, FTP server, or even a mirror controlled by a hostile party. OVAL uses this field most of all to confirm that the package installed on the system is that shipped by the vendor, since comparing package version numbers against patch announcements is only programmatically valid if the installed package is known to contain the patched code." datatype="string" id="oval:com.mcafee.primitives:var:51100" version="3" />
    <external_variable comment="optional:This represents the epoch, version, and release fields as a single version string. It has the form &quot;EPOCH:VERSION-RELEASE&quot;. Note that a null epoch (or (none) as returned by rpm) is equivalent to 0 and would hence have the form 0:VERSION-RELEASE. Comparisons involving this datatype should follow the algorithm of librpms rpmvercmp() function." datatype="evr_string" id="oval:com.mcafee.primitives:var:51099" version="4" />
    <external_variable comment="optional:This is the version number of the build. In the case of an apache rpm named httpd-2.0.40-21.11.4.i686.rpm, this value would be 21.11.4." datatype="string" id="oval:com.mcafee.primitives:var:51098" version="3" />
    <external_variable comment="optional:This is the release number of the build, changed by the vendor/builder." datatype="string" id="oval:com.mcafee.primitives:var:51097" version="3" />
    <external_variable comment="optional:This is the epoch number of the RPM, this is used as a kludge for version-release comparisons where the vendor has done some kind of re-numbering or version forking. For a null epoch (or (none) as returned by rpm) is equivalent to 0. This number is not revealed by a normal query of the RPMs information -- you must use a formatted rpm query command to gather this data from the command line, like so. For an already-installed RPM: rpm -q --qf %{EPOCH}\n installed_rpm For an RPM file that has not been installed: rpm -qp --qf %{EPOCH}\n rpm_file" datatype="string" id="oval:com.mcafee.primitives:var:51096" version="3" />
    <external_variable comment="optional:This is the architecture for which the RPM was built, like : i386, ppc, sparc, noarch. In the case of an apache rpm named httpd-2.0.40-21.11.4.i686.rpm, this value would be i686." datatype="string" id="oval:com.mcafee.primitives:var:51095" version="3" />
    <external_variable comment="The expected package name to be found on the system (Example: firefox)" datatype="string" id="oval:com.mcafee.primitives:var:51094" version="4" />
    <external_variable comment="This is the package name to check." datatype="string" id="oval:com.mcafee.primitives:var:51093" version="2" />
    <external_variable comment="This is the Fileset name to be checked?" datatype="string" id="oval:com.mcafee.primitives:var:51023" version="3" />
    <external_variable comment="optional:Vender" datatype="string" id="oval:com.mcafee.primitives:var:51022" version="2" />
    <external_variable comment="optional:Title" datatype="string" id="oval:com.mcafee.primitives:var:51021" version="2" />
    <external_variable comment="optional:Fileset" datatype="string" id="oval:com.mcafee.primitives:var:51020" version="2" />
    <external_variable comment="optional:Bundle" datatype="string" id="oval:com.mcafee.primitives:var:51019" version="2" />
    <external_variable comment="optional:Version" datatype="string" id="oval:com.mcafee.primitives:var:51018" version="2" />
    <external_variable comment="This is the name of the user being checked" datatype="string" id="oval:com.mcafee.primitives:var:51013" version="1" />
    <external_variable comment="The sixth through tenth characters in HP-UX patch names represent a unique numeric identifier for the patch" datatype="string" id="oval:com.mcafee.primitives:var:51006" version="1" />
    <external_variable comment="The third and fourth characters in HP-UX patch names indicate the area of software being patched. CO - General HP-UX commands KL - Kernel patches NE - Network specific patches SS - All other subsystems (X11, starbase, etc.)" datatype="string" id="oval:com.mcafee.primitives:var:51005" version="1" />
    <external_variable comment="What is the patch ID? The sixth through tenth characters in HP-UX patch names represent a unique numeric identifier for the patch" datatype="string" id="oval:com.mcafee.primitives:var:51004" version="2" />
    <external_variable comment="What software area does the patch apply to? The third and fourth characters in HP-UX patch names indicate the area of software being patched. (CO - General HP-UX commands KL - Kernel patches NE - Network specific patches SS - All other subsystems)" datatype="string" id="oval:com.mcafee.primitives:var:51003" version="3" />
    <external_variable comment="optional:This is the pathname to check. Note that pathname is optional in the getconf call. An empty pathname in OVAL should be interpreted as if it was not supplied to the getconf call." datatype="string" id="oval:com.mcafee.primitives:var:51000" version="2" />
    <external_variable comment="optional:What is the expected output?" datatype="string" id="oval:com.mcafee.primitives:var:50999" version="3" />
    <external_variable comment="What is the pathname?" datatype="string" id="oval:com.mcafee.primitives:var:50998" version="3" />
    <external_variable comment="What is the parameter name to check" datatype="string" id="oval:com.mcafee.primitives:var:50997" version="3" />
    <external_variable comment="The expected Trustee ID of the named user,group,system or program ." datatype="string" id="oval:com.mcafee.primitives:var:403314" version="1" />
    <external_variable comment="Each subexpression in the regular expression of the line element is then tested against the value specified in the subexpression element." datatype="string" id="oval:com.mcafee.primitives:var:402743" version="1" />
    <external_variable comment="Specifies the absolute path to a file on the machine, not including the filename." datatype="string" id="oval:com.mcafee.primitives:var:402742" version="1" />
    <external_variable comment="The instance entity calls out a specific match of the pattern. The first match is given an instance value of 1, the second match is given an instance value of 2, and so on.." datatype="int" id="oval:com.mcafee.primitives:var:402701" version="1" />
    <external_variable comment="The pattern entity defines a chunk of text in a file and is represented using a regular expression. A subexpression (using parentheses) can call out a piece of the text block to test. For example, the pattern abc(.*)xyz would look for a block of text in the file that starts with abc and ends with xyz, with the subexpression being all the characters that exist in between." datatype="string" id="oval:com.mcafee.primitives:var:402700" version="1" />
    <external_variable comment="optional:The exec_as_user entity is a string pulled from svcprop in the following format: inetd_start/user astring root" datatype="string" id="oval:com.mcafee.primitives:var:402695" version="1" />
    <external_variable comment="optional:Enter the possible parameters that are passed to the service" datatype="string" id="oval:com.mcafee.primitives:var:402694" version="1" />
    <external_variable comment="optional:Enter the string representing the listening daemon on the server side.An example being 'svcprop ftp' which might show 'inetd/start/exec astring /usr/sbin/in.ftpd\ -a'" datatype="string" id="oval:com.mcafee.primitives:var:402693" version="1" />
    <external_variable comment="Enter the Fault management resource identifier" datatype="string" id="oval:com.mcafee.primitives:var:402691" version="1" />
    <external_variable comment="optional:This gives the the emergency fix state. The state can be 'STABLE ', 'MOUNTED','UNMOUNTED','BROKEN', 'INSTALLING', 'REBOOT_REQUIRED', 'REMOVING'." datatype="string" id="oval:com.mcafee.primitives:var:402682" version="1">
      <possible_value hint="STABLE: The efix was installed with a standard installation, and successfully completed the last installation operation.">STABLE</possible_value>
      <possible_value hint="MOUNTED: The efix was installed with a mount installation operation, and successfully completed the last installation or mount operation.">MOUNTED</possible_value>
      <possible_value hint="UNMOUNTED: The efix was installed with a mount installation operation and one or more efix files were unmounted in a previous emgr command operation.">UNMOUNTED</possible_value>
      <possible_value hint="BROKEN: An unrecoverable error occurred during an installation or removal operation. The status of the efix is unreliable.">BROKEN</possible_value>
      <possible_value hint="INSTALLING: The efix is in the process of installing.">INSTALLING</possible_value>
      <possible_value hint="REBOOT_REQUIRED: The efix was installed successfully and requires a reboot to fully integrate into the target system.">REBOOT_REQUIRED</possible_value>
      <possible_value hint="REMOVING: The efix is in the process of being removed.">REMOVING</possible_value>
    </external_variable>
    <external_variable comment="optional:The unique efix label. Example, interim fix label is installed (PREREQ)" datatype="string" id="oval:com.mcafee.primitives:var:402681" version="1" />
    <external_variable comment="Virtually Unique Id(VUID)? (Example 000775364C00020316020703)" datatype="string" id="oval:com.mcafee.primitives:var:402680" version="1" />
    <external_variable comment="optional:Which group security identifier(SID) would you like to check? In a domain environment, the input should be in the form 'domain\UserName'. Please note that some of the built-in accounts on the system should be completely uppercase. For example: SYSTEM, NETWORK SERVICE, LOCAL SERVICE, etc... Make sure to input your user or group names in the correct case for proper results." datatype="string" id="oval:com.mcafee.primitives:var:402657" version="2" />
    <external_variable comment="what is the expected security identifier (SID) of the named user." datatype="string" id="oval:com.mcafee.primitives:var:402656" version="1" />
    <external_variable comment="optional:Permission to specify a user-defined control code." datatype="boolean" id="oval:com.mcafee.primitives:var:402651" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Ask the service to report its status immediately." datatype="boolean" id="oval:com.mcafee.primitives:var:402650" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Permission to Pause the service." datatype="boolean" id="oval:com.mcafee.primitives:var:402649" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Permission to Stop the service." datatype="boolean" id="oval:com.mcafee.primitives:var:402648" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Permission to Start the service." datatype="boolean" id="oval:com.mcafee.primitives:var:402647" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Call the EnumDependentServices function to enumerate all the services dependent on the service." datatype="boolean" id="oval:com.mcafee.primitives:var:402646" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Function to ask the service control manager about the status of the service." datatype="boolean" id="oval:com.mcafee.primitives:var:402645" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Change the service configuration." datatype="boolean" id="oval:com.mcafee.primitives:var:402644" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Query the service configuration." datatype="boolean" id="oval:com.mcafee.primitives:var:402643" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="Which Service would you like to check? For example, if you wanted to check the effective rights of the Automatic Updates service you would specify wuauserv for the service_name element not Automatic Updates." datatype="string" id="oval:com.mcafee.primitives:var:402642" version="1" />
    <external_variable comment="optional:The expected User security identifier (SID) of the named user or subgroup." datatype="string" id="oval:com.mcafee.primitives:var:402637" version="2" />
    <external_variable comment="The expected Group security identifier (GID) of the named user." datatype="string" id="oval:com.mcafee.primitives:var:402636" version="2" />
    <external_variable comment="Which group security identifier (SID) would you like to check? In a domain environment, the input should be in the form 'domain\UserName'. Please note that some of the built-in accounts on the system should be completely uppercase. For example: SYSTEM, NETWORK SERVICE, LOCAL SERVICE, etc... Make sure to input your user or group names in the correct case for proper results." datatype="string" id="oval:com.mcafee.primitives:var:402635" version="3" />
    <external_variable comment="optional:Foreign Full Address: This is the IP address and network port to which the program is communicating or will accept communications from, equivalent to foreign_address:foreign_port." datatype="string" id="oval:com.mcafee.primitives:var:20091218450" version="1" />
    <external_variable comment="optional:Local Full Address: This is the IP address and network port on which the program listens, equivalent to local_address:local_port." datatype="string" id="oval:com.mcafee.primitives:var:20091218446" version="1" />
    <external_variable comment="optional:This is the users uid." datatype="int" id="oval:com.mcafee.primitives:var:20091218117" version="1" />
    <external_variable comment="nvram -p' output?" datatype="string" id="oval:com.mcafee.primitives:var:20090829001" version="1" />
    <external_variable comment="Environment Variable: The commonly used shortcut name for the path of the file to be checked. NOTE: You CANNOT choose an enviroment variable AND then decide to put in a full path to the file. If you wish to use a full path then you MUST choose Full Path here, otherwise any rule built with this check will not work properly." datatype="string" id="oval:com.mcafee.primitives:var:20090626001" version="4">
      <possible_value hint="Common Program Files">CommonProgramFiles</possible_value>
      <possible_value hint="Program Files">ProgramFiles</possible_value>
      <possible_value hint="System Drive">SystemDrive</possible_value>
      <possible_value hint="System Directory">SystemRoot</possible_value>
      <possible_value hint="Windows Directory">windir</possible_value>
      <possible_value hint="Full Path (MUST enter full path into path field above)">FullPath</possible_value>
    </external_variable>
    <external_variable comment="optional:User_ID: The numeric user id, or uid, is the third column of each user's entry in /etc/passwd. It represents the owner, and thus privilege level, of the specified program." datatype="string" id="oval:com.mcafee.primitives:var:20080529164" version="3" />
    <external_variable comment="optional:PID: The pid is the process ID of a specific process." datatype="int" id="oval:com.mcafee.primitives:var:20080529163" version="3" />
    <external_variable comment="optional:Foreign Port: This is the TCP or UDP port to which the program communicates. In the case of a listening program accepting new connections, this is usually a *." datatype="string" id="oval:com.mcafee.primitives:var:20080529162" version="3" />
    <external_variable comment="optional:Foreign Address: This is the IP address with which the program is communicating, or with which it will communicate, in the case of a listening server." datatype="string" id="oval:com.mcafee.primitives:var:20080529161" version="2" />
    <external_variable comment="Program Name: This is the name of the communicating program." datatype="string" id="oval:com.mcafee.primitives:var:20080529160" version="2" />
    <external_variable comment="optional:Local Port: This is the TCP or UDP port on which an application would listen. Note that this is not a list -- if a program listens on multiple ports, or on a combination of TCP and UDP, each will be represented by its own object." datatype="int" id="oval:com.mcafee.primitives:var:20080529159" version="4" />
    <external_variable comment="optional:Local Address: This is the IP address of the network interface on which an application listens." datatype="string" id="oval:com.mcafee.primitives:var:20080529158" version="2" />
    <external_variable comment="optional:Protocol: The protocol entity defines a certain transport-layer protocol, in lowercase: tcp or udp." datatype="string" id="oval:com.mcafee.primitives:var:20080529157" version="2" />
    <external_variable comment="optional:This is the users login shell." datatype="string" id="oval:com.mcafee.primitives:var:20080529156" version="2" />
    <external_variable comment="optional:This is the users home directory." datatype="string" id="oval:com.mcafee.primitives:var:20080529155" version="2" />
    <external_variable comment="optional:This is the users real name." datatype="string" id="oval:com.mcafee.primitives:var:20080529154" version="2" />
    <external_variable comment="optional:This is the users gid." datatype="int" id="oval:com.mcafee.primitives:var:20080529153" version="3" />
    <external_variable comment="optional:This is the users password." datatype="string" id="oval:com.mcafee.primitives:var:20080529152" version="2" />
    <external_variable comment="This is the users login name." datatype="string" id="oval:com.mcafee.primitives:var:20080529151" version="1" />
    <external_variable comment="The nvram value of the associated nvram variable" datatype="string" id="oval:com.mcafee.primitives:var:20080529150" version="5" />
    <external_variable comment="This is the users login name" datatype="string" id="oval:com.mcafee.primitives:var:20080529149" version="4" />
    <external_variable comment="optional:Defines if the password must contain an numeric character or not." datatype="boolean" id="oval:com.mcafee.primitives:var:20080529148" version="4" />
    <external_variable comment="optional:Defines if the password must contain an alphabetical character or not." datatype="boolean" id="oval:com.mcafee.primitives:var:20080529147" version="4" />
    <external_variable comment="optional:Defines if the password is allowed to be the same as the username or not." datatype="boolean" id="oval:com.mcafee.primitives:var:20080529146" version="4" />
    <external_variable comment="optional:Minimum number of characters allowed in a password." datatype="int" id="oval:com.mcafee.primitives:var:20080529145" version="4" />
    <external_variable comment="optional:Maximum number of failed logins before the account is locked." datatype="int" id="oval:com.mcafee.primitives:var:20080529144" version="4" />
    <external_variable comment="optional:Maximum number of characters allowed in a password." datatype="int" id="oval:com.mcafee.primitives:var:20080529143" version="4" />
    <external_variable comment="optional:This is the directory node." datatype="string" id="oval:com.mcafee.primitives:var:20080529142" version="3" />
    <external_variable comment="optional:This is the user password." datatype="string" id="oval:com.mcafee.primitives:var:20080529141" version="3" />
    <external_variable comment='This is the users login name.' datatype='string' id='oval:com.mcafee.primitives:var:20080529140' version='2' />
    <external_variable comment='Registry Key Path: The registry key to be tested. Note that the hive portion of the string should not be included, as this data should be selected in the hive parameter. If the operation selected is equals, the Registry Key Path should be the exact path to the registry key. For example: &#39;Software\TestParentKey\TestSubKey&#39;. If the operation selected is pattern match, a basic regular expression should be used. For example: &#39;^SOFTWARE\\SampleSoftwareVendor\\SampleSoftwareProduct\\[0-9]+\.0\\Common&#39; could be used to detect the &#39;Common&#39; key in a specific version of a software product.' datatype='string' id='oval:com.mcafee.primitives:var:2008041113580002' version='1' />
    <external_variable comment='Registry Hive: The hive that the registry key belongs to. This is restricted to a specific set of values:' datatype='string' id='oval:com.mcafee.primitives:var:2008041113580001' version='2'>
      <possible_value hint='HKEY_CLASSES_ROOT'>HKEY_CLASSES_ROOT</possible_value>
      <possible_value hint='HKEY_CURRENT_CONFIG'>HKEY_CURRENT_CONFIG</possible_value>
      <possible_value hint='HKEY_CURRENT_USER'>HKEY_CURRENT_USER</possible_value>
      <possible_value hint='HKEY_LOCAL_MACHINE'>HKEY_LOCAL_MACHINE</possible_value>
      <possible_value hint='HKEY_USERS'>HKEY_USERS</possible_value>
    </external_variable>
    <external_variable comment='optional:The file system preserves and enforces ACLs. For example, NTFS preserves and enforces ACLs, and FAT does not.' datatype='boolean' id='oval:com.mcafee.primitives:var:200802071420' version='0'>
      <possible_value hint='True. The file system does preserve and enforce ACLs.'>true</possible_value>
      <possible_value hint='False. The file system does not preserve and enforce ACLs.'>false</possible_value>
    </external_variable>
    <external_variable comment="optional:User Read" datatype="boolean" id="oval:com.mcafee.primitives:var:200802071001" version="3">
      <possible_value hint="If the user has the specified permissions">1</possible_value>
      <possible_value hint="If the user does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment='The version of the patch' datatype='int' id='oval:com.mcafee.primitives:var:200802070001' version='1' />
    <external_variable comment="optional:Grants the right to change folder attributes." datatype="boolean" id="oval:com.mcafee.primitives:var:200802060548" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to read folder attributes." datatype="boolean" id="oval:com.mcafee.primitives:var:200802060547" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Right to delete a directory and all the files it contains (its children), even if the folders are read-only." datatype="boolean" id="oval:com.mcafee.primitives:var:200802060546" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to execute a folder." datatype="boolean" id="oval:com.mcafee.primitives:var:200802060545" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to append data to the folder." datatype="boolean" id="oval:com.mcafee.primitives:var:200802060544" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to write data to the folder." datatype="boolean" id="oval:com.mcafee.primitives:var:200802060543" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to read data from the folder." datatype="boolean" id="oval:com.mcafee.primitives:var:200802060542" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="The absolute path to a folder to be validated, excluding the filename." datatype="string" id="oval:com.mcafee.primitives:var:200802060541" version="1" />
    <external_variable comment='optional:Grants the right to change folder attributes.' datatype='string' id='oval:com.mcafee.primitives:var:200802060532' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to read folder attributes.' datatype='string' id='oval:com.mcafee.primitives:var:200802060531' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Right to delete a directory and all the files it contains (its children), even if the folders are read-only.' datatype='string' id='oval:com.mcafee.primitives:var:200802060530' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to execute a folder.' datatype='string' id='oval:com.mcafee.primitives:var:200802060529' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to append data to the folder.' datatype='string' id='oval:com.mcafee.primitives:var:200802060528' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to write data to the folder.' datatype='string' id='oval:com.mcafee.primitives:var:200802060527' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to read data from the folder.' datatype='string' id='oval:com.mcafee.primitives:var:200802060526' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='The absolute path to a folder to be validated.' datatype='string' id='oval:com.mcafee.primitives:var:200802060525' version='1' />
    <external_variable comment="optional:Size: The expected size of the file in bytes." datatype="int" id="oval:com.mcafee.primitives:var:20080107002" version="2" />
    <external_variable comment="optional:Product Version: The expected product version to be found within the version-information structure" datatype="version" id="oval:com.mcafee.primitives:var:20080107001" version="2" />
    <external_variable comment='optional:The file system supports sparse files. A sparse file has an attribute that causes the I/O subsystem to allocate only meaningful (nonzero) data.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509999' version='0'>
      <possible_value hint='True. The file system does support sparse files.'>true</possible_value>
      <possible_value hint='False. The file system does not support sparse files.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The file system supports named streams.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509961' version='0'>
      <possible_value hint='True. The file system does support named streams.'>true</possible_value>
      <possible_value hint='False. The file system does not support named streams.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The name of the volume.' datatype='string' id='oval:com.mcafee.primitives:var:20071509912' version='0' />
    <external_variable comment='optional:The file system preserves the case of file names when it places a name on disk.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509869' version='0'>
      <possible_value hint='True. The file system does preserve the case of file names when it places a name on disk.'>true</possible_value>
      <possible_value hint='False. The file system does not preserve the case of file names when it places a name on disk.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The specified volume is read-only. This flag was added in Windows XP.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509845' version='0'>
      <possible_value hint='True. The file system is read-only.'>true</possible_value>
      <possible_value hint='False. The file system is not read-only.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The maximum length of a file name component that a specified file system supports. A file name component is the portion of a file name between backslashes.' datatype='int' id='oval:com.mcafee.primitives:var:20071509837' version='0' />
    <external_variable comment='optional:Switch to the secure desktop when prompting for elevation.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509809' version='0'>
      <possible_value hint='Enabled.'>true</possible_value>
      <possible_value hint='Disabled.'>false</possible_value>
    </external_variable>
    <external_variable comment='WMI Namespace: Specifies which WMI namespace to query. Each WMI provider normally registers its own WMI namespace and all of the classes within that namespace.' datatype='string' id='oval:com.mcafee.primitives:var:20071509787' version='1' />
    <external_variable comment='optional:Only elevate UIAccess applications that are installed in secure locations.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509771' version='0'>
      <possible_value hint='Enabled.'>true</possible_value>
      <possible_value hint='Disabled.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:Query Result: The expected result of the specified WQL statement against which to compare the actual result. Only one comparable field is allowed.' datatype='string' id='oval:com.mcafee.primitives:var:20071509731' version='1' />
    <external_variable comment='WQL Query: A WQL query used to identify the object(s) to test against. Any valid WQL query is usable with one exception, at most one field is allowed in the SELECT portion of the query.' datatype='string' id='oval:com.mcafee.primitives:var:20071509727' version='1' />
    <external_variable comment='optional:Expected state of the user account (Enabled or Disabled).' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509649' version='0'>
      <possible_value hint='Enabled'>true</possible_value>
      <possible_value hint='Disabled'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The specified volume supports remote storage.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509603' version='0'>
      <possible_value hint='True. The file system does support remote storage.'>true</possible_value>
      <possible_value hint='False. The file system does not support remote storage.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The file system supports file-based compression.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509601' version='0'>
      <possible_value hint='True. The file system does support file-based compression.'>true</possible_value>
      <possible_value hint='False. The file system does not support file-based compression.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The file system supports object identifiers.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509580' version='0'>
      <possible_value hint='True. The file system does support object identifiers.'>true</possible_value>
      <possible_value hint='False. The file system does not support object identifiers.'>false</possible_value>
    </external_variable>
    <external_variable comment="Which user would you like to check? In a domain environment, the input should be in the form 'domain\UserName'. Please note that some of the built-in accounts on the system should be completely uppercase. For example: SYSTEM, NETWORK SERVICE, LOCAL SERVICE, etc... Make sure to input your user names in the correct case for proper results." datatype="string" id="oval:com.mcafee.primitives:var:20071509556" version="1" />
    <external_variable comment='optional:The file system supports Unicode in file names as they appear on disk.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509546' version='0'>
      <possible_value hint='True. The file system does support Unicode in the file names.'>true</possible_value>
      <possible_value hint='False. The file system does not support Unicode in the file names.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The volume serial number.' datatype='int' id='oval:com.mcafee.primitives:var:20071509474' version='0' />
    <external_variable comment='optional:The file system supports disk quotas.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509469' version='0'>
      <possible_value hint='True. The file system does support disk quotas.'>true</possible_value>
      <possible_value hint='False. The file system does not support disk quotas.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The filesystem on the specified drive. For example FAT or NTFS.' datatype='string' id='oval:com.mcafee.primitives:var:20071509458' version='0' />
    <external_variable comment='optional:Virtualize file and registry write failures to per-user locations.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509450' version='0'>
      <possible_value hint='Enabled.'>true</possible_value>
      <possible_value hint='Disabled.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The file system supports reparse points.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509449' version='0'>
      <possible_value hint='True. The file system does support reparse points.'>true</possible_value>
      <possible_value hint='False. The file system does not support reparse points.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The file system supports case-sensitive file names.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509397' version='0'>
      <possible_value hint='True. The file system does support case-sensitivity for file names.'>true</possible_value>
      <possible_value hint='False. The file system does not support case-sensitivity for file names.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:The file system supports the Encrypted File System (EFS).' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509290' version='0'>
      <possible_value hint='True. The file system does support the Encrypted File System (EFS).'>true</possible_value>
      <possible_value hint='False. The file system does not support the Encrypted File System (EFS).'>false</possible_value>
    </external_variable>
    <external_variable comment='The root directory of the volume to be described. A trailing backslash is required. For example, you would specify \\MyServer\MyShare as \\MyServer\MyShare\ or the C drive as C:\.' datatype='string' id='oval:com.mcafee.primitives:var:20071509218' version='0' />
    <external_variable comment="optional:An expected group to which the user should belong. In a domain environment, the input should be in the form 'domain\GroupName'. Please note that most of the groups on the system should be mixed case. For example: Administrators, Power Users, Remote Desktop Users, etc... Make sure to input your group names in the correct case for proper results." datatype="string" id="oval:com.mcafee.primitives:var:20071509217" version="1" />
    <external_variable comment='optional:The specified volume is a compressed volume; for example, a DoubleSpace volume.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509174' version='0'>
      <possible_value hint='True. The file system is a compressed volume.'>true</possible_value>
      <possible_value hint='False. The file system is not a compressed volume.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:Run all administrators in Admin Approval Mode.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071509120' version='0'>
      <possible_value hint='Enabled.'>true</possible_value>
      <possible_value hint='Disabled.'>false</possible_value>
    </external_variable>
    <external_variable comment="Which user or group would you like to check? In a domain environment, the input should be in the form 'domain\UserName'. Please note that some of the built-in accounts on the system should be completely uppercase. For example: SYSTEM, NETWORK SERVICE, LOCAL SERVICE, etc... Make sure to input your user or group names in the correct case for proper results." datatype="string" id="oval:com.mcafee.primitives:var:20071508776" version="1" />
    <external_variable comment="optional:The expected domain of the named user or group." datatype="string" id="oval:com.mcafee.primitives:var:20071508651" version="1" />
    <external_variable comment='optional:The type of the shared resource.' datatype='string' id='oval:com.mcafee.primitives:var:20071508636' version='0'>
      <possible_value hint='The expected type of the shared resource is a disk drive.'>STYPE_DISKTREE</possible_value>
      <possible_value hint='The expected type of the shared resource is a print queue.'>STYPE_PRINTQ</possible_value>
      <possible_value hint='The expected type of the shared resource is a communication device.'>STYPE_DEVICE</possible_value>
      <possible_value hint='The expected type of the shared resource is an interprocess communication.'>STYPE_IPC</possible_value>
      <possible_value hint='The expected type of the shared resource is a special share reserved for interprocess communication (IPC$) or remote administration of the server (ADMIN$). Can also refer to administrative shares such as C$, D$, E$, and so forth.'>STYPE_SPECIAL</possible_value>
      <possible_value hint='The expected type of the shared resource is a temporary share.'>STYPE_TEMPORARY</possible_value>
    </external_variable>
    <external_variable comment='optional:The expected maximum number of concurrent connections that the shared resource can accommodate.' datatype='int' id='oval:com.mcafee.primitives:var:20071508596' version='0' />
    <external_variable comment='optional:Only elevate executables that are signed and validated.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071508498' version='0'>
      <possible_value hint='Enabled.'>true</possible_value>
      <possible_value hint='Disabled.'>false</possible_value>
    </external_variable>
    <external_variable comment="optional:The expected security identifier (SID) of the named user or group." datatype="string" id="oval:com.mcafee.primitives:var:20071508484" version="1" />
    <external_variable comment='optional:Behavior of the elevation prompt for administrators in Admin Approval Mode.' datatype='string' id='oval:com.mcafee.primitives:var:20071508441' version='0'>
      <possible_value hint='Elevate without prompting.'>0</possible_value>
      <possible_value hint='Prompt for Credentials.'>1</possible_value>
      <possible_value hint='Prompt for Consent.'>2</possible_value>
    </external_variable>
    <external_variable comment='optional:Admin Approval Mode for the Built-in Administrator account.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071508367' version='0'>
      <possible_value hint='True. UAC is enabled.'>true</possible_value>
      <possible_value hint='False. UAC is disabled.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:Detect application installations and prompt for elevation.' datatype='boolean' id='oval:com.mcafee.primitives:var:20071508305' version='0'>
      <possible_value hint='Enabled.'>true</possible_value>
      <possible_value hint='Disabled.'>false</possible_value>
    </external_variable>
    <external_variable comment='optional:Behavior of the elevation prompt for standard users.' datatype='string' id='oval:com.mcafee.primitives:var:20071508180' version='0'>
      <possible_value hint='No prompt: fail and do not start the program if it requires administrator rights.'>0</possible_value>
      <possible_value hint='Prompt for Credentials.'>1</possible_value>
    </external_variable>
    <external_variable comment='optional:The expected number of current connections to the resource.' datatype='int' id='oval:com.mcafee.primitives:var:20071508162' version='0' />
    <external_variable comment='optional:The expected local path for the shared resource.' datatype='string' id='oval:com.mcafee.primitives:var:20071508075' version='0' />
    <external_variable comment='The name associated with a particular shared resource..' datatype='string' id='oval:com.mcafee.primitives:var:20071508064' version='0' />
    <external_variable comment='optional:Registry Value Type: The expected registry type associated with the specified registry value(s).' datatype='string' id='oval:com.mcafee.primitives:var:20071507789' version='2'>
      <possible_value hint='REG_BINARY: The registry binary type (reg_binary) is used by registry values that specify binary data in any form.'>reg_binary</possible_value>
      <possible_value hint='REG_DWORD: The registry DWORD type (reg_dword) is used by registry values that specify a 32-bit number.'>reg_dword</possible_value>
      <possible_value hint='REG_EXPAND_SZ: The registry expandable string type (reg_expand_sz) is used by registry values to specify a null-terminated string that contains unexpanded references to environment variables (for example, %PATH%).'>reg_expand_sz</possible_value>
      <possible_value hint='REG_MULTI_SZ: The registry multi-string type (reg_multi_sz) is used by registry values that specify an array of null-terminated strings, terminated by two null characters.'>reg_multi_sz</possible_value>
      <possible_value hint='REG_NONE: The registry none type (reg_none) is used by registry values that have no defined value type.'>reg_none</possible_value>
      <possible_value hint='REG_QWORD: The registry QWORD type (reg_qword) is used by registry values that specify a 64-bit number.'>reg_qword</possible_value>
      <possible_value hint='REG_SZ: The registry string type (reg_sz) is used by registry values that specify a single null-terminated string.'>reg_sz</possible_value>
    </external_variable>
    <external_variable comment='Registry Key Path: The registry key to be tested. Note that the hive portion of the string should not be included, as this data should be selected in the hive parameter. If the operation selected is equals, the Registry Key Path should be the exact path to the registry key. For example: &#39;Software\TestParentKey\TestSubKey&#39;. If the operation selected is pattern match, a basic regular expression should be used. For example: &#39;^SOFTWARE\\SampleSoftwareVendor\\SampleSoftwareProduct\\[0-9]+\.0\\Common&#39; could be used to detect the &#39;Common&#39; key in a specific version of a software product.' datatype='string' id='oval:com.mcafee.primitives:var:20071507559' version='1' />
    <external_variable comment='Registry Value Name: The name of a registry value within the specified registry key.' datatype='string' id='oval:com.mcafee.primitives:var:20071507140' version='2' />
    <external_variable comment='optional:Registry Value Data: The expected registry value&#39;s data for the registry key(s) specified in the check.' datatype='string' id='oval:com.mcafee.primitives:var:20071507057' version='1' />
    <external_variable comment='Registry Hive: The hive that the registry key belongs to. This is restricted to a specific set of values:' datatype='string' id='oval:com.mcafee.primitives:var:20071507020' version='2'>
      <possible_value hint='HKEY_CLASSES_ROOT'>HKEY_CLASSES_ROOT</possible_value>
      <possible_value hint='HKEY_CURRENT_CONFIG'>HKEY_CURRENT_CONFIG</possible_value>
      <possible_value hint='HKEY_CURRENT_USER'>HKEY_CURRENT_USER</possible_value>
      <possible_value hint='HKEY_LOCAL_MACHINE'>HKEY_LOCAL_MACHINE</possible_value>
      <possible_value hint='HKEY_USERS'>HKEY_USERS</possible_value>
    </external_variable>
    <external_variable comment="optional:Can use the printer." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506976" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment='The name of the printer.' datatype='string' id='oval:com.mcafee.primitives:var:20071506966' version='0' />
    <external_variable comment="optional:The right to modify the Discretionary Access Control List (DACL) in the object's security descriptor." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506945" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment='The number assigned to the local listening port.' datatype='int' id='oval:com.mcafee.primitives:var:20071506939' version='0' />
    <external_variable comment='The command line used to start the process including the file executed and the arguments.' datatype='string' id='oval:com.mcafee.primitives:var:20071506925' version='0' />
    <external_variable comment='The local IP address the listening port is bound to.' datatype='string' id='oval:com.mcafee.primitives:var:20071506922' version='0' />
    <external_variable comment="optional:Can read printer jobs." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506917" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Execute access." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506754" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can administer printer jobs." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506739" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment='optional:The full path to the file that is called to start the process.' datatype='string' id='oval:com.mcafee.primitives:var:20071506681' version='0' />
    <external_variable comment='optional:The current directory path for the process (e.g. C:\WINDOWS).' datatype='string' id='oval:com.mcafee.primitives:var:20071506645' version='0' />
    <external_variable comment="optional:Write access." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506632" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to read the information in the object's security descriptor, not including the information in the System Access Control List (SACL)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506615" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Indicates access to a System Access Control List (SACL)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506585" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Read, write, and execute access." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506572" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to change the owner in the object's security descriptor." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506552" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The id given to the process that is associated with the specified listening port (PID)." datatype="int" id="oval:com.mcafee.primitives:var:20071506396" version="1" />
    <external_variable comment='The protocol of the listening port. It is restricted to either TCP or UDP.' datatype='string' id='oval:com.mcafee.primitives:var:20071506376' version='0'>
      <possible_value hint='Accepts the TCP protocol.'>TCP</possible_value>
      <possible_value hint='Accepts the UDP protocol.'>UDP</possible_value>
    </external_variable>
    <external_variable comment="optional:Read access." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506245" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment='The unique SID of a user, group, system, or program (such as a Windows service).' datatype='string' id='oval:com.mcafee.primitives:var:20071506230' version='0' />
    <external_variable comment='optional:The base priority of the process.' datatype='string' id='oval:com.mcafee.primitives:var:20071506181' version='0' />
    <external_variable comment='optional:The ID given to a process when it is created.' datatype='int' id='oval:com.mcafee.primitives:var:20071506174' version='0' />
    <external_variable comment='optional:The process ID of the parent process that created this process.' datatype='int' id='oval:com.mcafee.primitives:var:20071506126' version='0' />
    <external_variable comment="optional:The right to delete the object." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506106" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Can administer printer access." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506101" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Windows NT/2000: The right to use the object for synchronization. This enables a thread to wait until the object is in the signaled state. Some object types do not support this access right." datatype="boolean" id="oval:com.mcafee.primitives:var:20071506027" version="1">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Minimum password length: This security setting determines the least number of characters that a password for a user account may contain. You can set a value of between 1 and 14 characters, or you can establish that no password is required by setting the number of characters to 0." datatype="int" id="oval:com.mcafee.primitives:var:20071505824" version="1">
      <possible_restriction hint="Value must be between 0 and 14">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">14</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment='optional:The actual data of the named item under the specified metabase key.' datatype='string' id='oval:com.mcafee.primitives:var:20071505823' version='0' />
    <external_variable comment="optional:Force Logoff: This security setting determines whether to disconnect users who are connected to the local computer outside their valid logon hours." datatype="int" id="oval:com.mcafee.primitives:var:20071505816" version="1">
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">4294967295</possible_value>
    </external_variable>
    <external_variable comment='The ID of a particular object under the metabase key.' datatype='int' id='oval:com.mcafee.primitives:var:20071505734' version='0' />
    <external_variable comment="optional:Maximum password age: This security setting determines the period of time (in seconds) that a password can be used before the system requires the user to change it. One day equals 86400 seconds." datatype="int" id="oval:com.mcafee.primitives:var:20071505601" version="1" />
    <external_variable comment='optional:A DWORD that specifies the user type of the data in the metabase entry. For more information, see the METADATA_RECORD structure on Microsoft&#39;s website.' datatype='string' id='oval:com.mcafee.primitives:var:20071505585' version='0' />
    <external_variable comment="optional:Minimum password age: This security setting determines the period of time (in seconds) that a password must be used before the user can change it. Setting a value of 0 allows passwords to be changed immediately." datatype="int" id="oval:com.mcafee.primitives:var:20071505519" version="1" />
    <external_variable comment="optional:Passwords stored using reversible encryption: This security setting determines whether the operating system stores passwords using reversible encryption." datatype="boolean" id="oval:com.mcafee.primitives:var:20071505518" version="1">
      <possible_value hint="True. The Store Passwords using reversible encryption is enabled.">true</possible_value>
      <possible_value hint="False. The Store Passwords using reversible encryption is disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Password meets complexity requirements: This security setting determines whether passwords must meet complexity requirements." datatype="boolean" id="oval:com.mcafee.primitives:var:20071505445" version="1">
      <possible_value hint="True. The Password must meet complexity requirements setting is enabled.">true</possible_value>
      <possible_value hint="False. The Password must meet complexity requirements setting is disabled">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Enforce password history: This security setting determines the number of unique new passwords that have to be associated with a user account before an old password can be reused. The value must be between 0 and 24 passwords." datatype="int" id="oval:com.mcafee.primitives:var:20071505337" version="1">
      <possible_restriction hint="Value must be between 0 and 24">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">24</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="optional:Account Lockout Reset: This security setting determines the amount of time (in seconds) that must elapse after a failed logon attempt before the failed logon attempt counter is reset to 0 bad logon attempts." datatype="int" id="oval:com.mcafee.primitives:var:20071505230" version="1" />
    <external_variable comment='The metabase key to check.' datatype='string' id='oval:com.mcafee.primitives:var:20071505181' version='0' />
    <external_variable comment="optional:Account Lockout Duration: This security setting determines the amount of time (in seconds) a locked-out account remains locked out before automatically becoming unlocked." datatype="int" id="oval:com.mcafee.primitives:var:20071505165" version="1" />
    <external_variable comment='optional:The name of the specified metabase object.' datatype='string' id='oval:com.mcafee.primitives:var:20071505039' version='0' />
    <external_variable comment='optional:A DWORD that indicates the type of data in the metabase entry. For more information, see the METADATA_RECORD structure on Microsoft&#39;s website.' datatype='string' id='oval:com.mcafee.primitives:var:20071505012' version='0' />
    <external_variable comment='optional:The index that identifies the interface.' datatype='int' id='oval:com.mcafee.primitives:var:20071504986' version='0' />
    <external_variable comment='optional:The IP address of the adapter.' datatype='string' id='oval:com.mcafee.primitives:var:20071504879' version='0' />
    <external_variable comment='optional:The physical address of the adapter for this interface.' datatype='string' id='oval:com.mcafee.primitives:var:20071504864' version='0' />
    <external_variable comment='The name of an interface.' datatype='string' id='oval:com.mcafee.primitives:var:20071504827' version='0' />
    <external_variable comment="Which group would you like to check? In a domain environment, the input should be in the form 'domain\GroupName'. Please note that most of the groups on the system should be mixed case. For example: Administrators, Power Users, Remote Desktop Users, etc... Make sure to input your group names in the correct case for proper results." datatype="string" id="oval:com.mcafee.primitives:var:20071504822" version="1" />
    <external_variable comment='optional:The broadcast address. A broadcast address is typically the IP address with the host portion set to either all zeros or all ones.' datatype='string' id='oval:com.mcafee.primitives:var:20071504819' version='0' />
    <external_variable comment="optional:Which user would you like to check? In a domain environment, the input should be in the form 'domain\UserName'. Please note that some of the built-in accounts on the system should be completely UPPERCASE. For example: SYSTEM, NETWORK SERVICE, LOCAL SERVICE, etc... Make sure to input your user names in the correct case for proper results." datatype="string" id="oval:com.mcafee.primitives:var:20071504748" version="1" />
    <external_variable comment='optional:The subnet mask for the IP address.' datatype='string' id='oval:com.mcafee.primitives:var:20071504621' version='0' />
    <external_variable comment='optional:The address type or state of a specific interface.' datatype='string' id='oval:com.mcafee.primitives:var:20071504610' version='0'>
      <possible_value hint='The address is being deleted.'>MIB_IPADDR_DELETED</possible_value>
      <possible_value hint='The address is on a disconnected interface.'>MIB_IPADDR_DISCONNECTED</possible_value>
      <possible_value hint='The stated address is a dynamic IP address.'>MIB_IPADDR_DYNAMIC</possible_value>
      <possible_value hint='The stated address is a primary IP address.'>MIB_IPADDR_PRIMARY</possible_value>
      <possible_value hint='The stated address is a transient address.'>MIB_IPADDR_TRANSIENT</possible_value>
    </external_variable>
    <external_variable comment='optional:The type of interface, which is limited to one of the following values.' datatype='string' id='oval:com.mcafee.primitives:var:20071504469' version='0'>
      <possible_value hint='Ethernet'>MIB_IF_TYPE_ETHERNET</possible_value>
      <possible_value hint='FDDI'>MIB_IF_TYPE_FDDI</possible_value>
      <possible_value hint='Loopback'>MIB_IF_TYPE_LOOPBACK</possible_value>
      <possible_value hint='Other'>MIB_IF_TYPE_OTHER</possible_value>
      <possible_value hint='PPP'>MIB_IF_TYPE_PPP</possible_value>
      <possible_value hint='SLIP'>MIB_IF_TYPE_SLIP</possible_value>
      <possible_value hint='Tokenring'>MIB_IF_TYPE_TOKENRING</possible_value>
    </external_variable>
    <external_variable comment="optional:Company Name: The expected company name to be found within the version-information structure." datatype="string" id="oval:com.mcafee.primitives:var:20071503994" version="2" />
    <external_variable comment='optional:Audit logon.' datatype='string' id='oval:com.mcafee.primitives:var:20071503987' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit SAM events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503966' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit account lockout.' datatype='string' id='oval:com.mcafee.primitives:var:20071503944' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit security group management.' datatype='string' id='oval:com.mcafee.primitives:var:20071503912' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit other account logon events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503906' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit system integrity events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503905' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit filtering platform packet drops.' datatype='string' id='oval:com.mcafee.primitives:var:20071503877' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="File Path: The path to the file to be checked, excluding the filename. NOTE: You CANNOT leave this field blank. The minimum value for this variable is a backslash ( \ ). If you wish to use environment variables then this value should be the shortened path beginning with a backslash. For example: A full path of C:\Windows\System32\Drivers\ would simply be \System32\Drivers\ and you would choose System Directory for the Environment Variable." datatype="string" id="oval:com.mcafee.primitives:var:20071503876" version="4" />
    <external_variable comment="optional:Original Filename: The expected original filename to be found within the version-information structure." datatype="string" id="oval:com.mcafee.primitives:var:20071503874" version="2" />
    <external_variable comment='optional:Audit process termination.' datatype='string' id='oval:com.mcafee.primitives:var:20071503845' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit user account management.' datatype='string' id='oval:com.mcafee.primitives:var:20071503820' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit ipsec driver events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503791' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit other privilege use events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503778' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Language: The expected language to be found within the version-information structure." datatype="string" id="oval:com.mcafee.primitives:var:20071503777" version="2" />
    <external_variable comment='optional:Audit directory service replication.' datatype='string' id='oval:com.mcafee.primitives:var:20071503776' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit kerberos ticket events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503752' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit credential validation.' datatype='string' id='oval:com.mcafee.primitives:var:20071503732' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit application generated events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503716' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit other policy change events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503692' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit certification services.' datatype='string' id='oval:com.mcafee.primitives:var:20071503685' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit &#39;audit policy&#39; changes.' datatype='string' id='oval:com.mcafee.primitives:var:20071503659' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit kernel object events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503657' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit process creation.' datatype='string' id='oval:com.mcafee.primitives:var:20071503646' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit other account management events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503636' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit directory service changes.' datatype='string' id='oval:com.mcafee.primitives:var:20071503601' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit distribution group management.' datatype='string' id='oval:com.mcafee.primitives:var:20071503588' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Owner: A string specifying the expected name of the file owner." datatype="string" id="oval:com.mcafee.primitives:var:20071503587" version="2" />
    <external_variable comment='optional:Audit security state changes.' datatype='string' id='oval:com.mcafee.primitives:var:20071503582' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="File Name: The name of the file to be checked." datatype="string" id="oval:com.mcafee.primitives:var:20071503560" version="2" />
    <external_variable comment='optional:Audit computer account management.' datatype='string' id='oval:com.mcafee.primitives:var:20071503558' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Version: The expected version string of the file. The version should be the entire delimited string, e.g. &quot;5.2.0.2600&quot;" datatype="version" id="oval:com.mcafee.primitives:var:20071503531" version="2" />
    <external_variable comment='optional:Audit detailed directory service replication.' datatype='string' id='oval:com.mcafee.primitives:var:20071503512' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit application group management.' datatype='string' id='oval:com.mcafee.primitives:var:20071503504' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit filtering platform policy changes.' datatype='string' id='oval:com.mcafee.primitives:var:20071503498' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit file system.' datatype='string' id='oval:com.mcafee.primitives:var:20071503487' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit dpapi activity.' datatype='string' id='oval:com.mcafee.primitives:var:20071503465' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit ipsec extended mode.' datatype='string' id='oval:com.mcafee.primitives:var:20071503462' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit filtering platform connections.' datatype='string' id='oval:com.mcafee.primitives:var:20071503461' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit logoff.' datatype='string' id='oval:com.mcafee.primitives:var:20071503453' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:File Type: The expected type of the file object, i.e. a directory, named pipe, standard file, etc." datatype="string" id="oval:com.mcafee.primitives:var:20071503400" version="2">
      <possible_value hint="The specified path identifies a directory.">FILE_ATTRIBUTE_DIRECTORY</possible_value>
      <possible_value hint="The specified file is a character file, typically an LPT device or a console.">FILE_TYPE_CHAR</possible_value>
      <possible_value hint="The specified file is a disk file.">FILE_TYPE_DISK</possible_value>
      <possible_value hint="The specified file is a socket, a named pipe, or an anonymous pipe.">FILE_TYPE_PIPE</possible_value>
      <!--This is a valid OVAL / Windows type, but is currently unused.  It was left out of the primitives to avoid confusion-->
      <!--<possible_value hint="Unused.">FILE_TYPE_REMOTE</possible_value>-->
      <possible_value hint="Either the type of the specified file is unknown, or the function failed.">FILE_TYPE_UNKNOWN</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit other logon and logoff events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503390' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit mpssvc rule level policy changes.' datatype='string' id='oval:com.mcafee.primitives:var:20071503389' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit file share.' datatype='string' id='oval:com.mcafee.primitives:var:20071503343' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Modified: The expected time of last modification of the file. The time should be entered as a 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)." datatype="int" id="oval:com.mcafee.primitives:var:20071503311" version="2" />
    <external_variable comment='optional:Audit security system extensions.' datatype='string' id='oval:com.mcafee.primitives:var:20071503308' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Product Name: The expected product name to be found within the version-information structure." datatype="string" id="oval:com.mcafee.primitives:var:20071503285" version="2" />
    <external_variable comment='optional:Audit ipsec quick mode.' datatype='string' id='oval:com.mcafee.primitives:var:20071503276' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit authentication policy changes.' datatype='string' id='oval:com.mcafee.primitives:var:20071503265' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit sensitive privilege uses.' datatype='string' id='oval:com.mcafee.primitives:var:20071503261' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit other object access events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503254' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit RPC events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503250' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit authorization policy changes.' datatype='string' id='oval:com.mcafee.primitives:var:20071503242' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Checksum: The expected checksum of the file as supplied by the Microsoft MapFileAndCheckSum function." datatype="string" id="oval:com.mcafee.primitives:var:20071503238" version="4" />
    <external_variable comment="optional:Internal Name: The expected internal name to be found within the version-information structure." datatype="string" id="oval:com.mcafee.primitives:var:20071503235" version="2" />
    <external_variable comment='optional:Audit registry events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503234' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit other system events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503210' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit handle manipulation events.' datatype='string' id='oval:com.mcafee.primitives:var:20071503173' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Created: The expected time of creation of the file. This is valid on NTFS but not on FAT formatted disk drives. The time should be entered as a 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)." datatype="int" id="oval:com.mcafee.primitives:var:20071503157" version="2" />
    <external_variable comment="optional:Accessed: The expected last access time. This is valid on NTFS drives, but not on FAT formatted disk drives. The time should be entered as a 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)." datatype="int" id="oval:com.mcafee.primitives:var:20071503100" version="2" />
    <external_variable comment='optional:Audit non-sensitive privilege uses.' datatype='string' id='oval:com.mcafee.primitives:var:20071503085' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit special logons.' datatype='string' id='oval:com.mcafee.primitives:var:20071503070' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit ipsec main mode.' datatype='string' id='oval:com.mcafee.primitives:var:20071503067' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Audit directory service access.' datatype='string' id='oval:com.mcafee.primitives:var:20071503002' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Manage auditing and security log: The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502994" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Force shutdown from a remote system: The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502984" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Log on as a batch job: The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502963" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Replace a process-level token: The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.primitives:var:20071502926" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Act as part of the operating system: This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege. (SeTcbPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502910" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Modify firmware environment values: The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502904" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Log on locally: The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502901" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Increase scheduling priority: The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502889" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Audit privilege use: This security setting determines whether to audit each instance of a user exercising a user right." datatype="string" id="oval:com.mcafee.primitives:var:20071502876" version="3">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Value: The actual value of the specified active directory attribute.." datatype="string" id="oval:com.mcafee.primitives:var:20071502865" version="1" />
    <external_variable comment="optional:Generate security audits: The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502852" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="Which user or group would you like to check? In a domain environment, the input should be in the form 'domain\UserName'. Please note that some of the built-in accounts on the system should be completely uppercase. For example: SYSTEM, NETWORK SERVICE, LOCAL SERVICE, etc... Make sure to input your user or group names in the correct case for proper results." datatype="string" id="oval:com.mcafee.primitives:var:20071502825" version="3" />
    <external_variable comment="optional:Audit system events: This security setting determines whether to audit when a user restarts or shuts down the computer or when an event occurs that affects either the system security or the security log." datatype="string" id="oval:com.mcafee.primitives:var:20071502819" version="3">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Audit object access: This security setting determines whether to audit the event of a user accessing an object—for example, a file, folder, registry key, printer, and so forth—that has its own system access control list (SACL) specified." datatype="string" id="oval:com.mcafee.primitives:var:20071502788" version="3">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Manage the files on a volume: The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502772" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="Naming Context: The naming context should be one of the following string values: domain, configuration, and schema. These values describe the different default naming contexts found in Active Directory. A naming context is defined as a single object in the Directory Information Tree (DIT) along with every object in the tree subordinate to it." datatype="string" id="oval:com.mcafee.primitives:var:20071502763" version="1">
      <possible_value hint="Domain value.">domain</possible_value>
      <possible_value hint="Configuration value.">configuration</possible_value>
      <possible_value hint="Schema value.">schema</possible_value>
    </external_variable>
    <external_variable comment="optional:Synchronize directory service data: The right to read all objects and properties in the directory, regardless of the protection on the objects and properties (SeSyncAgentPrivilege). It is required in order to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502761" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to read unsolicited data from a terminal device (SeUnsolicitedInputPrivilege). This user right is not exposed in the Windows Local Security Policy or Group Policy MMC snap-ins. As such, there is no mapping to a UI setting." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502705" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Add workstations to domain: The right to add a computer account to a specific domain (SeMachineAccountPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502704" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Allow logon through Terminal Services: The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502703" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Audit logon events: This security setting determines whether to audit each instance of a user logging on to or logging off from a computer." datatype="string" id="oval:com.mcafee.primitives:var:20071502608" version="3">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Audit directory service access: This security setting determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified." datatype="string" id="oval:com.mcafee.primitives:var:20071502583" version="3">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Deny logon locally: Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502563" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Create a token object: The privilege to create an access token by calling NtCreateToken() or other token-creating APIs (SeCreateTokenPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502542" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Enable computer and user accounts to be trusted for delegation: The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502535" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Adjust memory quotas for a process: The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502521" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="Attribute: Specifies a specific attribute (named value) of the Active Directory object to be tested." datatype="string" id="oval:com.mcafee.primitives:var:20071502518" version="1" />
    <external_variable comment="optional:Deny logon through Terminal Services: Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502517" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Audit process tracking: This security setting determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access." datatype="string" id="oval:com.mcafee.primitives:var:20071502466" version="3">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Object Class: The name of the class of which the object is an instance." datatype="string" id="oval:com.mcafee.primitives:var:20071502457" version="1" />
    <external_variable comment="optional:Bypass traverse checking: The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502438" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Impersonate a client after authentication: The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502432" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Lock pages in memory: The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502391" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Load and unload device drivers: The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502387" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Deny access to this computer from the network: Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502384" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Adstype: The data type of the specified Active Directory object. The types are restricted to the following values that an active directory attribute can represent. For more information look at the ADSTYPEENUM enumeration defined by Microsoft." datatype="string" id="oval:com.mcafee.primitives:var:20071502369" version="1">
      <possible_value hint="The data type is invalid.">ADSTYPE_INVALID</possible_value>
      <possible_value hint="The string is of Distinguished Name (path) of a directory service object.">ADSTYPE_DN_STRING</possible_value>
      <possible_value hint="The string is of the case-sensitive type.">ADSTYPE_CASE_EXACT_STRING</possible_value>
      <possible_value hint="The string is of the case-insensitive type.">ADSTYPE_CASE_IGNORE_STRING</possible_value>
      <possible_value hint="The string is displayable on screen or in print.">ADSTYPE_PRINTABLE_STRING</possible_value>
      <possible_value hint="The string is of a numeral to be interpreted as text.">ADSTYPE_NUMERIC_STRING</possible_value>
      <possible_value hint="The data is of a Boolean value.">ADSTYPE_BOOLEAN</possible_value>
      <possible_value hint="The data is of an integer value.">ADSTYPE_INTEGER</possible_value>
      <possible_value hint="The string is of a byte array.">ADSTYPE_OCTET_STRING</possible_value>
      <possible_value hint="The data is of the universal time as expressed in Universal Time Coordinate (UTC).">ADSTYPE_UTC_TIME</possible_value>
      <possible_value hint="The data is of a long integer value.">ADSTYPE_LARGE_INTEGER</possible_value>
      <possible_value hint="The string is of a provider-specific string.">ADSTYPE_PROV_SPECIFIC</possible_value>
      <possible_value hint="Not used.">ADSTYPE_OBJECT_CLASS</possible_value>
      <possible_value hint="The data is of a list of case insensitive strings.">ADSTYPE_CASEIGNORE_LIST</possible_value>
      <possible_value hint="The data is of a list of octet strings.">ADSTYPE_OCTET_LIST</possible_value>
      <possible_value hint="The string is of a directory path.">ADSTYPE_PATH</possible_value>
      <possible_value hint="The string is of the postal address type.">ADSTYPE_POSTALADDRESS</possible_value>
      <possible_value hint="The data is of a time stamp in seconds.">ADSTYPE_TIMESTAMP</possible_value>
      <possible_value hint="The string is of a back link.">ADSTYPE_BACKLINK</possible_value>
      <possible_value hint="The string is of a typed name.">ADSTYPE_TYPEDNAME</possible_value>
      <possible_value hint="The data is of the Hold data structure.">ADSTYPE_HOLD</possible_value>
      <possible_value hint="The string is of a net address.">ADSTYPE_NETADDRESS</possible_value>
      <possible_value hint="The data is of a replica pointer.">ADSTYPE_REPLICAPOINTER</possible_value>
      <possible_value hint="The string is of a fax number.">ADSTYPE_FAXNUMBER</possible_value>
      <possible_value hint="The data is of an e-mail message.">ADSTYPE_EMAIL</possible_value>
      <possible_value hint="The data is of Windows NT/Windows 2000 security descriptor as represented by a byte array.">ADSTYPE_NT_SECURITY_DESCRIPTOR</possible_value>
      <possible_value hint="The data is of an undefined type.">ADSTYPE_UNKNOWN</possible_value>
      <possible_value hint="The data is of ADS_DN_WITH_BINARY used for mapping a distinguished name to a non varying GUID.">ADSTYPE_DN_WITH_BINARY</possible_value>
      <possible_value hint="The data is of ADS_DN_WITH_STRING used for mapping a distinguished name to a non-varying string value.">ADSTYPE_DN_WITH_STRING</possible_value>
    </external_variable>
    <external_variable comment="optional:Audit account management: This security setting determines whether to audit each event of account management on a computer. Examples of account management events include: A user account or group is created, changed, or deleted. A user account is renamed, disabled, or enabled. A password is set or changed." datatype="string" id="oval:com.mcafee.primitives:var:20071502356" version="3">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502352" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Log on as a service: The right to log on using the service logon type (SeServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502348" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Remove computer from docking station: The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502342" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Take ownership of files or other objects: The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502339" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Back up files and directories: The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502234" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Change the system time: The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502226" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Shut down the system: The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502222" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Deny logon as a batch job: Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502167" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="Relative DN: This field is used to uniquely identify an object inside the specified naming context. It should contain all the parts of the objects Distinguished Name except those outlined by the naming context." datatype="string" id="oval:com.mcafee.primitives:var:20071502152" version="1" />
    <external_variable comment="optional:Debug programs: The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components (SeDebugPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502136" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Create global objects: The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502130" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Access this computer from the network: The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502124" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Create permanent shared objects: The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502096" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Profile single process: The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502074" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Deny logon as a Service: Explicitly denies the right to log on using the service logon type (SeDenyServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502055" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Create a pagefile: The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:20071502034" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Audit account logon events: This security setting determines whether to audit each instance of a user logging on to or logging off from another computer in which this computer is used to validate the account." datatype="string" id="oval:com.mcafee.primitives:var:20071502033" version="3">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:Audit policy change: This security setting determines whether to audit every incident of a change to user rights assignment policies, audit policies, or trust policies." datatype="string" id="oval:com.mcafee.primitives:var:20071502028" version="3">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="optional:This specifies whether the service should be started at the specified runlevel" datatype="boolean" id="oval:com.mcafee.primitives:var:20071430952" version="3" />
    <external_variable comment="optional:This specifies whether the service should be killed at the specified runlevel" datatype="boolean" id="oval:com.mcafee.primitives:var:20071430879" version="3" />
    <external_variable comment="optional:The exp_inact entity describes how many days of account inactivity the system will wait after a password expires before locking the account" datatype="int" id="oval:com.mcafee.primitives:var:20071430870" version="3" />
    <external_variable comment="optional:This specifies how often in days a user may change their password" datatype="int" id="oval:com.mcafee.primitives:var:20071430846" version="3" />
    <external_variable comment="This is the name of the user being checked" datatype="string" id="oval:com.mcafee.primitives:var:20071430714" version="3" />
    <external_variable comment="optional:This describes how long a user can keep a password before the system forces her to change it" datatype="int" id="oval:com.mcafee.primitives:var:20071430681" version="3" />
    <external_variable comment="optional:This is the time of day in which the process was started in either HH:MM:SS or days" datatype="string" id="oval:com.mcafee.primitives:var:20071430643" version="2" />
    <external_variable comment="optional:This describes how long before password expiration the system begins warning the user" datatype="int" id="oval:com.mcafee.primitives:var:20071430538" version="3" />
    <external_variable comment="optional:This speicifies when will the account's password expire, in days since 1/1/1970" datatype="int" id="oval:com.mcafee.primitives:var:20071430515" version="3" />
    <external_variable comment="optional:The numeric user id, or uid, is the third column of each user's entry in /etc/passwd. It represents the owner, and thus privilege level, of the specified program" datatype="int" id="oval:com.mcafee.primitives:var:20071430475" version="3" />
    <external_variable comment="optional:This is the process ID of the process's parent process" datatype="int" id="oval:com.mcafee.primitives:var:20071430407" version="2" />
    <external_variable comment="optional:This is the TTY on which the process was started, if applicable" datatype="string" id="oval:com.mcafee.primitives:var:20071430374" version="2" />
    <external_variable comment="This is the name of the service that is being checked." datatype="string" id="oval:com.mcafee.primitives:var:20071430276" version="2" />
    <external_variable comment="optional:The scheduling class of the process. RT (real-time), TS (timeshare), B (batch), BC (batch critical), WL (weightless) and GN (gang scheduled)." datatype="string" id="oval:com.mcafee.primitives:var:20071430202" version="2" />
    <external_variable comment="optional:This is the date of the last password change in days since 1/1/1970" datatype="int" id="oval:com.mcafee.primitives:var:20071430192" version="3" />
    <external_variable comment="optional:This is the encrypted version of the user's password" datatype="string" id="oval:com.mcafee.primitives:var:20071430182" version="3" />
    <external_variable comment="optional:This is the scheduling priority with which the process runs." datatype="int" id="oval:com.mcafee.primitives:var:20071430110" version="4" />
    <external_variable comment="This is the runlevel of the service that is being checked." datatype="string" id="oval:com.mcafee.primitives:var:20071430095" version="2" />
    <external_variable comment="optional:This is the network mask of the interface. ie '255.255.255.0'" datatype="string" id="oval:com.mcafee.primitives:var:20071429995" version="2" />
    <external_variable comment="optionalText string value for configuration item" datatype="string" id="oval:com.mcafee.primitives:var:20071429978" version="2" />
    <external_variable comment="optional:This is the internet address or 'ip address' of the interface. ie '192.168.0.1'" datatype="string" id="oval:com.mcafee.primitives:var:20071429831" version="2" />
    <external_variable comment="RegEx?" datatype="string" id="oval:com.mcafee.primitives:var:20071429828" version="2" />
    <external_variable comment="optional:This is the numeric gid for the account. The fourth field in the passwd file entry'" datatype="int" id="oval:com.mcafee.primitives:var:20071429800" version="4" />
    <external_variable comment="optional:This is the flags on the interface. ie '1000843 UP,BROADCAST,RUNNING,MULTICAST,IPv4 mtu 1500 index 2 '" datatype="string" id="oval:com.mcafee.primitives:var:20071429773" version="2" />
    <external_variable comment="This is the users login name'. The first field in the passwd file entry" datatype="string" id="oval:com.mcafee.primitives:var:20071429720" version="2" />
    <external_variable comment="optional:This is the broadcast address of the interface. ie '192.168.0.255'" datatype="string" id="oval:com.mcafee.primitives:var:20071429697" version="2" />
    <external_variable comment="Path?" datatype="string" id="oval:com.mcafee.primitives:var:20071429675" version="2" />
    <external_variable comment="optional:This is the user login shell. One example is /sbin/sh. The seventh field in the passwd file entry." datatype="string" id="oval:com.mcafee.primitives:var:20071429638" version="3" />
    <external_variable comment="This is the name of the interface. ie 'eri0'" datatype="string" id="oval:com.mcafee.primitives:var:20071429463" version="2" />
    <external_variable comment="optional:This is the user home directory. Often /home/$username. The sixth field in the passwd file entry." datatype="string" id="oval:com.mcafee.primitives:var:20071429456" version="3" />
    <external_variable comment="optional:This is the user password. The second field in the password file'" datatype="string" id="oval:com.mcafee.primitives:var:20071429389" version="3" />
    <external_variable comment="optional:This is the numeric uid for the account. The third field in the passwd file entry'" datatype="int" id="oval:com.mcafee.primitives:var:20071429280" version="4" />
    <external_variable comment="optional:This is the gcos (General Electric Comprehensive Operating System) for the account. This field is optional and only used for informational purposes. Usually, it contains the full user name. The fifth field in the passwd file entry'" datatype="string" id="oval:com.mcafee.primitives:var:20071429110" version="3" />
    <external_variable comment="optional:This is the process ID of the process" datatype="int" id="oval:com.mcafee.primitives:var:20071429074" version="2" />
    <external_variable comment="optional:This is the amount of CPU time (not clock time) that the process has consumed, formatted in HH:MM:SS or days" datatype="string" id="oval:com.mcafee.primitives:var:20071429023" version="2" />
    <external_variable comment="Filename?" datatype="string" id="oval:com.mcafee.primitives:var:20071429018" version="2" />
    <external_variable comment="optional:This is the hardware address or 'mac address' of the interface. ie '00-0D-60-D2-80-90'" datatype="string" id="oval:com.mcafee.primitives:var:20071429000" version="2" />
    <external_variable comment="Minimum password characters (Numeric value)" datatype="int" id="oval:com.mcafee.primitives:var:20071428993" version="2" />
    <external_variable comment="optional:The numeric user id, or uid, is the third column of each user's entry in /etc/passwd. It represents the owner, and thus privilege level, of the specified program." datatype="int" id="oval:com.mcafee.primitives:var:20071428985" version="3" />
    <external_variable comment="FILENAME?" datatype="string" id="oval:com.mcafee.primitives:var:20071428910" version="4" />
    <external_variable comment="This is the TCP or UDP port on which an application would listen. Note that this is not a list -- if a program listens on multiple ports, or on a combination of TCP and UDP, each will be represented by its own object." datatype="int" id="oval:com.mcafee.primitives:var:20071428883" version="4" />
    <external_variable comment="optional:The pid is the process ID of a specific process." datatype="int" id="oval:com.mcafee.primitives:var:20071428782" version="3" />
    <external_variable comment="Numeric value for configuration item" datatype="int" id="oval:com.mcafee.primitives:var:20071428766" version="4" />
    <external_variable comment="optional:The category of the package" datatype="string" id="oval:com.mcafee.primitives:var:20071428731" version="2" />
    <external_variable comment="optional:The description of the package" datatype="string" id="oval:com.mcafee.primitives:var:20071428623" version="2" />
    <external_variable comment="optional:This is the IP address with which the program is communicating, or with which it will communicate, in the case of a listening server." datatype="string" id="oval:com.mcafee.primitives:var:20071428516" version="2" />
    <external_variable comment="This is the IP address of the network interface on which an application listens." datatype="string" id="oval:com.mcafee.primitives:var:20071428507" version="3" />
    <external_variable comment="RegEx of target line in file?" datatype="string" id="oval:com.mcafee.primitives:var:20071428500" version="4" />
    <external_variable comment="optional:The name of the native instruction set used by portable applications supported by the current version of the operating system." datatype="string" id="oval:com.mcafee.primitives:var:20071428472" version="2" />
    <external_variable comment="PATH?" datatype="string" id="oval:com.mcafee.primitives:var:20071428451" version="4" />
    <external_variable comment="optional:The vendor supplying the package" datatype="string" id="oval:com.mcafee.primitives:var:20071428422" version="2" />
    <external_variable comment='Each subexpression in the regular expression of the line element is then tested against the value specified in the subexpression element.' datatype='string' id='oval:com.mcafee.primitives:var:20071428385' version='0' />
    <external_variable comment="optional:The name of the instruction set(s) used by the operating system kernel components such as device drivers and STREAMS modules." datatype="string" id="oval:com.mcafee.primitives:var:20071428275" version="2" />
    <external_variable comment="optional:The version of the package" datatype="string" id="oval:com.mcafee.primitives:var:20071428265" version="2" />
    <external_variable comment="optional:This is the TCP or UDP port to which the program communicates. In the case of a listening program accepting new connections, this is usually a *." datatype="int" id="oval:com.mcafee.primitives:var:20071428226" version="3" />
    <external_variable comment="The protocol entity defines a certain transport-layer protocol, in lowercase: tcp or udp." datatype="string" id="oval:com.mcafee.primitives:var:20071428121" version="3">
      <possible_value hint="tcp">tcp</possible_value>
      <possible_value hint="udp">udp</possible_value>
    </external_variable>
    <external_variable comment='The base name of the patch' datatype='int' id='oval:com.mcafee.primitives:var:20071428103' version='1' />
    <external_variable comment="optional:This is the name of the communicating program." datatype="string" id="oval:com.mcafee.primitives:var:20071428068" version="2" />
    <external_variable comment='The line element represents a line in the file that was collected.' datatype='string' id='oval:com.mcafee.primitives:var:20071428032' version='0' />
    <external_variable comment="Path to file without filename" datatype="string" id="oval:com.mcafee.primitives:var:20071427982" version="2" />
    <external_variable comment="The filename element specifies the name of the file for which hash needs to be verified." datatype="string" id="oval:com.mcafee.primitives:var:20071427977" version="2" />
    <external_variable comment="optional:The md5 element is the md5 hash of the file." datatype="string" id="oval:com.mcafee.primitives:var:20071427931" version="1" />
    <external_variable comment="optional: Should the SGID bit be set?" datatype="boolean" id="oval:com.mcafee.primitives:var:20071427714" version="3">
      <possible_value hint="Yes">true</possible_value>
      <possible_value hint="No">false</possible_value>
    </external_variable>
    <external_variable comment='Specifies the absolute path to a file on the machine.' datatype='string' id='oval:com.mcafee.primitives:var:20071427627' version='0' />
    <external_variable comment="optional:The sha1 element is the sha1 hash of the file." datatype="string" id="oval:com.mcafee.primitives:var:20071427536" version="1" />
    <external_variable comment='Specifies an Xpath expression describing the nodes to look at. The only valid operator for xpath is equals since there is an infinite number of possible xpaths and determinining all those that do not equal a give xpath would be impossible.' datatype='string' id='oval:com.mcafee.primitives:var:20071427519' version='0' />
    <external_variable comment="optional:User Write" datatype="boolean" id="oval:com.mcafee.primitives:var:20071427512" version="2">
      <possible_value hint="If the user has the specified permissions">1</possible_value>
      <possible_value hint="If the user does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment="optional:Group Read" datatype="boolean" id="oval:com.mcafee.primitives:var:20071427444" version="2">
      <possible_value hint="If the user has the specified permissions">1</possible_value>
      <possible_value hint="If the user does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment="Path to File" datatype="string" id="oval:com.mcafee.primitives:var:20071427437" version="1" />
    <external_variable comment="The path element specifies the absolute path to a file on the machine." datatype="string" id="oval:com.mcafee.primitives:var:20071427434" version="1" />
    <external_variable comment="Filename" datatype="string" id="oval:com.mcafee.primitives:var:20071427431" version="1" />
    <external_variable comment="Filename without path" datatype="string" id="oval:com.mcafee.primitives:var:20071427333" version="1" />
    <external_variable comment="Path to File" datatype="string" id="oval:com.mcafee.primitives:var:20071427325" version="1" />
    <external_variable comment="optional:Group Write" datatype="boolean" id="oval:com.mcafee.primitives:var:20071427310" version="2">
      <possible_value hint="If the user has the specified permissions">1</possible_value>
      <possible_value hint="If the user does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment="optional: Should the SUID bit be set?" datatype="boolean" id="oval:com.mcafee.primitives:var:20071427301" version="3">
      <possible_value hint="Yes">true</possible_value>
      <possible_value hint="No">false</possible_value>
    </external_variable>
    <external_variable comment='The filename element specifies the name of the file.' datatype='string' id='oval:com.mcafee.primitives:var:20071427290' version='0' />
    <external_variable comment="optional:User Execute" datatype="boolean" id="oval:com.mcafee.primitives:var:20071427208" version="2">
      <possible_value hint="If the user has the specified permissions">1</possible_value>
      <possible_value hint="If the user does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment="optional:Group Execute" datatype="boolean" id="oval:com.mcafee.primitives:var:20071427193" version="2">
      <possible_value hint="If the user has the specified permissions">1</possible_value>
      <possible_value hint="If the user does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment="Group Ownership" datatype="int" id="oval:com.mcafee.primitives:var:20071427188" version="3" />
    <external_variable comment="Owner" datatype="int" id="oval:com.mcafee.primitives:var:20071427164" version="3" />
    <external_variable comment="Filename" datatype="string" id="oval:com.mcafee.primitives:var:20071427023" version="1" />
    <external_variable comment='The actual value of the specified environment variable.' datatype='string' id='oval:com.mcafee.primitives:var:20071426858' version='0' />
    <external_variable comment='This element describes the name of an environment variable.' datatype='string' id='oval:com.mcafee.primitives:var:20071426204' version='0' />
    <external_variable comment="optional:The right to create links." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061419" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Notify access." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061418" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to enumerate registry sub keys." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061417" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to create a registry sub key." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061416" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to set registry value." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061415" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to query a registry value." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061414" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Read, write, and execute access." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061413" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Execute access." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061412" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Write access." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061411" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Read access." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061410" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Indicates access to a system access control list (SACL)." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061409" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Windows NT/2000: The right to use the object for synchronization. This enables a thread to wait until the object is in the signaled state. Some object types do not support this access right." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061408" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to change the owner in the object's security descriptor." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061407" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to modify the Discretionary Access Control List (DACL) in the object's security descriptor." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061406" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to read the information in the object's security descriptor, not including the information in the System Access Control List (SACL)." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061405" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to delete the object." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061404" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="The unique sid for the user, group, system, or program (such as a Windows service).." datatype="string" id="oval:com.mcafee.primitives:var:200711061403" version="1" />
    <external_variable comment="This element specifies a registry key on the machine from which to retrieve the effective permissions. Note that the hive portion of the string should not be included, as this data should be selected in the hive parameter." datatype="string" id="oval:com.mcafee.primitives:var:200711061402" version="1" />
    <external_variable comment="The hive of a registry key on the machine from which to retrieve the effective permissions." datatype="string" id="oval:com.mcafee.primitives:var:200711061401" version="1">
      <possible_value hint="Classes Root Key">HKEY_CLASSES_ROOT</possible_value>
      <possible_value hint="Current Config Key">HKEY_CURRENT_CONFIG</possible_value>
      <possible_value hint="Current User Key">HKEY_CURRENT_USER</possible_value>
      <possible_value hint="Local Machine Key">HKEY_LOCAL_MACHINE</possible_value>
      <possible_value hint="Users Key">HKEY_USERS</possible_value>
    </external_variable>
    <external_variable comment='optional:Create a link.' datatype='string' id='oval:com.mcafee.primitives:var:200711061319' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Notify.' datatype='string' id='oval:com.mcafee.primitives:var:200711061318' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Enumerate sub keys.' datatype='string' id='oval:com.mcafee.primitives:var:200711061317' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Create a sub key.' datatype='string' id='oval:com.mcafee.primitives:var:200711061316' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Set registry value.' datatype='string' id='oval:com.mcafee.primitives:var:200711061315' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Query registry value.' datatype='string' id='oval:com.mcafee.primitives:var:200711061314' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Read, write, and execute access.' datatype='string' id='oval:com.mcafee.primitives:var:200711061313' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Execute access.' datatype='string' id='oval:com.mcafee.primitives:var:200711061312' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Write access.' datatype='string' id='oval:com.mcafee.primitives:var:200711061311' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Read access.' datatype='string' id='oval:com.mcafee.primitives:var:200711061310' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Indicates access to a system access control list (SACL).' datatype='string' id='oval:com.mcafee.primitives:var:200711061309' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Windows NT/2000: The right to use the object for synchronization. This enables a thread to wait until the object is in the signaled state. Some object types do not support this access right.' datatype='string' id='oval:com.mcafee.primitives:var:200711061308' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:The right to change the owner in the object&#39;s security descriptor.' datatype='string' id='oval:com.mcafee.primitives:var:200711061307' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:The right to modify the DACL in the object&#39;s security descriptor.' datatype='string' id='oval:com.mcafee.primitives:var:200711061306' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:The right to read the information in the object&#39;s security descriptor, not including the information in the SACL.' datatype='string' id='oval:com.mcafee.primitives:var:200711061305' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:The right to delete the object.' datatype='string' id='oval:com.mcafee.primitives:var:200711061304' version='0'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='The unique sid of a user, group, system, or program (such as a Windows service).' datatype='string' id='oval:com.mcafee.primitives:var:200711061303' version='0' />
    <external_variable comment='The registry key on the machine from which to retrieve the Audit Permissions (SACL). Note that the hive portion of the string should not be included, as this data should be selected in the hive parameter.' datatype='string' id='oval:com.mcafee.primitives:var:200711061302' version='0' />
    <external_variable comment='The hive of a registry key on the machine from which to retrieve the Audit Permissions (SACL).' datatype='string' id='oval:com.mcafee.primitives:var:200711061301' version='0'>
      <possible_value hint='Classes Root Key'>HKEY_CLASSES_ROOT</possible_value>
      <possible_value hint='Current Config Key'>HKEY_CURRENT_CONFIG</possible_value>
      <possible_value hint='Current User Key'>HKEY_CURRENT_USER</possible_value>
      <possible_value hint='Local Machine Key'>HKEY_LOCAL_MACHINE</possible_value>
      <possible_value hint='Users Key'>HKEY_USERS</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to change file attributes." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061122" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to read file attributes." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061121" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Right to delete a directory and all the files it contains (its children), even if the files are read-only." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061120" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to execute a file." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061119" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to write extended attributes." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061118" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to read extended attributes." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061117" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to append data to the file." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061116" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to write data to the file." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061115" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Grants the right to read data from the file." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061114" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Read, write, and execute access." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061113" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Execute access." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061112" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Write access." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061111" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Read access." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061110" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Indicates access to a system access control list (SACL)." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061109" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Windows NT/2000: The right to use the object for synchronization. This enables a thread to wait until the object is in the signaled state. Some object types do not support this access right." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061108" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to change the owner in the object's security descriptor." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061107" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to modify the DACL in the object's security descriptor." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061106" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to read the information in the object's security descriptor, not including the information in the SACL." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061105" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:The right to delete the object." datatype="boolean" id="oval:com.mcafee.primitives:var:200711061104" version="3">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment='The unique sid for the user, group, system, or program (such as a Windows service).' datatype='string' id='oval:com.mcafee.primitives:var:200711061103' version='0' />
    <external_variable comment='The name of the file to be validated.' datatype='string' id='oval:com.mcafee.primitives:var:200711061102' version='0' />
    <external_variable comment='The absolute path to a file to be validated, excluding the filename.' datatype='string' id='oval:com.mcafee.primitives:var:200711061101' version='0' />
    <external_variable comment='optional:Grants the right to change file attributes.' datatype='string' id='oval:com.mcafee.primitives:var:200711061023' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to read file attributes.' datatype='string' id='oval:com.mcafee.primitives:var:200711061022' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Right to delete a directory and all the files it contains (its children), even if the files are read-only.' datatype='string' id='oval:com.mcafee.primitives:var:200711061021' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to execute a file.' datatype='string' id='oval:com.mcafee.primitives:var:200711061020' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to write extended attributes.' datatype='string' id='oval:com.mcafee.primitives:var:200711061019' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to read extended attributes.' datatype='string' id='oval:com.mcafee.primitives:var:200711061018' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to append data to the file.' datatype='string' id='oval:com.mcafee.primitives:var:200711061017' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to write data to the file.' datatype='string' id='oval:com.mcafee.primitives:var:200711061016' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Grants the right to read data from the file.' datatype='string' id='oval:com.mcafee.primitives:var:200711061015' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Read, write, and execute access.' datatype='string' id='oval:com.mcafee.primitives:var:200711061014' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Execute access.' datatype='string' id='oval:com.mcafee.primitives:var:200711061013' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Write access.' datatype='string' id='oval:com.mcafee.primitives:var:200711061012' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Read access.' datatype='string' id='oval:com.mcafee.primitives:var:200711061011' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Indicates access to a system access control list (SACL).' datatype='string' id='oval:com.mcafee.primitives:var:200711061010' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:Windows NT/2000: The right to use the object for synchronization. This enables a thread to wait until the object is in the signaled state. Some object types do not support this access right.' datatype='string' id='oval:com.mcafee.primitives:var:200711061009' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:The right to change the owner in the object&#39;s security descriptor.' datatype='string' id='oval:com.mcafee.primitives:var:200711061008' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:The right to modify the DACL in the object&#39;s security descriptor.' datatype='string' id='oval:com.mcafee.primitives:var:200711061007' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:The right to read the information in the object&#39;s security descriptor, not including the information in the SACL.' datatype='string' id='oval:com.mcafee.primitives:var:200711061006' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='optional:The right to delete the object.' datatype='string' id='oval:com.mcafee.primitives:var:200711061005' version='1'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='The unique SID that identifies a user, group, system, or program (such as a Windows service).' datatype='string' id='oval:com.mcafee.primitives:var:200711061004' version='1' />
    <external_variable comment='The name of the file to be validated.' datatype='string' id='oval:com.mcafee.primitives:var:200711061003' version='1' />
    <external_variable comment='The absolute path to a file to be validated, excluding the filename.' datatype='string' id='oval:com.mcafee.primitives:var:200711061002' version='1' />
    <external_variable comment="optional:Account Lockout Threshold: This security setting determines the number of failed logon attempts that causes a user account to be locked out." datatype="int" id="oval:com.mcafee.primitives:var:200710311003" version="1" />
    <external_variable comment="optional:Profile system performance: The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.primitives:var:200710311001" version="2">
      <possible_value hint="True. The specified user or group should have this right.">true</possible_value>
      <possible_value hint="False. The specified user or group should not have this right.">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Other Execute" datatype="boolean" id="oval:com.mcafee.primitives:var:1013" version="2">
      <possible_value hint="If the user has the specified permissions">1</possible_value>
      <possible_value hint="If the user does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment="optional:Other Write" datatype="boolean" id="oval:com.mcafee.primitives:var:1012" version="2">
      <possible_value hint="If the user has the specified permissions">1</possible_value>
      <possible_value hint="If the user does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment="optional:Other Read" datatype="boolean" id="oval:com.mcafee.primitives:var:1011" version="2">
      <possible_value hint="If the user has the specified permissions">1</possible_value>
      <possible_value hint="If the user does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment="What is the expected hard core dump size limit? Enable: A value greater than or equal to 1. Disable: 0" datatype="int" id="oval:com.mcafee.oval:var:99967" version="1" />
    <external_variable comment="Enter the device file name whose path is to be verified?" datatype="string" id="oval:com.mcafee.oval:var:99966" version="1" />
    <external_variable comment="Delay between failed logins is set as appropriate?" datatype="string" id="oval:com.mcafee.oval:var:99965" version="1">
      <possible_restriction hint="Enabled: Enter expected delay between failed logins?">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
      <possible_value hint="Disabled">.*</possible_value>
    </external_variable>
    <external_variable comment="Login access to accounts without passwords should be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99964" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Login delay time between login prompts after failed login in seconds" datatype="int" id="oval:com.mcafee.oval:var:99930" version="2" />
    <external_variable comment="Should the Xserver be set to listen on port 6000 in /etc/sysconfig/displaymanager?" datatype="string" id="oval:com.mcafee.oval:var:99851" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="Samba smb passwd file option should be enabled/disabled? To Enable: Enter smb password file path in format: To disable enter blank" datatype="string" id="oval:com.mcafee.oval:var:99849" version="1">
      <possible_value hint="To Enable: Enter smb password file path in format: \/etc\/samba\/smbpasswd for /etc/samba/smbpasswd" />
      <possible_value hint="To Disable">.*</possible_value>
    </external_variable>
    <external_variable comment="Samba encrypt passwords option should be enabled / disabled?" datatype="string" id="oval:com.mcafee.oval:var:99848" version="1">
      <possible_value hint="Enabled">yes</possible_value>
      <possible_value hint="Disabled">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected Samba security option (user | share)?" datatype="string" id="oval:com.mcafee.oval:var:99847" version="1" />
    <external_variable comment="Enter the IP of host networks that are permitted to access a Samba service in format: 192\.168\.1\..*192\.168\.2\. for 192.168.1. 192.168.2.?" datatype="string" id="oval:com.mcafee.oval:var:99846" version="2" />
    <external_variable comment="What is the expected logging level for Sendmail?" datatype="int" id="oval:com.mcafee.oval:var:99845" version="1" />
    <external_variable comment="What is expected default gateway IP (Example: 192.168.1.1)?" datatype="string" id="oval:com.mcafee.oval:var:99810" version="2" />
    <external_variable comment="Network Time Protocol (ntp) synchronization server is set?" datatype="string" id="oval:com.mcafee.oval:var:99809" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="What is the expected home dirrectory for root account?" datatype="string" id="oval:com.mcafee.oval:var:99780" version="1" />
    <external_variable comment="What should the screensaver lock timeout be set to? (In minutes)" datatype="int" id="oval:com.mcafee.oval:var:99773" version="2" />
    <external_variable comment="The root password is required into boot into single-user mode?" datatype="string" id="oval:com.mcafee.oval:var:99766" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="login accounts should / should not include an appropriate GECOS identifier" datatype="string" id="oval:com.mcafee.oval:var:99755" version="1">
      <possible_value hint="Enable">\w+</possible_value>
      <possible_value hint="Disable">.*</possible_value>
    </external_variable>
    <external_variable comment="verify that remote consoles are enabled or disabled as appropriate" datatype="string" id="oval:com.mcafee.oval:var:99747" version="1">
      <possible_value hint="Enable">uugetty</possible_value>
      <possible_value hint="Disable">[^uugetty]</possible_value>
    </external_variable>
    <external_variable comment="The new users are required or not required to change their password on first login?" datatype="string" id="oval:com.mcafee.oval:var:99740" version="1">
      <possible_value hint="New users required to change their password on first login">0</possible_value>
      <possible_value hint="New users required to change their password on first login">[^0]</possible_value>
    </external_variable>
    <external_variable comment="SNMP read-only community is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99733" version="1">
      <possible_value hint="Enabled">^rwcommunity.*</possible_value>
      <possible_value hint="Disabled">[^rwcommunity.*]</possible_value>
    </external_variable>
    <external_variable comment="SNMP read-only community is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99732" version="1">
      <possible_value hint="Enabled">^rocommunity.*</possible_value>
      <possible_value hint="Disabled">[^rocommunity.*]</possible_value>
    </external_variable>
    <external_variable comment="Set the Banner to be displayed by telnet service" datatype="string" id="oval:com.mcafee.oval:var:99719" version="1" />
    <external_variable comment="Enter the Filename where the telnet banner message resides. This information is present in the /etc/inetd.conf file" datatype="string" id="oval:com.mcafee.oval:var:99718" version="1" />
    <external_variable comment="Enter the path where the telnet banner message resides. This information is present in the /etc/inetd.conf file" datatype="string" id="oval:com.mcafee.oval:var:99717" version="1" />
    <external_variable comment="rpc.rquotad service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99679" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="rpc.ttdbserverd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99677" version="3">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="verify that Sendmail help command is allowed or not as appropriate" datatype="string" id="oval:com.mcafee.oval:var:99660" version="1">
      <possible_value hint="Enabled">\w+</possible_value>
      <possible_value hint="Disabled">[^ \w]</possible_value>
    </external_variable>
    <external_variable comment="verify that Sendmail expn command is allowed or not as appropriate" datatype="string" id="oval:com.mcafee.oval:var:99659" version="1">
      <possible_value hint="Enabled">\w+</possible_value>
      <possible_value hint="Disabled">[^ \w]</possible_value>
    </external_variable>
    <external_variable comment="verify that Sendmail vrfy command is allowed or not as appropriate" datatype="string" id="oval:com.mcafee.oval:var:99658" version="1">
      <possible_value hint="Enabled">\w+</possible_value>
      <possible_value hint="Disabled">[^ \w]</possible_value>
    </external_variable>
    <external_variable comment="rexec service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99645" version="2">
      <possible_value hint="Enabled">exec</possible_value>
      <possible_value hint="Disabled">#exec</possible_value>
    </external_variable>
    <external_variable comment="rlogin service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99641" version="2">
      <possible_value hint="Enabled">login</possible_value>
      <possible_value hint="Disabled">#login</possible_value>
    </external_variable>
    <external_variable comment="verify that the graphical login banner is set appropriately" datatype="string" id="oval:com.mcafee.oval:var:99634" version="1">
      <possible_value hint="Enabled">\w+</possible_value>
      <possible_value hint="Disabled">[^ \w]</possible_value>
    </external_variable>
    <external_variable comment="What is the expected Core dump size limit? Enable: A value greater than or equal to 1. Disable: 0" datatype="int" id="oval:com.mcafee.oval:var:99616" version="1" />
    <external_variable comment="What is the expected shell for the root account in format: \/sbin\/sh for /sbin/sh?" datatype="string" id="oval:com.mcafee.oval:var:99615" version="1" />
    <external_variable comment="What is the appropriate filesystem logical volume for /opt to be configured in format: \/dev\/vg00\/lvol3 for /dev/vg00/lvol3?" datatype="string" id="oval:com.mcafee.oval:var:99614" version="1" />
    <external_variable comment="What is the appropriate filesystem logical volume for /var to be configured in format: \/dev\/vg00\/lvol3 for /dev/vg00/lvol3?" datatype="string" id="oval:com.mcafee.oval:var:99613" version="1" />
    <external_variable comment="What is the appropriate filesystem logical volume for /export/home to be configured in format: \/dev\/vg00\/lvol3 for /dev/vg00/lvol3?" datatype="string" id="oval:com.mcafee.oval:var:99612" version="1" />
    <external_variable comment="What is the expected text? (This should be in regex format)" datatype="string" id="oval:com.mcafee.oval:var:99579" version="2" />
    <external_variable comment="Should sticky bit be on or off for - /etc/rc.config.d/nddconf" datatype="boolean" id="oval:com.mcafee.oval:var:99504" version="1">
      <possible_value hint="On">1</possible_value>
      <possible_value hint="Off">0</possible_value>
    </external_variable>
    <external_variable comment="Should sticky bit be on or off for - /etc/inetd.conf" datatype="boolean" id="oval:com.mcafee.oval:var:99503" version="1">
      <possible_value hint="On">1</possible_value>
      <possible_value hint="Off">0</possible_value>
    </external_variable>
    <external_variable comment="pop3 service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99475" version="2">
      <possible_value hint="Enabled">pop3</possible_value>
      <possible_value hint="Disabled">#pop3</possible_value>
    </external_variable>
    <external_variable comment="imap2 service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99474" version="2">
      <possible_value hint="Enabled">imap2</possible_value>
      <possible_value hint="Disabled">#imap2</possible_value>
    </external_variable>
    <external_variable comment="instl_boots service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99473" version="2">
      <possible_value hint="Enabled">instl_boots</possible_value>
      <possible_value hint="Disabled">#instl_boots</possible_value>
    </external_variable>
    <external_variable comment="rsh service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99466" version="2">
      <possible_value hint="Enabled">rsh</possible_value>
      <possible_value hint="Disabled">#rsh</possible_value>
    </external_variable>
    <external_variable comment="netstat service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99461" version="2">
      <possible_value hint="Enabled">netstat</possible_value>
      <possible_value hint="Disabled">#netstat</possible_value>
    </external_variable>
    <external_variable comment="lockd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99445" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="statd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99444" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="mountd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99443" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="nfsd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99442" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="rcp service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99441" version="2">
      <possible_value hint="Enabled">rcp</possible_value>
      <possible_value hint="Disabled">#rcp</possible_value>
    </external_variable>
    <external_variable comment="inetd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99440" version="2">
      <possible_value hint="Enabled">inetd</possible_value>
      <possible_value hint="Disabled">#inetd</possible_value>
    </external_variable>
    <external_variable comment="IPv6 is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99369" version="1">
      <possible_value hint="Enabled">"\w+"</possible_value>
      <possible_value hint="Disabled">""</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:99321" version="4">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="rexd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99174" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="ntalk service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99173" version="3">
      <possible_value hint="Enabled">ntalk</possible_value>
      <possible_value hint="Disabled">#ntalk</possible_value>
    </external_variable>
    <external_variable comment="XDMCP port is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99163" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="exec service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99160" version="2">
      <possible_value hint="Enabled">exec</possible_value>
      <possible_value hint="Disabled">#exec</possible_value>
    </external_variable>
    <external_variable comment="kshell service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99027" version="2">
      <possible_value hint="Enabled">kshell</possible_value>
      <possible_value hint="Disabled">#kshell</possible_value>
    </external_variable>
    <external_variable comment="klogin service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99026" version="2">
      <possible_value hint="Enabled">klogin</possible_value>
      <possible_value hint="Disabled">#klogin</possible_value>
    </external_variable>
    <external_variable comment="bootps service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99025" version="2">
      <possible_value hint="Enabled">bootps</possible_value>
      <possible_value hint="Disabled">#bootps</possible_value>
    </external_variable>
    <external_variable comment="login service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99024" version="2">
      <possible_value hint="Enabled">login</possible_value>
      <possible_value hint="Disabled">#login</possible_value>
    </external_variable>
    <external_variable comment="shell service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99023" version="2">
      <possible_value hint="Enabled">shell</possible_value>
      <possible_value hint="Disabled">#shell</possible_value>
    </external_variable>
    <external_variable comment="printer service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99022" version="2">
      <possible_value hint="Enabled">printer</possible_value>
      <possible_value hint="Disabled">#printer</possible_value>
    </external_variable>
    <external_variable comment="kcms_server service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99021" version="4">
      <possible_value hint="Enabled">100221</possible_value>
      <possible_value hint="Disabled">#100221</possible_value>
    </external_variable>
    <external_variable comment="recserv service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99020" version="2">
      <possible_value hint="Enabled">recserv</possible_value>
      <possible_value hint="Disabled">#recserv</possible_value>
    </external_variable>
    <external_variable comment="registrar service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99019" version="2">
      <possible_value hint="Enabled">registrar</possible_value>
      <possible_value hint="Disabled">#registrar</possible_value>
    </external_variable>
    <external_variable comment="auth service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:99018" version="2">
      <possible_value hint="Enabled">auth</possible_value>
      <possible_value hint="Disabled">#auth</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to GroupPolicy?" datatype="string" id="oval:com.mcafee.oval:var:98993" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to GroupPolicy?" datatype="string" id="oval:com.mcafee.oval:var:98992" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to GroupPolicy?" datatype="string" id="oval:com.mcafee.oval:var:98991" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the GroupPolicy folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98990" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to spool?" datatype="string" id="oval:com.mcafee.oval:var:98988" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to spool?" datatype="string" id="oval:com.mcafee.oval:var:98987" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to spool?" datatype="string" id="oval:com.mcafee.oval:var:98986" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the spool folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98985" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to drivers?" datatype="string" id="oval:com.mcafee.oval:var:98983" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to drivers?" datatype="string" id="oval:com.mcafee.oval:var:98982" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to drivers?" datatype="string" id="oval:com.mcafee.oval:var:98981" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the drivers folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98980" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to system32?" datatype="string" id="oval:com.mcafee.oval:var:98978" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to system32?" datatype="string" id="oval:com.mcafee.oval:var:98977" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to system32?" datatype="string" id="oval:com.mcafee.oval:var:98976" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the system32 folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98975" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to system?" datatype="string" id="oval:com.mcafee.oval:var:98974" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to system?" datatype="string" id="oval:com.mcafee.oval:var:98973" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to system?" datatype="string" id="oval:com.mcafee.oval:var:98972" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the system folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98971" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to tracert.exe?" datatype="string" id="oval:com.mcafee.oval:var:98969" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect tracert.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98968" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to telnet.exe?" datatype="string" id="oval:com.mcafee.oval:var:98967" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to runas.exe?" datatype="string" id="oval:com.mcafee.oval:var:98966" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to rsh.exe?" datatype="string" id="oval:com.mcafee.oval:var:98965" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to route.exe?" datatype="string" id="oval:com.mcafee.oval:var:98964" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to rexec.exe?" datatype="string" id="oval:com.mcafee.oval:var:98963" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to rcp.exe?" datatype="string" id="oval:com.mcafee.oval:var:98962" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to ping.exe?" datatype="string" id="oval:com.mcafee.oval:var:98961" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect ping.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98960" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to nslookup.exe?" datatype="string" id="oval:com.mcafee.oval:var:98959" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to netstat.exe?" datatype="string" id="oval:com.mcafee.oval:var:98958" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to net1.exe?" datatype="string" id="oval:com.mcafee.oval:var:98957" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to net.exe?" datatype="string" id="oval:com.mcafee.oval:var:98956" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to nbtstat.exe?" datatype="string" id="oval:com.mcafee.oval:var:98955" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to ipconfig.exe?" datatype="string" id="oval:com.mcafee.oval:var:98954" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect ipconfig.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98953" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to tftp.exe?" datatype="string" id="oval:com.mcafee.oval:var:98952" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to ftp.exe?" datatype="string" id="oval:com.mcafee.oval:var:98951" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to finger.exe?" datatype="string" id="oval:com.mcafee.oval:var:98950" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect finger.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98949" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to edit.com?" datatype="string" id="oval:com.mcafee.oval:var:98947" version="3">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect edit.com to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98946" version="3">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to cmd.exe?" datatype="string" id="oval:com.mcafee.oval:var:98945" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect cmd.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98944" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the INTERACTIVE group to have access to tftp.exe?" datatype="string" id="oval:com.mcafee.oval:var:98942" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the INTERACTIVE group to have access to telnet.exe?" datatype="string" id="oval:com.mcafee.oval:var:98941" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the INTERACTIVE group to have access to runas.exe?" datatype="string" id="oval:com.mcafee.oval:var:98940" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the INTERACTIVE group to have access to net1.exe?" datatype="string" id="oval:com.mcafee.oval:var:98939" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the INTERACTIVE group to have access to net.exe?" datatype="string" id="oval:com.mcafee.oval:var:98938" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the INTERACTIVE group to have access to ftp.exe?" datatype="string" id="oval:com.mcafee.oval:var:98937" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the INTERACTIVE group to have access to edlin.exe?" datatype="string" id="oval:com.mcafee.oval:var:98936" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to ntbackup.exe?" datatype="string" id="oval:com.mcafee.oval:var:98935" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to nslookup.exe?" datatype="string" id="oval:com.mcafee.oval:var:98934" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access netstat.exe?" datatype="string" id="oval:com.mcafee.oval:var:98933" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to nbtstat.exe?" datatype="string" id="oval:com.mcafee.oval:var:98932" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to SYSTEMROOT?" datatype="string" id="oval:com.mcafee.oval:var:98931" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to SYSTEMROOT?" datatype="string" id="oval:com.mcafee.oval:var:98930" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to SYSTEMROOT?" datatype="string" id="oval:com.mcafee.oval:var:98929" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the SYSTEMROOT folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98928" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect drwtsn32.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98927" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect drwatson.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98926" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect dfrg.msc to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98925" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect devmgmt.msc to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98924" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect compmgmt.msc to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98923" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect ciadv.msc to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98922" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect tlntsvr.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98921" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect tftp.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98920" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect telnet.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98919" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect systeminfo.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98918" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect subst.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98917" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect secedit.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98916" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect sc.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98915" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect rsh.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98914" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect route.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98913" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect rexec.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98912" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect regsvr32.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98911" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect regini.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98910" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect regedt32.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98909" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect regedit.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98908" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect reg.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98907" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect rcp.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98906" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect ntbackup.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98905" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect nslookup.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98904" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect netstat.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98903" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect netsh.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98902" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect net1.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98901" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect net.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98900" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect nbtstat.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98899" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect ftp.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98898" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect mshta.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98897" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect eventtriggers.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98896" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect eventcreate.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98895" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect edlin.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:98894" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="What should be the NDD_VALUE?" datatype="int" id="oval:com.mcafee.oval:var:98462" version="1" />
    <external_variable comment="What should be the NDD_NAME?" datatype="string" id="oval:com.mcafee.oval:var:98461" version="1" />
    <external_variable comment="What should be the TRANSPORT_NAME?" datatype="string" id="oval:com.mcafee.oval:var:98460" version="1" />
    <external_variable comment="Should the GUI Desktop be enabled?" datatype="string" id="oval:com.mcafee.oval:var:98459" version="2">
      <possible_value hint="Enabled">enabled</possible_value>
      <possible_value hint="Disabled">disabled</possible_value>
    </external_variable>
    <external_variable comment="Set the banner value as appropriate value" datatype="string" id="oval:com.mcafee.oval:var:98458" version="1" />
    <external_variable comment="What is the expected SSH Protocol version?" datatype="string" id="oval:com.mcafee.oval:var:98456" version="2">
      <possible_value hint="Only v2 (recommended)">2</possible_value>
      <possible_value hint="Only v1">1</possible_value>
      <possible_value hint="Both v1 and v2">2,1</possible_value>
    </external_variable>
    <external_variable comment="what should be the mesg value?" datatype="string" id="oval:com.mcafee.oval:var:98455" version="1" />
    <external_variable comment="What should be the umask value?" datatype="int" id="oval:com.mcafee.oval:var:98454" version="2" />
    <external_variable comment="Should the service be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:98453" version="1">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="tftp service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98442" version="2">
      <possible_value hint="Enabled">tftp</possible_value>
      <possible_value hint="Disabled">#tftp</possible_value>
    </external_variable>
    <external_variable comment="ftp service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98441" version="2">
      <possible_value hint="Enabled">ftp</possible_value>
      <possible_value hint="Disabled">#ftp</possible_value>
    </external_variable>
    <external_variable comment="telnet service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98440" version="2">
      <possible_value hint="Enabled">telnet</possible_value>
      <possible_value hint="Disabled">#telnet</possible_value>
    </external_variable>
    <external_variable comment="rpc.cmsd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98439" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="rpc.sprayd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98438" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="rpc.rwalld service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98437" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="rpc.rusersd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98436" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="rpc.rstatd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98435" version="2">
      <possible_value hint="Enabled">rpc</possible_value>
      <possible_value hint="Disabled">#rpc</possible_value>
    </external_variable>
    <external_variable comment="ident service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98434" version="2">
      <possible_value hint="Enabled">ident</possible_value>
      <possible_value hint="Disabled">#ident</possible_value>
    </external_variable>
    <external_variable comment="uucp service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98433" version="2">
      <possible_value hint="Enabled">uucp</possible_value>
      <possible_value hint="Disabled">#uucp</possible_value>
    </external_variable>
    <external_variable comment="finger service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98432" version="2">
      <possible_value hint="Enabled">finger</possible_value>
      <possible_value hint="Disabled">#finger</possible_value>
    </external_variable>
    <external_variable comment="dtspc service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98415" version="2">
      <possible_value hint="Enabled">dtspc</possible_value>
      <possible_value hint="Disabled">#dtspc</possible_value>
    </external_variable>
    <external_variable comment="chargen service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98414" version="2">
      <possible_value hint="Enabled">chargen</possible_value>
      <possible_value hint="Disabled">#chargen</possible_value>
    </external_variable>
    <external_variable comment="daytime service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98413" version="2">
      <possible_value hint="Enabled">daytime</possible_value>
      <possible_value hint="Disabled">#daytime</possible_value>
    </external_variable>
    <external_variable comment="discard service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98412" version="2">
      <possible_value hint="Enabled">discard</possible_value>
      <possible_value hint="Disabled">#discard</possible_value>
    </external_variable>
    <external_variable comment="echo service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:98411" version="2">
      <possible_value hint="Enabled">echo</possible_value>
      <possible_value hint="Disabled">#echo</possible_value>
    </external_variable>
    <external_variable comment="Should login access to accounts with blank passwords be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:97923" version="1">
      <possible_value hint="Enabled">.*</possible_value>
      <possible_value hint="Disabled">[^ ]</possible_value>
    </external_variable>
    <external_variable comment="Should empty passwords be permitted?" datatype="string" id="oval:com.mcafee.oval:var:97905" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected console login banner text? (This should be in regex format)" datatype="string" id="oval:com.mcafee.oval:var:96659" version="3" />
    <external_variable comment="Required warning message switch point distance value in percentage" datatype="int" id="oval:com.mcafee.oval:var:96595" version="1" />
    <external_variable comment="Wakeup switch piont frequency in minutes" datatype="int" id="oval:com.mcafee.oval:var:96594" version="1" />
    <external_variable comment="Required File Space Switch size in percentage" datatype="int" id="oval:com.mcafee.oval:var:96593" version="1" />
    <external_variable comment="what should be the file path and name?" datatype="string" id="oval:com.mcafee.oval:var:96591" version="1" />
    <external_variable comment="What is the expected system login banner text?(This should be a regex format)" datatype="string" id="oval:com.mcafee.oval:var:96536" version="2" />
    <external_variable comment="Secure Channel Data Digitally Encrypted or Signed When Possible" datatype="int" id="oval:com.mcafee.oval:var:96330" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check. Hotfix version number Ex 491380" datatype="string" id="oval:com.mcafee.oval:var:96328" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The expected registry Key Name example Hotfix version" datatype="string" id="oval:com.mcafee.oval:var:96327" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Registry Key Path for Policy Auditor Hotfix key- Ex for PA 5.2 SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\POLICYAU5200" datatype="string" id="oval:com.mcafee.oval:var:96326" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Auditing should be either enabled or disabled as appropriate" datatype="int" id="oval:com.mcafee.oval:var:96040" version="1">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="What is the expected text for the SSH warning banner?" datatype="string" id="oval:com.mcafee.oval:var:95991" version="2" />
    <external_variable comment="net.ipv4.conf.all.send_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:95961" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="tcp_syncookies should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:95959" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="What is the expected max orphan value?" datatype="int" id="oval:com.mcafee.oval:var:95958" version="2" />
    <external_variable comment="ip_forward should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:95957" version="4">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.default.secure_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:95956" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="McAfee Security Center AV Plus/Internet Security/Total Protection Virus Scan Maximum DAT age in seconds" datatype="int" id="oval:com.mcafee.oval:var:95931" version="2">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="log_ftp_protocol should be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:95924" version="2">
      <possible_value hint="Enabled">YES</possible_value>
      <possible_value hint="Disabled">NO</possible_value>
    </external_variable>
    <external_variable comment="Disable Internet Connection wizard" datatype="int" id="oval:com.mcafee.oval:var:95825" version="7">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="optional:Registry Value Data: The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95824" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95819" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95818" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95817" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95816" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95815" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95814" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95813" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95811" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95810" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95809" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95808" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95807" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95806" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95805" version="3">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95804" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95803" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95802" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95801" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95800" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95799" version="2">
      <possible_value hint="My Computer">0</possible_value>
      <possible_value hint="Local Intranet Zone">1</possible_value>
      <possible_value hint="Trusted sites Zone">2</possible_value>
      <possible_value hint="Internet Zone">3</possible_value>
      <possible_value hint="Restricted Sites Zone">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95798" version="3">
      <possible_value hint="My Computer">0</possible_value>
      <possible_value hint="Local Intranet Zone">1</possible_value>
      <possible_value hint="Trusted sites Zone">2</possible_value>
      <possible_value hint="Internet Zone">3</possible_value>
      <possible_value hint="Restricted Sites Zone">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95797" version="3">
      <possible_value hint="My Computer">0</possible_value>
      <possible_value hint="Local Intranet Zone">1</possible_value>
      <possible_value hint="Trusted sites Zone">2</possible_value>
      <possible_value hint="Internet Zone">3</possible_value>
      <possible_value hint="Restricted Sites Zone">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95796" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95795" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95794" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95793" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95792" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95791" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95790" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95789" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:95788" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:95787" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95786" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95785" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:95784" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95783" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95782" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95781" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:95780" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95779" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95778" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid security principal as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95777" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:95776" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95775" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95774" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95773" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95772" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95771" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95770" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95769" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:95768" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:95767" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:95766" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95765" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95764" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:95763" version="2" />
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:95762" version="2" />
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95761" version="2" />
    <external_variable comment="Log on as a service The right to log on using the service logon type (SeServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95760" version="2" />
    <external_variable comment="Access this computer from the network - The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95759" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories-The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:95758" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid security principal as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95757" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:95756" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95755" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:95754" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95753" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95752" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95751" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95750" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95749" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95748" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95747" version="9">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95746" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95745" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95744" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95743" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95742" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95741" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95740" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95738" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95737" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95736" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95735" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95734" version="5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95733" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95732" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95731" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95730" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95729" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95728" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95727" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95726" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95725" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95724" version="2">
      <possible_value hint="My Computer">0</possible_value>
      <possible_value hint="Local Intranet Zone">1</possible_value>
      <possible_value hint="Trusted sites Zone">2</possible_value>
      <possible_value hint="Internet Zone">3</possible_value>
      <possible_value hint="Restricted Sites Zone">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95723" version="4">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95722" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Audit account logon events Audit attempts to log on to or log off of the system. Also, audit attempts to make a network connection." datatype="string" id="oval:com.mcafee.oval:var:95721" version="5" />
    <external_variable comment="Audit account management Audit attempts to create, delete, or change user or group accounts. Also, audit password changes." datatype="string" id="oval:com.mcafee.oval:var:95720" version="5" />
    <external_variable comment="Audit process tracking Audit specific events, such as program activation, some forms of handle duplication, indirect access to an object, and process exit." datatype="string" id="oval:com.mcafee.oval:var:95719" version="5" />
    <external_variable comment="Audit directory service access Audit attempts to access the directory service." datatype="string" id="oval:com.mcafee.oval:var:95718" version="5" />
    <external_variable comment="Audit logon events Audit attempts to log on to or log off of the system. Also, audit attempts to make a network connection." datatype="string" id="oval:com.mcafee.oval:var:95717" version="5" />
    <external_variable comment="Audit object access Audit attempts to access securable objects, such as files." datatype="string" id="oval:com.mcafee.oval:var:95716" version="5" />
    <external_variable comment="Audit policy change Audit attempts to change Policy object rules." datatype="string" id="oval:com.mcafee.oval:var:95715" version="5" />
    <external_variable comment="Audit privilege use Audit attempts to use privileges." datatype="string" id="oval:com.mcafee.oval:var:95714" version="5" />
    <external_variable comment="Audit system events Audit attempts to shut down or restart the computer. Also, audit events that affect system security or the security log." datatype="string" id="oval:com.mcafee.oval:var:95713" version="5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95707" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95706" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95705" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95704" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95703" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95702" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95701" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95700" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95699" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95697" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95696" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95695" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95694" version="3" />
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95693" version="3" />
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95692" version="2" />
    <external_variable comment="The amount of time (in seconds) between the end of the valid logon time and the time when the user is forced to log off the network. A value of zero indicates that the user will be forced to log off immediately when the valid logon time expires." datatype="int" id="oval:com.mcafee.oval:var:95691" version="1" />
    <external_variable comment="Account Lockout Duration: the amount of time (in seconds) that the locked account remains locked before it is automatically unlocked." datatype="int" id="oval:com.mcafee.oval:var:95690" version="1" />
    <external_variable comment="Account Lockout Window: the amount of time (in seconds) after a bad logon attempt before the account lockout counter is reset." datatype="int" id="oval:com.mcafee.oval:var:95689" version="1" />
    <external_variable comment="Account Lockout Threshold: the number of invalid password authentications that can occur within the Account Lockout Window before the account is locked out." datatype="int" id="oval:com.mcafee.oval:var:95688" version="1" />
    <external_variable comment="Specifies, in seconds, the maximum allowable password age. A value of -1 indicates that the password never expires. The minimum valid value for this element is 86400 seconds (one day)." datatype="int" id="oval:com.mcafee.oval:var:95687" version="3" />
    <external_variable comment="Specifies the minimum number of seconds that can elapse between the time a password changes and when it can be changed again. A value of zero indicates that no delay is required between password updates." datatype="int" id="oval:com.mcafee.oval:var:95686" version="3" />
    <external_variable comment="Specifies the minimum allowable password length. Valid values for this element are zero through 14" datatype="int" id="oval:com.mcafee.oval:var:95685" version="3" />
    <external_variable comment="Specifies the number of passwords maintained in the password history. A new password cannot match any of the previous passwords in the password history. Valid values for this element are zero through 24." datatype="int" id="oval:com.mcafee.oval:var:95684" version="3" />
    <external_variable comment="A boolean value that signifies whether passwords must meet the complexity requirements put forth by the operating system." datatype="boolean" id="oval:com.mcafee.oval:var:95683" version="3" />
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95682" version="3" />
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95681" version="3" />
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95680" version="2" />
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95679" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95678" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95677" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="User account against which the check is to be verified." datatype="string" id="oval:com.mcafee.oval:var:95676" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Expected state of the user account (Enabled or Disabled)." datatype="boolean" id="oval:com.mcafee.oval:var:95675" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data- The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95617" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95616" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95615" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:95614" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:95613" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:95612" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:95611" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95610" version="3" />
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95609" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.oval:var:95608" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a token object The privilege to create an access token by calling NtCreateToken() or other token-creating APIs (SeCreateTokenPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95607" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Debug programs The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components (SeDebugPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95606" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:95605" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:95604" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95603" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95602" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95601" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95600" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Add workstations to domain The right to add a computer account to a specific domain (SeMachineAccountPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95599" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:95598" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95597" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95596" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95595" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:95594" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95593" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Synchronize directory service data The right to read all objects and properties in the directory, regardless of the protection on the objects and properties (SeSyncAgentPrivilege). It is required in order to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services." datatype="boolean" id="oval:com.mcafee.oval:var:95592" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95591" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95590" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95589" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95588" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Act as part of the operating system This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege. (SeTcbPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95587" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95586" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.oval:var:95585" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95584" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95583" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95582" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95581" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95580" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95579" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95578" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a Service Explicitly denies the right to log on using the service logon type (SeDenyServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95577" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95576" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95575" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95574" version="2">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95573" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95572" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95571" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95570" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95569" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95568" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95567" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Kerberos: Maximum lifetime for service ticket (in minutes)" datatype="int" deprecated="false" id="oval:com.mcafee.oval:var:95566" version="2" />
    <external_variable comment="Kerberos: Maximum lifetime for user ticket (in hours)" datatype="int" deprecated="false" id="oval:com.mcafee.oval:var:95565" version="2" />
    <external_variable comment="Kerberos: Maximum lifetime for user ticket renewal (in days)" datatype="int" deprecated="false" id="oval:com.mcafee.oval:var:95564" version="2" />
    <external_variable comment="Kerberos: Maximum tolerance for computer clock synchronization (in minutes)" datatype="int" deprecated="false" id="oval:com.mcafee.oval:var:95563" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95562" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95561" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95560" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95559" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95558" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95557" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95556" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:95555" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Audit directory service access This security setting determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified." datatype="string" id="oval:com.mcafee.oval:var:95554" version="5" />
    <external_variable comment="Audit logon events This security setting determines whether to audit each instance of a user logging on to or logging off from a computer." datatype="string" id="oval:com.mcafee.oval:var:95553" version="5" />
    <external_variable comment="Audit object access This security setting determines whether to audit the event of a user accessing an object—for example, a file, folder, registry key, printer, and so forth—that has its own system access control list (SACL) specified." datatype="string" id="oval:com.mcafee.oval:var:95552" version="5" />
    <external_variable comment="Audit policy change This security setting determines whether to audit every incident of a change to user rights assignment policies, audit policies, or trust policies." datatype="string" id="oval:com.mcafee.oval:var:95551" version="5" />
    <external_variable comment="Audit privilege use This security setting determines whether to audit each instance of a user exercising a user right." datatype="string" id="oval:com.mcafee.oval:var:95550" version="5" />
    <external_variable comment="Audit system events This security setting determines whether to audit when a user restarts or shuts down the computer or when an event occurs that affects either the system security or the security log." datatype="string" id="oval:com.mcafee.oval:var:95549" version="5" />
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:95548" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:95547" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:95546" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:95545" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95544" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:95543" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:95542" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95541" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95540" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95539" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95538" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:95537" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95536" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95535" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95534" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:95533" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95532" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95531" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95530" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95529" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95528" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95527" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95526" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95525" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95524" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95523" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95522" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:95521" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:95520" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:95519" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:95518" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95517" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation: The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:95516" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:95515" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95514" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95513" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95512" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95511" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:95510" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95509" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95508" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95507" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:95506" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95505" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95504" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95503" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95502" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95501" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95500" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95499" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95498" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95497" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95496" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95495" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:95494" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:95493" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:95492" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:95491" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95490" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:95489" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:95488" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95487" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95486" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95485" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95484" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:95483" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95482" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95481" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95480" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:95479" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95478" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95477" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95476" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95475" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95474" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95473" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95472" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95471" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95470" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95469" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95468" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:95467" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:95466" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:95465" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:95464" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95463" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:95462" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:95461" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95460" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95459" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95458" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95457" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:95456" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95455" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95454" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95453" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:95452" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95451" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95450" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95449" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95448" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95447" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:95446" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95445" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95444" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95443" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95442" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:95441" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Kerberos Enforce user logon restrictions" datatype="boolean" deprecated="false" id="oval:com.mcafee.oval:var:95440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="SSH host-based authentication should be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:94515" version="2">
      <possible_value hint="Enabled">yes</possible_value>
      <possible_value hint="Disabled">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected banner text or file path having banner text for all gui logins?(Enter regex format)" datatype="string" id="oval:com.mcafee.oval:var:94425" version="5" />
    <external_variable comment="This is the minimum version of McAfee Virus Scan that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:94423" version="1" />
    <external_variable comment="Expected banner text for vsftpd users?(in regex format)" datatype="string" id="oval:com.mcafee.oval:var:94419" version="5" />
    <external_variable comment="Prompt for password on resume from hibernate / suspend" datatype="string" id="oval:com.mcafee.oval:var:94140" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="What is the maximum number of days for any account other than root to be inactive" datatype="int" id="oval:com.mcafee.oval:var:92829" version="2" />
    <external_variable comment="The number of lowecase characters required while setting the password?" datatype="int" id="oval:com.mcafee.oval:var:924495" version="1" />
    <external_variable comment="The number of upper case characters required while setting the password?" datatype="int" id="oval:com.mcafee.oval:var:924494" version="1" />
    <external_variable comment="The number of numeric characters required by the policy" datatype="int" id="oval:com.mcafee.oval:var:924493" version="1" />
    <external_variable comment="What should be the minimum password length?" datatype="int" id="oval:com.mcafee.oval:var:924492" version="1" />
    <external_variable comment="The number of special characters required by the policy" datatype="int" id="oval:com.mcafee.oval:var:924491" version="1" />
    <external_variable comment="Should the service be enabled or disabled?" datatype="boolean" id="oval:com.mcafee.oval:var:87715" version="2">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Should the service be enabled or disabled?" datatype="boolean" id="oval:com.mcafee.oval:var:87714" version="3">
      <possible_value hint="Enabled">false</possible_value>
      <possible_value hint="Disabled">true</possible_value>
    </external_variable>
    <local_variable comment="Collect the Mozilla Firefox Version" datatype="version" id="oval:com.mcafee.oval:var:87703" version="1">
      <object_component item_field="subexpression" object_ref="oval:com.mcafee.oval:obj:75708" />
    </local_variable>
    <external_variable comment="What is the retry limit to be set for account lockout?" datatype="int" id="oval:com.mcafee.oval:var:87697" version="1" />
    <external_variable comment="What is the number of most recently used passwords against which a new password should be checked (PASSWORD_HISTORY_DEPTH value)?" datatype="int" id="oval:com.mcafee.oval:var:87695" version="1" />
    <external_variable comment="What is the minimum number of characters supposed to be present in password?" datatype="int" id="oval:com.mcafee.oval:var:87690" version="1" />
    <external_variable comment="What is the maximum number of days for which a password is supposed to be valid?" datatype="int" id="oval:com.mcafee.oval:var:87689" version="1" />
    <external_variable comment="What is the minimum number of upper case characters supposed to be present in password?" datatype="int" id="oval:com.mcafee.oval:var:87688" version="1" />
    <external_variable comment="What is the minimum number of special characters supposed to be present in password?" datatype="int" id="oval:com.mcafee.oval:var:87687" version="1" />
    <external_variable comment="Registry Value Data -The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87585" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="A boolean value that signifies whether passwords must meet the complexity requirements put forth by the operating system." datatype="boolean" id="oval:com.mcafee.oval:var:87581" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Specifies the number of passwords maintained in the password history. A new password cannot match any of the previous passwords in the password history. Valid values for this element are zero through 24." datatype="int" id="oval:com.mcafee.oval:var:87580" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Specifies the minimum allowable password length. Valid values for this element are zero through 14" datatype="int" id="oval:com.mcafee.oval:var:87579" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Specifies the minimum number of seconds that can elapse between the time a password changes and when it can be changed again. A value of zero indicates that no delay is required between password updates." datatype="int" id="oval:com.mcafee.oval:var:87578" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Specifies, in seconds, the maximum allowable password age. A value of -1 indicates that the password never expires. The minimum valid value for this element is 86400 seconds (one day)." datatype="int" id="oval:com.mcafee.oval:var:87577" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <local_variable comment="Collect the QuickTime Version" datatype="version" id="oval:com.mcafee.oval:var:87342" version="1">
      <object_component item_field="subexpression" object_ref="oval:com.mcafee.oval:obj:75689" />
    </local_variable>
    <local_variable comment="Collect the Apple Safari Version" datatype="version" id="oval:com.mcafee.oval:var:87335" version="1">
      <object_component item_field="subexpression" object_ref="oval:com.mcafee.oval:obj:75654" />
    </local_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87244" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87243" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87242" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87241" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87240" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - fp_extensions" datatype="string" id="oval:com.mcafee.oval:var:87239" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - iis_www." datatype="string" id="oval:com.mcafee.oval:var:87238" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - iis_smtp" datatype="string" id="oval:com.mcafee.oval:var:87237" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - iis_inetmgr" datatype="string" id="oval:com.mcafee.oval:var:87236" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - iis_ftp" datatype="string" id="oval:com.mcafee.oval:var:87235" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - iis_common" datatype="string" id="oval:com.mcafee.oval:var:87234" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - msmq_triggersservice" datatype="string" id="oval:com.mcafee.oval:var:87233" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - msmq_localstorage" datatype="string" id="oval:com.mcafee.oval:var:87232" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - msmq_httpsupport" datatype="string" id="oval:com.mcafee.oval:var:87231" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - msmq_core" datatype="string" id="oval:com.mcafee.oval:var:87230" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for - msmq_adintegrated" datatype="string" id="oval:com.mcafee.oval:var:87229" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for UPNP" datatype="string" id="oval:com.mcafee.oval:var:87228" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for SIMPTCP" datatype="string" id="oval:com.mcafee.oval:var:87227" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for P2P" datatype="string" id="oval:com.mcafee.oval:var:87226" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87225" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87224" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87223" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87222" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87221" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87220" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87219" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87218" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87217" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87216" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87215" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Expected registry value's data for the registry key(s) specified." datatype="string" id="oval:com.mcafee.oval:var:87214" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87133" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The decrease kill time has to be entered in seconds." datatype="string" id="oval:com.mcafee.oval:var:87132" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87131" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87127" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87126" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87125" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87124" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87123" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87122" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87121" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87120" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87119" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87118" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87117" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87116" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87115" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87056" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:870558" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87054" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87053" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for minesweeper" datatype="string" id="oval:com.mcafee.oval:var:87051" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for hearts" datatype="string" id="oval:com.mcafee.oval:var:87050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for freecell" datatype="string" id="oval:com.mcafee.oval:var:87049" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for zonegames" datatype="string" id="oval:com.mcafee.oval:var:87048" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for spider" datatype="string" id="oval:com.mcafee.oval:var:87047" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for solitare" datatype="string" id="oval:com.mcafee.oval:var:87046" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for pinball" datatype="string" id="oval:com.mcafee.oval:var:87045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data: The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87044" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data: The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87043" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data: The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87042" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data: The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87041" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Log on locally: The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:87040" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station: The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:87039" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system: The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:87038" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking: The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:87037" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Create global objects: The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:87036" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services: Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:87035" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network: Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:87034" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally: Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:87033" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job: Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:87032" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication: The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:87031" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Create global objects: The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:87030" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Log on as a service: The right to log on using the service logon type (SeServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:87029" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process: The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:87028" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication: The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:87027" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits: The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:87026" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token: The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:87025" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Log on as a service: The right to log on using the service logon type (SeServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:87024" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process: The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:87023" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication: The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:87022" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits: The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:87021" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token: The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:87020" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:87019" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:87018" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network" datatype="boolean" id="oval:com.mcafee.oval:var:87017" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally" datatype="boolean" id="oval:com.mcafee.oval:var:87016" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job" datatype="boolean" id="oval:com.mcafee.oval:var:87015" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:87014" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data - The expected registry value's 32 data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87013" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Registry Value Data - The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87006" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data - The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:87001" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Audit privilege use - Audit attempts to use privileges." datatype="string" id="oval:com.mcafee.oval:var:87000" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="Do not Audit">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Audit policy change - Audit attempts to change Policy object rules." datatype="string" id="oval:com.mcafee.oval:var:86999" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="Do not Audit">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Audit object access - Audit attempts to access securable objects, such as files." datatype="string" id="oval:com.mcafee.oval:var:86998" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="Do not Audit">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Audit logon events - Audit attempts to log on to or log off of the system. Also, audit attempts to make a network connection." datatype="string" id="oval:com.mcafee.oval:var:86997" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="Do not Audit">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Audit directory service access - Audit attempts to access the directory service." datatype="string" id="oval:com.mcafee.oval:var:86996" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="Do not Audit">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Audit process tracking - Audit specific events, such as program activation, some forms of handle duplication, indirect access to an object, and process exit." datatype="string" id="oval:com.mcafee.oval:var:86995" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="Do not Audit">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Audit account management - Audit attempts to create, delete, or change user or group accounts. Also, audit password changes." datatype="string" id="oval:com.mcafee.oval:var:86994" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="Do not Audit">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Audit account logon events - Audit attempts to log on to or log off of the system. Also, audit attempts to make a network connection." datatype="string" id="oval:com.mcafee.oval:var:86993" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="Do not Audit">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a Service - Explicitly denies the right to log on using the service logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86992" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services - Explicitly denies the right to log on through Terminal Services" datatype="boolean" id="oval:com.mcafee.oval:var:86991" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network - Explicitly denies the right to log on using the network logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86990" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally - Explicitly denies the right to log on using the interactive logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86989" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job - Explicitly denies the right to log on using the batch logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86988" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a service - The right to log on using the service logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86987" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services - The right to log on to the computer by using a Remote Desktop connection" datatype="boolean" id="oval:com.mcafee.oval:var:86986" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network -The right to log on using the network logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86985" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally - The right to log on using the interactive logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86984" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job - The right to log on using the batch logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86983" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to read unsolicited data from a terminal device" datatype="boolean" id="oval:com.mcafee.oval:var:86982" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station - The right to undock a portable computer by clicking Eject PC on the Start menu" datatype="boolean" id="oval:com.mcafee.oval:var:86981" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Act as part of the operating system - This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege" datatype="boolean" id="oval:com.mcafee.oval:var:86980" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects - The right to take ownership of an object without being granted discretionary access" datatype="boolean" id="oval:com.mcafee.oval:var:86979" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time - The right to adjust the time on the computer's internal clock" datatype="boolean" id="oval:com.mcafee.oval:var:86978" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance - The right to sample the performance of system processes" datatype="boolean" id="oval:com.mcafee.oval:var:86977" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values -The right to modify system environment variables either by a process through an API or by a user through System Properties" datatype="boolean" id="oval:com.mcafee.oval:var:86976" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Synchronize directory service data - The right to read all objects and properties in the directory, regardless of the protection on the objects and properties" datatype="boolean" id="oval:com.mcafee.oval:var:86975" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system - The right to shut down the local computer" datatype="boolean" id="oval:com.mcafee.oval:var:86974" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log - The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys" datatype="boolean" id="oval:com.mcafee.oval:var:86973" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories -The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid security principal as the owner of an object" datatype="boolean" id="oval:com.mcafee.oval:var:86972" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system - The right to shut down a computer from a remote location on the network" datatype="boolean" id="oval:com.mcafee.oval:var:86971" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process - The right to sample the performance of an application process" datatype="boolean" id="oval:com.mcafee.oval:var:86970" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume - The right to manage volumes or disks" datatype="boolean" id="oval:com.mcafee.oval:var:86969" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Add workstations to domain - The right to add a computer account to a specific domain" datatype="boolean" id="oval:com.mcafee.oval:var:86968" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory - The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk" datatype="boolean" id="oval:com.mcafee.oval:var:86967" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers - The right to install and remove drivers for Plug and Play devices" datatype="boolean" id="oval:com.mcafee.oval:var:86966" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process - The right to increase the processor quota assigned to a process" datatype="boolean" id="oval:com.mcafee.oval:var:86965" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority - The right to increase the base priority class of a process" datatype="boolean" id="oval:com.mcafee.oval:var:86964" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication - The privilege to impersonate a client after authentication" datatype="boolean" id="oval:com.mcafee.oval:var:86963" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation - The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory" datatype="boolean" id="oval:com.mcafee.oval:var:86962" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Debug programs - The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components" datatype="boolean" id="oval:com.mcafee.oval:var:86961" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a token object - The privilege to create an access token by calling NtCreateToken() or other token-creating APIs" datatype="boolean" id="oval:com.mcafee.oval:var:86960" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects - The privilege to create a directory object in the object manager. It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently" datatype="boolean" id="oval:com.mcafee.oval:var:86959" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile - The right to create and change the size of a pagefile" datatype="boolean" id="oval:com.mcafee.oval:var:86958" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects -The right to create named file mapping objects in the global namespace during Terminal Services sessions" datatype="boolean" id="oval:com.mcafee.oval:var:86957" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking - The right to pass through folders to which the user otherwise has no access while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories" datatype="boolean" id="oval:com.mcafee.oval:var:86956" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories - The right to circumvent file and directory permissions to back up the system. The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply" datatype="boolean" id="oval:com.mcafee.oval:var:86955" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits - The right to generate audit records in the security log . The security log can be used to trace unauthorized system access" datatype="boolean" id="oval:com.mcafee.oval:var:86954" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token - The right to replace the access token that is associated with a child process" datatype="boolean" id="oval:com.mcafee.oval:var:86953" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Security principals include users or groups with either local or domain accounts, and computer accounts. In a domain environment, security principals should be identified in the form: 'domain\trustee name'" datatype="string" id="oval:com.mcafee.oval:var:86952" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allow logon through Terminal Services - The right to log on to the computer by using a Remote Desktop connection" datatype="boolean" id="oval:com.mcafee.oval:var:86950" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network - The right to log on using the network logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86949" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally - The right to log on using the interactive logon type" datatype="boolean" id="oval:com.mcafee.oval:var:86948" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station - The right to undock a portable computer by clicking Eject PC on the Start menu." datatype="boolean" id="oval:com.mcafee.oval:var:86947" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects - The right to take ownership of an object without being granted discretionary access, including Active Directory objects" datatype="boolean" id="oval:com.mcafee.oval:var:86945" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time - The right to adjust the time on the computer's internal clock." datatype="boolean" id="oval:com.mcafee.oval:var:86944" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance - The right to sample the performance of system processes" datatype="boolean" id="oval:com.mcafee.oval:var:86943" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values - The right to modify system environment variables either by a process through an API or by a user through System Properties" datatype="boolean" id="oval:com.mcafee.oval:var:86942" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system -The right to shut down the local computer" datatype="boolean" id="oval:com.mcafee.oval:var:86941" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log - The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys" datatype="boolean" id="oval:com.mcafee.oval:var:86940" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories" datatype="boolean" id="oval:com.mcafee.oval:var:86939" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system - The right to shut down a computer from a remote location on the network." datatype="boolean" id="oval:com.mcafee.oval:var:86938" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process -The right to sample the performance of an application process" datatype="boolean" id="oval:com.mcafee.oval:var:86937" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume - The right to manage volumes or disks." datatype="boolean" id="oval:com.mcafee.oval:var:86936" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers - The right to install and remove drivers for Plug and Play devices" datatype="boolean" id="oval:com.mcafee.oval:var:86935" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process - The right to increase the processor quota assigned to a process ." datatype="boolean" id="oval:com.mcafee.oval:var:86934" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority - The right to increase the base priority class of a process." datatype="boolean" id="oval:com.mcafee.oval:var:86933" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication - The privilege to impersonate a client after authentication (SeImpersonatePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:86932" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile - The right to create and change the size of a pagefile." datatype="boolean" id="oval:com.mcafee.oval:var:86931" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects - The right to create named file mapping objects in the global namespace during Terminal Services sessions" datatype="boolean" id="oval:com.mcafee.oval:var:86930" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking - The right to pass through folders to which the user otherwise has no access while navigating an object path in the NTFS file system or in the registry." datatype="boolean" id="oval:com.mcafee.oval:var:86929" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories - The right to circumvent file and directory permissions to back up the system" datatype="boolean" id="oval:com.mcafee.oval:var:86928" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Security Principle -The Security Principal parameter defines the access token being specified. Ex: ADMINISTRATOR, ADMINISTRATORS (group), etc.Built-in security principals should be in uppercase" datatype="string" id="oval:com.mcafee.oval:var:86927" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Expected state of the user account (Enabled or Disabled)." datatype="boolean" id="oval:com.mcafee.oval:var:86926" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The name of the user to validate. In a domain environment, users should be identified like domain\user name. For local users computer_name\user_name. For built-in accounts on the system, use the user name without a domain. For example: ADMINISTRATOR, SYSTEM" datatype="string" id="oval:com.mcafee.oval:var:86925" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Expected state of the user account (Enabled or Disabled)." datatype="boolean" id="oval:com.mcafee.oval:var:86920" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The name of the user to validate. For domain environment in the form: domain\user name. For local users use: computer_name\user_name. For built-in accounts on the system, use the user name without a domain. Ex ADMINISTRATOR, SYSTEM" datatype="string" id="oval:com.mcafee.oval:var:86919" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Account Lockout Threshold - the number of invalid password authentications that can occur within the Account Lockout Window before the account is locked out." datatype="int" id="oval:com.mcafee.oval:var:86918" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Account Lockout Window - the amount of time (in seconds) after a bad logon attempt before the account lockout counter is reset." datatype="int" id="oval:com.mcafee.oval:var:86917" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Account Lockout Duration - the amount of time (in seconds) that the locked account remains locked before it is automatically unlocked." datatype="int" id="oval:com.mcafee.oval:var:86916" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The amount of time (in seconds) between the end of the valid logon time and the time when the user is forced to log off the network." datatype="int" id="oval:com.mcafee.oval:var:86915" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:85794" version="4" />
    <external_variable comment="The expected registry type associated with the specified registry value(s)." datatype="string" id="oval:com.mcafee.oval:var:85793" version="4" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:85789" version="4" />
    <external_variable comment="The expected registry type associated with the specified registry value(s)." datatype="string" id="oval:com.mcafee.oval:var:85788" version="4" />
    <external_variable comment="Should the User have READ access?" datatype="boolean" id="oval:com.mcafee.oval:var:85614" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Key Path: The registry key to be tested. Note that the hive portion of the string should not be included, as this data should be selected in the hive parameter. If the operation selected is equals, the Registry Key Path should be the exact path to the registry key. For example: 'Software\TestParentKey\TestSubKey'. If the operation selected is pattern match, a basic regular expression should be used. For example: '^SOFTWARE\\SampleSoftwareVendor\\SampleSoftwareProduct\\[0-9]+\.0\\Common' could be used to detect the 'Common' key in a specific version of a software product." datatype="int" id="oval:com.mcafee.oval:var:85436" version="4">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="User Configuration\Administrative Templates\Windows Components\Turn on the auto-complete feature for user names and passwords on forms" datatype="int" deprecated="false" id="oval:com.mcafee.oval:var:85429" version="5" />
    <external_variable comment="User Configuration\Administrative Templates\Windows Components\Turn on the auto-complete feature for user names and passwords on forms" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:85428" version="5" />
    <external_variable comment="Enter the wireless interface file which you want to remove from /etc/sysconfig/network-scripts path" datatype="string" id="oval:com.mcafee.oval:var:843851" version="1" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:83114" version="5" />
    <external_variable comment="The expected registry type associated with the specified registry value(s)." datatype="string" id="oval:com.mcafee.oval:var:83113" version="5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:83109" version="5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry type associated with the specified registry value(s)." datatype="string" id="oval:com.mcafee.oval:var:83108" version="5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:83104" version="5" />
    <external_variable comment="The expected registry type associated with the specified registry value(s)." datatype="string" id="oval:com.mcafee.oval:var:83103" version="5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82927" version="6">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82925" version="6" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82922" version="6">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82920" version="6" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82917" version="5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82915" version="6" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82912" version="5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82910" version="5" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82857" version="5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82855" version="6" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82852" version="5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82850" version="6" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82847" version="9">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82845" version="9" />
    <external_variable comment="The registry key to be tested. Note that the hive portion of the string should not be included, as this data should be selected in the hive parameter. If the operation selected is equals, the Registry Key Path should be the exact path to the registry key. For example: 'Software\TestParentKey\TestSubKey'. If the operation selected is pattern match, a basic regular expression should be used. For example: '^SOFTWARE\\SampleSoftwareVendor\\SampleSoftwareProduct\\[0-9]+\.0\\Common' could be used to detect the 'Common' key in a specific version of a software product." datatype="string" id="oval:com.mcafee.oval:var:82844" version="9" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82842" version="9">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82840" version="9" />
    <external_variable comment="The registry key to be tested. Note that the hive portion of the string should not be included, as this data should be selected in the hive parameter. If the operation selected is equals, the Registry Key Path should be the exact path to the registry key. For example: 'Software\TestParentKey\TestSubKey'. If the operation selected is pattern match, a basic regular expression should be used. For example: '^SOFTWARE\\SampleSoftwareVendor\\SampleSoftwareProduct\\[0-9]+\.0\\Common' could be used to detect the 'Common' key in a specific version of a software product." datatype="string" id="oval:com.mcafee.oval:var:82839" version="9" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82287" version="5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82285" version="6" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:82282" version="4">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The name of a registry value within the specified registry key." datatype="string" id="oval:com.mcafee.oval:var:82280" version="5" />
    <external_variable comment="What is the text (Pattern match) that telnet login banner should contain?" datatype="string" id="oval:com.mcafee.oval:var:80422" version="1" />
    <external_variable comment="This is the minimum version of Java Development Kit that should be on the system. Please input version in this format. For example if JDK version is 1.6 with Update 17 then version should be inputted as 6.0.170" datatype="version" id="oval:com.mcafee.oval:var:80302" version="1" />
    <external_variable comment="This is the minimum version of Java Runtime Environment that should be on the system. Please input version in this format. For example if JRE version is 1.6 with Update 17 then version should be inputted as 6.0.170" datatype="version" id="oval:com.mcafee.oval:var:80297" version="1" />
    <external_variable comment="What is the required User ID of the file owner" datatype="int" id="oval:com.mcafee.oval:var:80228" version="6" />
    <external_variable comment="What is the required Group ID of the file owner?" datatype="int" id="oval:com.mcafee.oval:var:80125" version="6" />
    <external_variable comment="Runlevel at which the service should be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:79726" version="3" />
    <external_variable comment="Do you expect debug.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79502" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect cacls.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79501" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect attrib.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79500" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect at.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79499" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect arp.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79498" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect runas.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79497" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Restrict guest access to DNS Log" datatype="int" id="oval:com.mcafee.oval:var:79496" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do you expect wscript.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79495" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect su.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79494" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect runonce.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79493" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect rdisk.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79492" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect posix.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79491" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect hyperterm.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79490" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect htimage.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79489" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect cscript.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79488" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect command.com to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79487" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect poledit.exe to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:79485" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Enable IP Forwarding" datatype="int" id="oval:com.mcafee.oval:var:79483" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Setup: Maximum Log Size (KB)" datatype="int" id="oval:com.mcafee.oval:var:79482" version="7">
      <possible_value hint="Disabled/Not Configured">9999999999</possible_value>
      <possible_restriction hint="Enabled. Range is 1024 to 2147483647">
        <restriction operation="greater than or equal">1024</restriction>
        <restriction operation="less than or equal">2147483647</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="System: Maximum Log Size (KB)" datatype="int" id="oval:com.mcafee.oval:var:79481" version="7">
      <possible_value hint="Disabled/Not Configured">9999999999</possible_value>
      <possible_restriction hint="Enabled. Range is 1024 to 2147483647">
        <restriction operation="greater than or equal">1024</restriction>
        <restriction operation="less than or equal">2147483647</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Security: Maximum Log Size (KB)" datatype="int" id="oval:com.mcafee.oval:var:79480" version="7">
      <possible_value hint="Disabled/Not Configured">9999999999</possible_value>
      <possible_restriction hint="Enabled. Range is 1024 to 2147483647">
        <restriction operation="greater than or equal">1024</restriction>
        <restriction operation="less than or equal">2147483647</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Application: Maximum Log Size (KB)" datatype="int" id="oval:com.mcafee.oval:var:79479" version="7">
      <possible_value hint="Disabled/Not Configured">9999999999</possible_value>
      <possible_restriction hint="Enabled. Range is 1024 to 2147483647">
        <restriction operation="greater than or equal">1024</restriction>
        <restriction operation="less than or equal">2147483647</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Require trusted path for credential entry" datatype="string" id="oval:com.mcafee.oval:var:79476" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow remote shell access" datatype="string" id="oval:com.mcafee.oval:var:79475" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="How many times unacknowledged IPv6 data is retransmitted" datatype="int" id="oval:com.mcafee.oval:var:79474" version="2" />
    <external_variable comment="IPv6 source routing protection level" datatype="int" id="oval:com.mcafee.oval:var:79473" version="2">
      <possible_value hint="No additional protection, source routed packets are allowed">0</possible_value>
      <possible_value hint="Medium, source routed packets ignored when IP forwarding is enabled">1</possible_value>
      <possible_value hint="Highest protection, source routing is completely disabled">2</possible_value>
    </external_variable>
    <external_variable comment="Setup Log: Retain old events" datatype="string" id="oval:com.mcafee.oval:var:79472" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="System Log: Retain old events" datatype="string" id="oval:com.mcafee.oval:var:79471" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Security Log: Retain old events" datatype="string" id="oval:com.mcafee.oval:var:79470" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Application Log: Retain old events" datatype="string" id="oval:com.mcafee.oval:var:79469" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allowed to access Credential Manager (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:79468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to create symbolic links (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:79465" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Credential Validation audit subcategory." datatype="string" id="oval:com.mcafee.oval:var:79462" version="2">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone\XPS Files/Documents" datatype="int" id="oval:com.mcafee.oval:var:79461" version="2">
      <possible_value hint="Enabled - Enabled">0</possible_value>
      <possible_value hint="Enabled - Disabled">3</possible_value>
      <possible_value hint="Enabled - Prompt">1</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone\Allow Scriptlets" datatype="int" id="oval:com.mcafee.oval:var:79460" version="2">
      <possible_value hint="Enabled - Enabled">0</possible_value>
      <possible_value hint="Enabled - Disabled">3</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone\XPS Files/Documents" datatype="int" id="oval:com.mcafee.oval:var:79459" version="2">
      <possible_value hint="Enabled - Enabled">0</possible_value>
      <possible_value hint="Enabled - Disabled">3</possible_value>
      <possible_value hint="Enabled - Prompt">1</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone\Download unsigned ActiveX controls" datatype="int" id="oval:com.mcafee.oval:var:79458" version="2">
      <possible_value hint="Enabled - Enabled">0</possible_value>
      <possible_value hint="Enabled - Disabled">3</possible_value>
      <possible_value hint="Enabled - Prompt">1</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Prevent deletion of temporary Internet Files and cookies" datatype="string" id="oval:com.mcafee.oval:var:79457" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent Fix Settings functionality" datatype="string" id="oval:com.mcafee.oval:var:79456" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Changing Proxy Settings" datatype="string" id="oval:com.mcafee.oval:var:79455" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Changing Connection Settings" datatype="string" id="oval:com.mcafee.oval:var:79454" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Security Page" datatype="string" id="oval:com.mcafee.oval:var:79453" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Privacy Page" datatype="string" id="oval:com.mcafee.oval:var:79452" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Advanced Page" datatype="string" id="oval:com.mcafee.oval:var:79451" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Password Authentication?" datatype="string" id="oval:com.mcafee.oval:var:79447" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="Allow Rhosts Authentication?" datatype="string" id="oval:com.mcafee.oval:var:79446" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="Allow X11 forwarding?" datatype="string" id="oval:com.mcafee.oval:var:79445" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="Allow Rhosts RSA Authentication?" datatype="string" id="oval:com.mcafee.oval:var:79444" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="Permit root login?" datatype="string" id="oval:com.mcafee.oval:var:79443" version="2">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="Should rhosts be ignored in SSH?" datatype="string" id="oval:com.mcafee.oval:var:79442" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="The number of other characters required by the policy" datatype="int" id="oval:com.mcafee.oval:var:79441" version="2" />
    <external_variable comment="What is the dhcpd logfile name? (ex: dhcpd.log)" datatype="string" id="oval:com.mcafee.oval:var:79440" version="1" />
    <external_variable comment="What is the NFS statd port?" datatype="string" id="oval:com.mcafee.oval:var:79439" version="1" />
    <external_variable comment="What is the NFS outgoing statd port?" datatype="string" id="oval:com.mcafee.oval:var:79438" version="1" />
    <external_variable comment="What is the NFS rquotad port?" datatype="string" id="oval:com.mcafee.oval:var:79437" version="1" />
    <external_variable comment="What is the NFS mountd port?" datatype="string" id="oval:com.mcafee.oval:var:79436" version="1" />
    <external_variable comment="What is the NFS UDP port for lockd?" datatype="string" id="oval:com.mcafee.oval:var:79435" version="1" />
    <external_variable comment="What is the NFS TCP port for lockd?" datatype="string" id="oval:com.mcafee.oval:var:79434" version="1" />
    <external_variable comment="Restrict Avahi port?" datatype="string" id="oval:com.mcafee.oval:var:79433" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="Number of client alive messages to send before disconnect" datatype="string" id="oval:com.mcafee.oval:var:79432" version="1" />
    <external_variable comment="Timeout interval (in seconds)" datatype="string" id="oval:com.mcafee.oval:var:79431" version="1" />
    <external_variable comment="Gnome desktop lockout idle time (in minutes)" datatype="int" id="oval:com.mcafee.oval:var:79430" version="2" />
    <external_variable comment="Daemon Umask setting (027 is default)" datatype="string" id="oval:com.mcafee.oval:var:79429" version="1" />
    <external_variable comment="Status of the GNOME automounter" datatype="string" id="oval:com.mcafee.oval:var:79427" version="1">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Windows Media Services Service (WMServer) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:79426" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Storage Server Service (Remote_Storage_Server) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:79425" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="BINLSVC/WDSServer Startup Type" datatype="int" id="oval:com.mcafee.oval:var:79424" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="DEP Configuration setting" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:79422" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="OptIn (Default setting)">OptIn</possible_value>
      <possible_value hint="OptOut (Some processes do not support DEP)">OptOut</possible_value>
      <possible_value hint="AlwaysOn (Full DEP coverage)">AlwaysOn</possible_value>
      <possible_value hint="AlwaysOff (No DEP coverage)">AlwaysOff</possible_value>
    </external_variable>
    <external_variable comment="What is the expected password warning value?" datatype="int" id="oval:com.mcafee.oval:var:79421" version="2" />
    <external_variable comment="The minimum password length (minlen) required length by the policy" datatype="int" id="oval:com.mcafee.oval:var:79420" version="2" />
    <external_variable comment="What is the minimum password age (in days)?" datatype="int" id="oval:com.mcafee.oval:var:79419" version="1" />
    <external_variable comment="What is the maximum password age (in days)?" datatype="int" id="oval:com.mcafee.oval:var:79418" version="1" />
    <external_variable comment="icmp_ignore_bogus_error_messages should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79417" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="all.log_martians should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79416" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="default.send_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79415" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="all.send_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79414" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="icmp_echo_ignore_broadcasts should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79413" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="default.accept_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79412" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="default.rp_filter should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79411" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="all.secure_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79410" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="all.accept_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79409" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="all.accept_source_route should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79408" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="default.accept_source_route should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79407" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="rp_filter should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:79406" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="What is the expected max backlog value?" datatype="int" id="oval:com.mcafee.oval:var:79405" version="1" />
    <external_variable comment="Allow UIAccess applications to prompt for elevation w/o secure desktop" datatype="int" id="oval:com.mcafee.oval:var:79404" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have EXECUTE access?" datatype="boolean" id="oval:com.mcafee.oval:var:78648" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access?" datatype="boolean" id="oval:com.mcafee.oval:var:78647" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access?" datatype="boolean" id="oval:com.mcafee.oval:var:78646" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access?" datatype="boolean" id="oval:com.mcafee.oval:var:78645" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access?" datatype="boolean" id="oval:com.mcafee.oval:var:78644" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access?" datatype="boolean" id="oval:com.mcafee.oval:var:78643" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access?" datatype="boolean" id="oval:com.mcafee.oval:var:78642" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access?" datatype="boolean" id="oval:com.mcafee.oval:var:78641" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access?" datatype="boolean" id="oval:com.mcafee.oval:var:78640" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="This is the minimum version of Windows Media Player browser plugin that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:78460" version="1" />
    <external_variable comment="This is the minimum version of Java browser plugin that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:78450" version="1" />
    <external_variable comment="This is the minimum version of Real Player browser plugin that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:78444" version="1" />
    <external_variable comment="This is the minimum version of Quick Time Player browser plugin that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:78433" version="1" />
    <external_variable comment="This is the minimum version of Adobe ShockWave Player browser plugin that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:78426" version="1" />
    <external_variable comment="This is the minimum version of Adobe Flash Player browser plugin that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:78414" version="1" />
    <external_variable comment="This is the minimum version of Adobe Reader browser plugin that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:78412" version="1" />
    <external_variable comment="What security level of network checking should be set?" datatype="int" id="oval:com.mcafee.oval:var:76389" version="1">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Very Low">0</possible_value>
      <possible_value hint="Low">1</possible_value>
      <possible_value hint="Medium">2</possible_value>
      <possible_value hint="High">3</possible_value>
      <possible_value hint="Very High">4</possible_value>
    </external_variable>
    <external_variable comment="CA Internet Security Suite Minimum required product version" datatype="version" id="oval:com.mcafee.oval:var:75901" version="1" />
    <external_variable comment="McAfee Solid Core Agent Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:75870" version="1" />
    <external_variable comment="AhnLab V3Net for Windows Server Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:75857" version="1" />
    <external_variable comment="Windows Live Mail Email Client Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:75852" version="1" />
    <external_variable comment="AhnLab V3Net for Windows Server Minimum Scan Engine Version" datatype="version" id="oval:com.mcafee.oval:var:75841" version="1" />
    <external_variable comment="Microsoft Office Outlook 2003 Email Client Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:75825" version="1" />
    <external_variable comment="Microsoft Office Outlook 2007 Email Client Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:75774" version="1" />
    <external_variable comment="Microsoft Outlook Express Email Client Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:75767" version="1" />
    <external_variable comment="Eudora Email Client Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:75761" version="1" />
    <external_variable comment="Mozilla Thunderbird Email Client Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:75753" version="1" />
    <external_variable comment="Yahoo! Messenger Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75746" version="1" />
    <external_variable comment="Adobe Flash Player Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75741" version="1" />
    <external_variable comment="Adobe Reader Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75727" version="1" />
    <external_variable comment="Firefox browser Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75710" version="1" />
    <external_variable comment="Skype Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75695" version="1" />
    <external_variable comment="QuickTime Player Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75691" version="1" />
    <external_variable comment="VLC media player Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75686" version="1" />
    <external_variable comment="iTunes Minimum required product version on the Windows Machine" datatype="version" id="oval:com.mcafee.oval:var:75681" version="1" />
    <external_variable comment="Apple iTunes Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75666" version="1" />
    <external_variable comment="Opera Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75661" version="1" />
    <external_variable comment="Apple Safari Minimum required product version on the Mac Machine" datatype="version" id="oval:com.mcafee.oval:var:75656" version="1" />
    <external_variable comment="Turn On Compatiblity HTTPS Listener" datatype="string" id="oval:com.mcafee.oval:var:74988" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn On Compatiblity HTTP Listener" datatype="string" id="oval:com.mcafee.oval:var:74987" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Specify channel binding token hardening level" datatype="string" id="oval:com.mcafee.oval:var:74986" version="2">
      <possible_value hint="None">None</possible_value>
      <possible_value hint="Relaxed">Relaxed</possible_value>
      <possible_value hint="Strict">Strict</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow CredSSP authentication - Service" datatype="string" id="oval:com.mcafee.oval:var:74985" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow CredSSP authentication - Client" datatype="string" id="oval:com.mcafee.oval:var:74984" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Configure Reliability WMI Providers" datatype="string" id="oval:com.mcafee.oval:var:74983" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Verify old and new Folder Redirection targets" datatype="string" id="oval:com.mcafee.oval:var:74982" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off numerical sorting in Windows Explorer" datatype="string" id="oval:com.mcafee.oval:var:74981" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Data Execution Prevention for Explorer" datatype="string" id="oval:com.mcafee.oval:var:74980" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable binding directly to IPropertySetStorage" datatype="string" id="oval:com.mcafee.oval:var:74979" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent Windows Anytime Upgrade from running" datatype="string" id="oval:com.mcafee.oval:var:74978" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Touch Panning" datatype="string" id="oval:com.mcafee.oval:var:74977" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable text prediction" datatype="string" id="oval:com.mcafee.oval:var:74976" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on Smart Card Plug and Play service" datatype="string" id="oval:com.mcafee.oval:var:74975" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Notify user of successful smart card driver installation" datatype="string" id="oval:com.mcafee.oval:var:74974" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow ECC certificates to be used for logon and authentication" datatype="string" id="oval:com.mcafee.oval:var:74973" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off sensors" datatype="string" id="oval:com.mcafee.oval:var:74972" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off location scripting" datatype="string" id="oval:com.mcafee.oval:var:74971" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off location" datatype="string" id="oval:com.mcafee.oval:var:74970" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent the computer from joining a homegroup" datatype="string" id="oval:com.mcafee.oval:var:74969" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off game updates" datatype="string" id="oval:com.mcafee.oval:var:74968" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow enhanced PINs for startup" datatype="string" id="oval:com.mcafee.oval:var:74967" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Deny write access to fixed drives not protected by BitLocker" datatype="string" id="oval:com.mcafee.oval:var:74966" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow users to log on using biometrics" datatype="string" id="oval:com.mcafee.oval:var:74965" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow the use of biometrics" datatype="string" id="oval:com.mcafee.oval:var:74964" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow domain users to logon using biometrics" datatype="string" id="oval:com.mcafee.oval:var:74963" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Autoplay for non-volume devices" datatype="string" id="oval:com.mcafee.oval:var:74962" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off SwitchBack Compatiblity Engine" datatype="string" id="oval:com.mcafee.oval:var:74961" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Problem Steps Recorder" datatype="string" id="oval:com.mcafee.oval:var:74960" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Application Telemetry" datatype="string" id="oval:com.mcafee.oval:var:74959" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Enable/Disable PerfTrack" datatype="string" id="oval:com.mcafee.oval:var:74958" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow users to access online troubleshooting content" datatype="string" id="oval:com.mcafee.oval:var:74957" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow users to access and run Troubleshooting Wizards" datatype="string" id="oval:com.mcafee.oval:var:74956" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Configure Security Policy for Scripted Diagnostics" datatype="string" id="oval:com.mcafee.oval:var:74955" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Configure Scheduled Maintenance Behavior" datatype="string" id="oval:com.mcafee.oval:var:74954" version="2">
      <possible_value hint="Troubleshooting Only">Troubleshoot</possible_value>
      <possible_value hint="Regular">Regular</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Configure MSI Corrupted File Recovery Behavior" datatype="string" id="oval:com.mcafee.oval:var:74953" version="2">
      <possible_value hint="Troubleshooting Only">Troubleshoot</possible_value>
      <possible_value hint="Prompt for Resolution">Prompt</possible_value>
      <possible_value hint="Silent">Silent</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on MSDT interactive communication with Support Provider" datatype="string" id="oval:com.mcafee.oval:var:74952" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Configure Scenario Execution Level" datatype="string" id="oval:com.mcafee.oval:var:74951" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Detect application failures caused by deprecated Windows DLLs" datatype="string" id="oval:com.mcafee.oval:var:74950" version="2">
      <possible_value hint="Detection and Troubleshooting Only">Enable Only</possible_value>
      <possible_value hint="Detection, Troubleshooting and Resolution">Enable Resolution</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Detect application failures caused by deprecated COM objects" datatype="string" id="oval:com.mcafee.oval:var:74949" version="2">
      <possible_value hint="Detection and Troubleshooting Only">Enable Only</possible_value>
      <possible_value hint="Detection, Troubleshooting and Resolution">Enable Resolution</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Skype Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74445" version="1" />
    <external_variable comment="This is the minimum version of Adobe Photoshop that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:74414" version="1" />
    <external_variable comment="This is the minimum version of Adobe Flash Professional that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:74409" version="1" />
    <external_variable comment="This is the minimum version of Adobe Acrobat that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:74400" version="1" />
    <external_variable comment="This is the minimum version of Adobe Reader that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:74395" version="1" />
    <external_variable comment="This is the minimum version of Yahoo Messenger that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:74390" version="1" />
    <external_variable comment="Google Talk Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74385" version="1" />
    <external_variable comment="Microsoft Office Communicator Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74351" version="1" />
    <external_variable comment="Apple Safari Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74340" version="1" />
    <external_variable comment="Microsoft Security Essentials Maximum DAT Age in seconds" datatype="int" id="oval:com.mcafee.oval:var:74329" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Microsoft Security Essentials Maximum DAT Age in seconds" datatype="int" id="oval:com.mcafee.oval:var:74320" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Microsoft Security Essentials Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74310" version="1" />
    <external_variable comment="Google Chrome Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74291" version="1" />
    <external_variable comment="Opera Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74286" version="1" />
    <external_variable comment="Microsoft Internet Explorer Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74244" version="1" />
    <external_variable comment="Mozilla Firefox Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74218" version="1" />
    <external_variable comment="Sophos Client Firewall Minimum Product Version (Eg. 1.5.4 R2)" datatype="version" id="oval:com.mcafee.oval:var:74105" version="1" />
    <external_variable comment="Sophos SafeGuard Disk Encryption Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:74097" version="1" />
    <external_variable comment="Computer Associates Internet Security Suite AntiVirus Maximin DAT Age in seconds (vet.dat)" datatype="int" id="oval:com.mcafee.oval:var:74083" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Desired timeout value" datatype="int" id="oval:com.mcafee.oval:var:73995" version="3" />
    <external_variable comment="AhnLab Internet Security Maximum DAT Age in Seconds." datatype="int" id="oval:com.mcafee.oval:var:73959" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Kingsoft Internet Security Antivirus Maximum DAT age in seconds" datatype="int" id="oval:com.mcafee.oval:var:73949" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="AhnLab Internet Security Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:73920" version="1">
      <possible_restriction hint="Enter version in the format &quot;x.y&quot;. For example, the product version for &quot;AhnLab V3 Internet Security 8.0&quot; is &quot;8.0&quot;">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Computer Associates Maximum DAT age in seconds (vet.dat)" datatype="int" id="oval:com.mcafee.oval:var:73915" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Jiangmin Antivirus Maximum DAT age in seconds" datatype="int" id="oval:com.mcafee.oval:var:73906" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="User attribute value" datatype="string" id="oval:com.mcafee.oval:var:73881" version="1" />
    <external_variable comment="User attribute" datatype="string" id="oval:com.mcafee.oval:var:73880" version="1" />
    <external_variable comment="User to check" datatype="string" id="oval:com.mcafee.oval:var:73879" version="1" />
    <external_variable comment="ZoneAlarm AntiVirus Maximum DAT Age in Seconds." datatype="int" id="oval:com.mcafee.oval:var:73790" version="2">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="McAfee ePO Agent (for Mac) Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:73779" version="1" />
    <local_variable comment="McAfee ePO Agent Minimum Product Version" datatype="string" id="oval:com.mcafee.oval:var:73778" version="1">
      <concat>
        <object_component item_field="subexpression" object_ref="oval:com.mcafee.oval:obj:73775" />
        <literal_component>.</literal_component>
        <object_component item_field="subexpression" object_ref="oval:com.mcafee.oval:obj:73776" />
      </concat>
    </local_variable>
    <external_variable comment="Kaspersky AntiVirus Maximum DAT Age in Seconds." datatype="int" id="oval:com.mcafee.oval:var:73743" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Dr Web AntiVirus DAT age in seconds." datatype="int" id="oval:com.mcafee.oval:var:73425" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="F-Prot AntiVirus Maximum DAT file age in seconds" datatype="int" id="oval:com.mcafee.oval:var:73404" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="CA Internet Security Suite AntiVirus Minimum required product version" datatype="version" id="oval:com.mcafee.oval:var:73394" version="1" />
    <external_variable comment="Ashampoo Antivirus Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:73358" version="1" />
    <external_variable comment="Ashampoo Antivirus Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:73352" version="1" />
    <external_variable comment="Maximum NOD32 AntiVirus/Smart Security DAT file age in seconds" datatype="int" id="oval:com.mcafee.oval:var:73323" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="McAfee Security for Mac Anti-malware Maximum DAT age in seconds" datatype="int" id="oval:com.mcafee.oval:var:73296" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <local_variable comment="McAfee Security for Mac AntiMalware DAT Age in Seconds - avvscan.dat" datatype="int" id="oval:com.mcafee.oval:var:73295" version="1">
      <time_difference format_2="seconds_since_epoch">
        <object_component item_field="m_time" object_ref="oval:com.mcafee.oval:obj:73293" />
      </time_difference>
    </local_variable>
    <external_variable comment="optional:This is a reserved field that the shadow file may use in the future" datatype="string" id="oval:com.mcafee.oval:var:73282" version="1" />
    <external_variable comment="McAfee Security for Mac Minimum required product version" datatype="version" id="oval:com.mcafee.oval:var:73145" version="1" />
    <local_variable comment="McAfee Security for Mac -Concatinating Version and Build Number" datatype="string" id="oval:com.mcafee.oval:var:73144" version="1">
      <concat>
        <object_component item_field="subexpression" object_ref="oval:com.mcafee.oval:obj:73141" />
        <literal_component>.</literal_component>
        <object_component item_field="subexpression" object_ref="oval:com.mcafee.oval:obj:73142" />
      </concat>
    </local_variable>
    <external_variable comment="McAfee ePO Agent (for Linux) Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:72531" version="1" />
    <external_variable comment="Maximum Sunbelt CounterSpy DAT file age in seconds" datatype="int" id="oval:com.mcafee.oval:var:72478" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Maximum Sunbelt CounterSpy Enterprise Agent DAT file age in seconds" datatype="int" id="oval:com.mcafee.oval:var:72466" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Microsoft OneCare Live Minimum DAT Version" datatype="version" id="oval:com.mcafee.oval:var:72452" version="1" />
    <external_variable comment="Microsoft OneCare Live Minimum Engine Version" datatype="version" id="oval:com.mcafee.oval:var:72447" version="1" />
    <external_variable comment="Sunbelt CounterSpy Enterprise Agent Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:72440" version="1" />
    <external_variable comment="Panda Antivirus Pro Maximum DAT age in seconds" datatype="int" id="oval:com.mcafee.oval:var:72139" version="2">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Other Execute" datatype="boolean" id="oval:com.mcafee.oval:var:72129" version="1">
      <possible_value hint="If everyone has the specified permissions">1</possible_value>
      <possible_value hint="If everyone does not have the specified permissions">0</possible_value>
    </external_variable>
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:72128" version="1" />
    <external_variable comment="What directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:72127" version="1" />
    <external_variable comment="This is the minimum version of Panda Antivirus Pro software that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:72086" version="2" />
    <external_variable comment="Run PowerShell at user logon and logoff" datatype="string" id="oval:com.mcafee.oval:var:72071" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Run PowerShell at computer startup and shutdown" datatype="string" id="oval:com.mcafee.oval:var:72070" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Tape Drives: Deny execute access" datatype="string" id="oval:com.mcafee.oval:var:72069" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Removable Disks: Deny execute access" datatype="string" id="oval:com.mcafee.oval:var:72068" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Floppy Drives: Deny execute access" datatype="string" id="oval:com.mcafee.oval:var:72067" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="CD and DVD: Deny execute access" datatype="string" id="oval:com.mcafee.oval:var:72066" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow restore of system to default state" datatype="string" id="oval:com.mcafee.oval:var:72065" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on Desktop Background Slideshow (Plugged In)" datatype="string" id="oval:com.mcafee.oval:var:72064" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on Desktop Background Slideshow (On Battery)" datatype="string" id="oval:com.mcafee.oval:var:72063" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Automatic Sleep with Open Network Files (Plugged In)" datatype="string" id="oval:com.mcafee.oval:var:72062" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Automatic Sleep with Open Network Files (On Battery)" datatype="string" id="oval:com.mcafee.oval:var:72061" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Applications to Prevent Automatic Sleep (Plugged In)" datatype="string" id="oval:com.mcafee.oval:var:72060" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Applications to Prevent Automatic Sleep (On Battery)" datatype="string" id="oval:com.mcafee.oval:var:72059" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Always use custom logon background" datatype="string" id="oval:com.mcafee.oval:var:72058" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Require strict target SPN match on remote procedure calls" datatype="string" id="oval:com.mcafee.oval:var:72057" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Short name creation options" datatype="string" id="oval:com.mcafee.oval:var:72056" version="2">
      <possible_value hint="Enable on all volumes">Enable All</possible_value>
      <possible_value hint="Disable on all volumes">Disable All</possible_value>
      <possible_value hint="Enable / Disable on a per volume basis">Per Volume</possible_value>
      <possible_value hint="Disable on all data volumes">Disable Data</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Enable NTFS pagefile encryption" datatype="string" id="oval:com.mcafee.oval:var:72055" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow encryption on all NTFS volumes" datatype="string" id="oval:com.mcafee.oval:var:72054" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow compression on all NTFS volumes" datatype="string" id="oval:com.mcafee.oval:var:72053" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable delete notifications on all volumes" datatype="string" id="oval:com.mcafee.oval:var:72052" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Lock Enhanced Storage when the computer is locked" datatype="string" id="oval:com.mcafee.oval:var:72051" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow password authentication of Enhanced Storage devices" datatype="string" id="oval:com.mcafee.oval:var:72050" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow non-Enhanced Storage removable devices" datatype="string" id="oval:com.mcafee.oval:var:72049" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow only USB root hub connect" datatype="string" id="oval:com.mcafee.oval:var:72048" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Enhanced Storage certificate provisioning" datatype="string" id="oval:com.mcafee.oval:var:72047" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent redirection of USB devices" datatype="string" id="oval:com.mcafee.oval:var:72046" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Specify search order" datatype="string" id="oval:com.mcafee.oval:var:72045" version="2">
      <possible_value hint="Search Windows Update first">First</possible_value>
      <possible_value hint="Search Windows Update last">Last</possible_value>
      <possible_value hint="Do not search Windows Update">Dont</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent error report sending" datatype="string" id="oval:com.mcafee.oval:var:72044" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent device metadata retrieval" datatype="string" id="oval:com.mcafee.oval:var:72043" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Override print driver execution compatibility setting" datatype="string" id="oval:com.mcafee.oval:var:72042" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Only use Package Point and Print" datatype="string" id="oval:com.mcafee.oval:var:72041" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Extend Point and Print connection to search Windows Update" datatype="string" id="oval:com.mcafee.oval:var:72040" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Execute print drivers in isolated processes" datatype="string" id="oval:com.mcafee.oval:var:72039" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Require domain users to elevate" datatype="string" id="oval:com.mcafee.oval:var:72038" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Route all traffic through the internal network" datatype="string" id="oval:com.mcafee.oval:var:72037" version="2">
      <possible_value hint="Enabled State">Enabled</possible_value>
      <possible_value hint="Disabled State">Disabled</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not show local access only network icon" datatype="string" id="oval:com.mcafee.oval:var:72036" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Hash Publication for BranchCache" datatype="string" id="oval:com.mcafee.oval:var:72035" version="2">
      <possible_value hint="Allow hash publication for all shared folder">Allow All</possible_value>
      <possible_value hint="Allow hash publicatoin only for shared folders on which BranchCache is enabled">Allow Only</possible_value>
      <possible_value hint="Disallow hash publication on all shared folder">Disallow</possible_value>
      <possible_value hint="Disabled / Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Set BranchCache Distributed Cache mode" datatype="string" id="oval:com.mcafee.oval:var:72034" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on BranchCache" datatype="string" id="oval:com.mcafee.oval:var:72033" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow the BITS client to use Windows Branch Cache" datatype="string" id="oval:com.mcafee.oval:var:72032" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Outgoing NTLM traffic" datatype="string" id="oval:com.mcafee.oval:var:72031" version="2">
      <possible_value hint="Allow all (This is also the equivalent of Not Defined)">Allow All</possible_value>
      <possible_value hint="Audit all">Audit All</possible_value>
      <possible_value hint="Deny all">Deny All</possible_value>
    </external_variable>
    <external_variable comment="NTLM authentication in domain" datatype="string" id="oval:com.mcafee.oval:var:72030" version="2">
      <possible_value hint="Disable (This is also the equivalent of Not Defined)">Disabled</possible_value>
      <possible_value hint="Deny for domain accounts to domain servers">Accounts to Servers</possible_value>
      <possible_value hint="Deny for domain accounts">Deny Accounts</possible_value>
      <possible_value hint="Deny for domain servers">Deny Servers</possible_value>
      <possible_value hint="Deny all">Deny All</possible_value>
    </external_variable>
    <external_variable comment="Incoming NTLM traffic" datatype="string" id="oval:com.mcafee.oval:var:72029" version="2">
      <possible_value hint="Allow all (This is also the equivalent of Not Defined)">Allow All</possible_value>
      <possible_value hint="Deny all domain accounts">Deny Domain</possible_value>
      <possible_value hint="Deny all accounts">Deny All</possible_value>
    </external_variable>
    <external_variable comment="Audit NTLM authentication" datatype="string" id="oval:com.mcafee.oval:var:72028" version="2">
      <possible_value hint="Disable (This is also the equivalent of Not Defined)">Disabled</possible_value>
      <possible_value hint="Enable for domain accounts to domain servers">Accounts to Servers</possible_value>
      <possible_value hint="Enable for domain accounts">Enable Accounts</possible_value>
      <possible_value hint="Enable for domain servers">Enable Servers</possible_value>
      <possible_value hint="Enable all">Enable All</possible_value>
    </external_variable>
    <external_variable comment="Audit incoming NTLM traffic" datatype="string" id="oval:com.mcafee.oval:var:72027" version="2">
      <possible_value hint="Disable (This is also the equivalent of Not Defined)">Disabled</possible_value>
      <possible_value hint="Enable auditing for domain accounts">Enable Domain</possible_value>
      <possible_value hint="Enable auditing for all accounts">Enable All</possible_value>
    </external_variable>
    <external_variable comment="Server exceptions for domain (Ex: server1|server2|server3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:72026" version="2" />
    <external_variable comment="Server exceptions for NTLM (Ex: server1|server2|server3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:72024" version="2" />
    <external_variable comment="Configure encryption types allowed for Kerberos" datatype="int" id="oval:com.mcafee.oval:var:72022" version="2" />
    <external_variable comment="Allow PKU2U authentication requests" datatype="string" id="oval:com.mcafee.oval:var:72021" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow LocalSystem NULL session fallback" datatype="string" id="oval:com.mcafee.oval:var:72020" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Local System to use computer identity for NTLM" datatype="string" id="oval:com.mcafee.oval:var:72019" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Server SPN target name validation level" datatype="string" id="oval:com.mcafee.oval:var:72018" version="2">
      <possible_value hint="Off (This is also the equivalent of Not Defined)">Off</possible_value>
      <possible_value hint="Accept if provided by client">Accepted</possible_value>
      <possible_value hint="Required from client">Required</possible_value>
    </external_variable>
    <external_variable comment="Audit policy change subcategory." datatype="string" id="oval:com.mcafee.oval:var:72017" version="2">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Report no logon server" datatype="string" id="oval:com.mcafee.oval:var:72016" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off autoplay" datatype="int" id="oval:com.mcafee.oval:var:72015" version="2">
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_value hint="All drives">255</possible_value>
      <possible_value hint="CD-ROM and removable media drives">181</possible_value>
    </external_variable>
    <external_variable comment="Make USB storage device read-only" datatype="int" id="oval:com.mcafee.oval:var:72014" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="WebDAV basic authentication" datatype="int" id="oval:com.mcafee.oval:var:72013" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled for SSL shares only">1</possible_value>
      <possible_value hint="Enabled for all shares">2</possible_value>
    </external_variable>
    <external_variable comment="Disable dial-in capabilities" datatype="int" id="oval:com.mcafee.oval:var:72012" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Share passwords hidden" datatype="int" id="oval:com.mcafee.oval:var:72011" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Server Administrative Shares" datatype="int" id="oval:com.mcafee.oval:var:72010" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="System File Checker progress meter status" datatype="int" id="oval:com.mcafee.oval:var:72009" version="2">
      <possible_value hint="Not displayed (default)">0</possible_value>
      <possible_value hint="Displayed">1</possible_value>
    </external_variable>
    <external_variable comment="System File Checker scan status" datatype="int" id="oval:com.mcafee.oval:var:72008" version="2">
      <possible_value hint="Do not scan protected files at boot (default)">0</possible_value>
      <possible_value hint="Scan protected files at every boot">1</possible_value>
      <possible_value hint="Scan protected files once">2</possible_value>
    </external_variable>
    <external_variable comment="System File Checker status" datatype="int" id="oval:com.mcafee.oval:var:72007" version="2">
      <possible_value hint="Enabled (default)">0</possible_value>
      <possible_value hint="Disabled, prompt at reboot to re-enable">1</possible_value>
      <possible_value hint="Disabled at next boot only, no prompt to re-enable">2</possible_value>
      <possible_value hint="Enabled, with popups disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Protect against computer browser spoofing" datatype="int" id="oval:com.mcafee.oval:var:72006" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Avira AntiVir Personal / Avira free AntiVirus DAT age in seconds." datatype="int" id="oval:com.mcafee.oval:var:68502" version="2">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Maximum age of McAfee LinuxShield DAT file (in seconds)" datatype="int" id="oval:com.mcafee.oval:var:68469" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="McAfee LinuxShield Minimum required product version" datatype="string" id="oval:com.mcafee.oval:var:68455" version="2">
      <possible_restriction hint="Enter version in the format &quot;Version-Release&quot;. For example, the product version for &quot;LinuxShield-1.5.0.-161-i386&quot; is &quot;1.5.0-161&quot; where 1.5.0 is the Version and 161 is Release">
        <restriction operation="pattern match">[\d.\w]+-[\d.\w]+</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="avast! AntiVirus Maximum DAT Age in Seconds." datatype="int" id="oval:com.mcafee.oval:var:68443" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Maximum Trend Micro Internet Security/AntiVirus plus AntiSpyware DAT file age in seconds" datatype="int" id="oval:com.mcafee.oval:var:68393" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Maximum AVG AntiVirus DAT file age in seconds" datatype="int" id="oval:com.mcafee.oval:var:67980" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="The age of the currently installed Rising Internet Security DAT in seconds" datatype="int" id="oval:com.mcafee.oval:var:67957" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Rising Internet Security Minimum Version" datatype="version" id="oval:com.mcafee.oval:var:67949" version="1" />
    <external_variable comment="This is the minimum version of McAfee HIPS Content that should be on the system." datatype="int" id="oval:com.mcafee.oval:var:67936" version="2">
      <possible_restriction hint="Enter Security Content version in the format XXXX. For example, if complete version is 8.x.x.yyyy in UI, enter only build version as input which is yyyy.">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="RegEx?:" datatype="string" id="oval:com.mcafee.oval:var:67903" version="1" />
    <external_variable comment="Filename?" datatype="string" id="oval:com.mcafee.oval:var:67902" version="1" />
    <external_variable comment="Path?" datatype="string" id="oval:com.mcafee.oval:var:67901" version="1" />
    <external_variable comment="Sticky bit" datatype="boolean" id="oval:com.mcafee.oval:var:67893" version="1">
      <possible_value hint="Sticky enabled">1</possible_value>
      <possible_value hint="Sticky disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Set Group ID" datatype="boolean" id="oval:com.mcafee.oval:var:67892" version="1">
      <possible_value hint="Set Group ID enabled">1</possible_value>
      <possible_value hint="Set Group ID disabled">0</possible_value>
    </external_variable>
    <external_variable comment="File? (exports)" datatype="string" id="oval:com.mcafee.oval:var:67891" version="1" />
    <external_variable comment="Path? (/etc" datatype="string" id="oval:com.mcafee.oval:var:67890" version="1" />
    <external_variable comment="File? (exports)" datatype="string" id="oval:com.mcafee.oval:var:67885" version="1" />
    <external_variable comment="Path? (/etc" datatype="string" id="oval:com.mcafee.oval:var:67884" version="1" />
    <external_variable comment="Fileset? (example: bos.net.nis.server" datatype="string" id="oval:com.mcafee.oval:var:67880" version="1" />
    <external_variable comment="RegEx?:" datatype="string" id="oval:com.mcafee.oval:var:67871" version="1" />
    <external_variable comment="Filename?" datatype="string" id="oval:com.mcafee.oval:var:67870" version="1" />
    <external_variable comment="Path?" datatype="string" id="oval:com.mcafee.oval:var:67869" version="1" />
    <external_variable comment="What is the root of user home directories? (e.g. /home)" datatype="string" id="oval:com.mcafee.oval:var:67852" version="1" />
    <external_variable comment="What is the root of user home directories? (e.g. /home)" datatype="string" id="oval:com.mcafee.oval:var:67848" version="1" />
    <external_variable comment="Trend Micro OfficeScan Anti-Spyware Maximum DAT age in seconds" datatype="int" id="oval:com.mcafee.oval:var:67839" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="TrendMicro OfficeScan Antivirus Component maximum DAT age in seconds." datatype="int" id="oval:com.mcafee.oval:var:67831" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Which account should not exist?" datatype="string" id="oval:com.mcafee.oval:var:67793" version="1" />
    <external_variable comment="Startup type for Routing and Remote Access" datatype="int" id="oval:com.mcafee.oval:var:668301" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Microsoft .NET Framework NGEN v2.0.50727_X86" datatype="int" id="oval:com.mcafee.oval:var:668297" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Fax" datatype="int" id="oval:com.mcafee.oval:var:668277" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Telnet" datatype="int" id="oval:com.mcafee.oval:var:668273" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Protected Storage" datatype="int" id="oval:com.mcafee.oval:var:668269" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Simple Mail Transport Protocol (SMTP)" datatype="int" id="oval:com.mcafee.oval:var:668265" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="This is the minimum version of McAfeeEndpoint Encryption FF that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:66266" version="1" />
    <external_variable comment="This is the minimum version of McAfeeEndpoint Encryption PC that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:66216" version="1" />
    <external_variable comment="ipv6 should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:662035" version="1">
      <possible_value hint="Disabled">1</possible_value>
      <possible_value hint="Enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Logfile size limit - Standard Profile" datatype="int" id="oval:com.mcafee.oval:var:66123" version="3" />
    <external_variable comment="Windows Firewall: Logfile path and name - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:66122" version="2" />
    <external_variable comment="Windows Firewall: Log Successful Connections - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:66121" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Log Dropped Packets - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:66120" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Logfile size limit - Domain Profile" datatype="int" id="oval:com.mcafee.oval:var:66119" version="3" />
    <external_variable comment="Windows Firewall: Logfile path and name - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:66118" version="2" />
    <external_variable comment="Windows Firewall: Log Successful Connections - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:66117" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Log Dropped Packets - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:66116" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Pipe delimited list of shares: (ex: share1|share2|share3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:66081" version="2" />
    <external_variable comment="Pipe delimited list of pipes: (ex: pipe1|pipe2|pipe3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:66079" version="2" />
    <external_variable comment="Pipe delimited list of registry paths and subpaths: (ex: path1|path2|path3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:66077" version="2" />
    <external_variable comment="Pipe delimited list of registry paths: (ex: path1|path2|path3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:66075" version="2" />
    <external_variable comment="McAfee Host DLP Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:65643" version="1" />
    <external_variable comment="McAfee Host DLP Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:65642" version="1" />
    <external_variable comment="McAfee Consumer AntiVirus Minimum DAT Version" datatype="string" id="oval:com.mcafee.oval:var:65635" version="2" />
    <external_variable comment="Startup type for System Services: Power" datatype="int" id="oval:com.mcafee.oval:var:654175" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Numeric User ID of the owner (example: '0' for root)?" datatype="boolean" id="oval:com.mcafee.oval:var:64732" version="1">
      <possible_value hint="YES">true</possible_value>
      <possible_value hint="NO">false</possible_value>
    </external_variable>
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:64731" version="1" />
    <external_variable comment="Which directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:64730" version="1" />
    <external_variable comment="Numeric User ID of the group owner (example: '0' for root)?" datatype="int" id="oval:com.mcafee.oval:var:64726" version="1" />
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:64725" version="1" />
    <external_variable comment="Which directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:64724" version="1" />
    <external_variable comment="Numeric User ID of the owner (example: '0' for root)?" datatype="int" id="oval:com.mcafee.oval:var:64719" version="1" />
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:64718" version="1" />
    <external_variable comment="Which directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:64717" version="1" />
    <external_variable comment="optional:Other Execute" datatype="boolean" id="oval:com.mcafee.oval:var:64711" version="1">
      <possible_value hint="If everyone should have the specified permissions">true</possible_value>
      <possible_value hint="If everyone should not have the specified permissions">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Other Write" datatype="boolean" id="oval:com.mcafee.oval:var:64710" version="1">
      <possible_value hint="If everyone should have the specified permissions">true</possible_value>
      <possible_value hint="If everyone should not have the specified permissions">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Other Read" datatype="boolean" id="oval:com.mcafee.oval:var:64709" version="1">
      <possible_value hint="If everyone should have the specified permissions">true</possible_value>
      <possible_value hint="If everyone should not have the specified permissions">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Group Execute" datatype="boolean" id="oval:com.mcafee.oval:var:64708" version="1">
      <possible_value hint="If the group should have the specified permissions">true</possible_value>
      <possible_value hint="If the group should not have the specified permissions">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Group Write" datatype="boolean" id="oval:com.mcafee.oval:var:64707" version="1">
      <possible_value hint="If the group should have the specified permissions">true</possible_value>
      <possible_value hint="If the group should not have the specified permissions">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Group Read" datatype="boolean" id="oval:com.mcafee.oval:var:64706" version="1">
      <possible_value hint="If the group should have the specified permissions">true</possible_value>
      <possible_value hint="If the group should not have the specified permissions">false</possible_value>
    </external_variable>
    <external_variable comment="optional:User Execute" datatype="boolean" id="oval:com.mcafee.oval:var:64705" version="1">
      <possible_value hint="If the user should have the specified permissions">true</possible_value>
      <possible_value hint="If the user should not have the specified permissions">false</possible_value>
    </external_variable>
    <external_variable comment="optional:User Write" datatype="boolean" id="oval:com.mcafee.oval:var:64704" version="1">
      <possible_value hint="If the user should have the specified permissions">true</possible_value>
      <possible_value hint="If the user should not have the specified permissions">false</possible_value>
    </external_variable>
    <external_variable comment="optional:User Read" datatype="boolean" id="oval:com.mcafee.oval:var:64703" version="1">
      <possible_value hint="If the user should have the specified permissions">true</possible_value>
      <possible_value hint="If the user should not have the specified permissions">false</possible_value>
    </external_variable>
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:64702" version="1" />
    <external_variable comment="Which directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:64701" version="1" />
    <external_variable comment="Should SGID be enabled for this file?" datatype="boolean" id="oval:com.mcafee.oval:var:64693" version="1">
      <possible_value hint="True">true</possible_value>
      <possible_value hint="False">false</possible_value>
    </external_variable>
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:64692" version="1" />
    <external_variable comment="Which directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:64691" version="1" />
    <external_variable comment="Should SGID be enabled for this file?" datatype="boolean" id="oval:com.mcafee.oval:var:64685" version="1">
      <possible_value hint="True">true</possible_value>
      <possible_value hint="False">false</possible_value>
    </external_variable>
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:64684" version="1" />
    <external_variable comment="Which directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:64683" version="1" />
    <external_variable comment="PnP-X IP Bus Enumerator startup mode" datatype="int" id="oval:com.mcafee.oval:var:641518" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Net.Pipe Listener Adapter startup mode" datatype="int" id="oval:com.mcafee.oval:var:641513" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="PNRP Machine Name Publication Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:641508" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Message Queuing startup mode" datatype="int" id="oval:com.mcafee.oval:var:641503" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Microsoft Software Shadow Copy Provider startup mode" datatype="int" id="oval:com.mcafee.oval:var:641498" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="SL UI Notification Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:641493" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="TCP/IP Print Server startup mode" datatype="int" id="oval:com.mcafee.oval:var:641482" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Event Notification Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:641471" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Internal Database startup mode" datatype="int" id="oval:com.mcafee.oval:var:641466" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="AD RMS Logging Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:641461" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="SNMP Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:641456" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="File Server Storage Reports Manager startup mode" datatype="int" id="oval:com.mcafee.oval:var:641451" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Server for NFS startup mode" datatype="int" id="oval:com.mcafee.oval:var:641441" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for World Wide Web Publishing Service" datatype="int" id="oval:com.mcafee.oval:var:641432" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Offline Files" datatype="int" id="oval:com.mcafee.oval:var:641427" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: webclient" datatype="int" id="oval:com.mcafee.oval:var:641420" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: FTP Publishing Service" datatype="int" id="oval:com.mcafee.oval:var:641413" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Microsoft iSNS Server" datatype="int" id="oval:com.mcafee.oval:var:641409" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Remote Desktop Configuration" datatype="int" id="oval:com.mcafee.oval:var:641404" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Net.Msmq Listener Adapter" datatype="int" id="oval:com.mcafee.oval:var:641399" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Windows CardSpace" datatype="int" id="oval:com.mcafee.oval:var:641386" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Application Experience" datatype="int" id="oval:com.mcafee.oval:var:641381" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Peer Networking Identity Manager" datatype="int" id="oval:com.mcafee.oval:var:641376" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Net.Tcp Listener Adapter" datatype="int" id="oval:com.mcafee.oval:var:641372" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Removable Storage" datatype="int" id="oval:com.mcafee.oval:var:641367" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Windows System Resource Manager" datatype="int" id="oval:com.mcafee.oval:var:641363" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Active Directory Certificate Services" datatype="int" id="oval:com.mcafee.oval:var:641358" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Peer Name Resolution Protocol" datatype="int" id="oval:com.mcafee.oval:var:641353" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Windows Internet Name Service (WINS)" datatype="int" id="oval:com.mcafee.oval:var:641348" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Remote Desktop Services" datatype="int" id="oval:com.mcafee.oval:var:641343" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for TPM Base Services" datatype="int" id="oval:com.mcafee.oval:var:641339" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Software Protection" datatype="int" id="oval:com.mcafee.oval:var:641334" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Windows Process Activation Service" datatype="int" id="oval:com.mcafee.oval:var:641329" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for File Server Resource Manager" datatype="int" id="oval:com.mcafee.oval:var:641324" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Microsoft Fibre Channel Platform Registration Service" datatype="int" id="oval:com.mcafee.oval:var:641319" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: DHCP Server" datatype="int" id="oval:com.mcafee.oval:var:641314" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Network List Service" datatype="int" id="oval:com.mcafee.oval:var:641152" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Application Host Helper Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:635117" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Search startup mode" datatype="int" id="oval:com.mcafee.oval:var:635112" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Online Responder Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:635106" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Desktop UserMode Port Redirector startup mode" datatype="int" id="oval:com.mcafee.oval:var:635101" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Presentation Foundation Font Cache 3.0.0.0 startup mode" datatype="int" id="oval:com.mcafee.oval:var:635096" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Quality Windows Audio Video Experience startup mode" datatype="int" id="oval:com.mcafee.oval:var:635090" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Desktop Window Manager Session Manager startup mode" datatype="int" id="oval:com.mcafee.oval:var:635084" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Remote Desktop Session Broker" datatype="int" id="oval:com.mcafee.oval:var:635082" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: ASP .NET State Service" datatype="int" id="oval:com.mcafee.oval:var:635078" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Message Queuing Triggers" datatype="int" id="oval:com.mcafee.oval:var:635074" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Desktop Gateway startup mode" datatype="int" id="oval:com.mcafee.oval:var:635066" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Web Management Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:635061" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Remote Desktop Licensing" datatype="int" id="oval:com.mcafee.oval:var:635059" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Server For NIS startup mode" datatype="int" id="oval:com.mcafee.oval:var:635052" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: AD FS Web Agent Authentication Service" datatype="int" id="oval:com.mcafee.oval:var:635046" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Deployment Services server startup mode" datatype="int" id="oval:com.mcafee.oval:var:635041" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: IIS Admin Service" datatype="int" id="oval:com.mcafee.oval:var:635040" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Cluster Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:635032" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for System Services: Network Policy Server" datatype="int" id="oval:com.mcafee.oval:var:635031" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Message Queuing Down Level Clients" datatype="int" id="oval:com.mcafee.oval:var:635026" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Expected OS release?It should be in regex format. ^3\.10\.0\-123\.9\.1\.el7\.x86\_64$" datatype="string" id="oval:com.mcafee.oval:var:634948" version="2" />
    <external_variable comment="What should the minimum length of a password be? Examples: High Level Security is 8. Medium Level Security is 8. Low Level Security 8." datatype="int" id="oval:com.mcafee.oval:var:61825" version="2" />
    <external_variable comment="What should the maximum number of weeks before a password can be changed be? Examples: High Level Security is 13. Medium Level Security is 13. Low Level Security 52" datatype="int" id="oval:com.mcafee.oval:var:61818" version="2" />
    <external_variable comment="What should the number of days before the system issues a warning that a password change is required be? Examples: High Level Security is 5. Medium Level Security is 14. Low Security Level is 28" datatype="int" id="oval:com.mcafee.oval:var:61812" version="1" />
    <external_variable comment="What should the minimum of non-alphabetic characters in a password be? Examples: High Level Security is 2. Medium Level Security is 1." datatype="int" id="oval:com.mcafee.oval:var:61806" version="1" />
    <external_variable comment="What should the maximum number of weeks after maxage that an expired password can be changed by the user be? Examples: High Level Security is 2. Medium Level Security is 4. Low Level Security 8" datatype="int" id="oval:com.mcafee.oval:var:61801" version="1" />
    <external_variable comment="What should the number of previous passwords that a user cannot reuse be? Examples: High Level Security is 20. Medium Level Security is 4. Low Level Security 4" datatype="int" id="oval:com.mcafee.oval:var:61796" version="1" />
    <external_variable comment="What should the number of weeks before a password can be reset be? Examples: High Level Security is 13. Medium Level Security is 13. Low Level Security is 26." datatype="int" id="oval:com.mcafee.oval:var:61791" version="1" />
    <external_variable comment="What should the minimum number of alphabetic characters in a password be? Examples: High Level Security is 2. Medium Level Security is 1." datatype="int" id="oval:com.mcafee.oval:var:61786" version="1" />
    <external_variable comment="What should the minimum length of a password be? Examples: High Level Security is 8. Medium Level of Security is 8. Low Level of Security 8" datatype="int" id="oval:com.mcafee.oval:var:61781" version="1" />
    <external_variable comment="What should the minumum number of weeks before a password can be changed? Examples: High Level Security is 1. Medium Level Security is 4." datatype="int" id="oval:com.mcafee.oval:var:61774" version="1" />
    <external_variable comment="What should the minumum number of new characters in new passwords be? Examples: High Level Security is 4. Medium Level Security is 3." datatype="int" id="oval:com.mcafee.oval:var:61768" version="2" />
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:61626" version="1" />
    <external_variable comment="What directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:61625" version="1" />
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:61608" version="1" />
    <external_variable comment="What directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:61607" version="1" />
    <external_variable comment="Ensure account does not exist on the system" datatype="string" id="oval:com.mcafee.oval:var:61576" version="1" />
    <external_variable comment="Scan which filesystem for .netrc?" datatype="string" id="oval:com.mcafee.oval:var:61557" version="1" />
    <external_variable comment="What's the name of the file to check?" datatype="string" id="oval:com.mcafee.oval:var:61524" version="1" />
    <external_variable comment="What directory is the file located?" datatype="string" id="oval:com.mcafee.oval:var:61523" version="1" />
    <external_variable comment="Allowed to bypass traverse checking (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60154" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to load/unload device drivers (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60148" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to log on as a service (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60142" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Denied access from the network (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60136" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Denied logon as a service (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60130" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to enable trust for delegation(Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60124" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to shut down the system (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60118" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to modify firmware values (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60112" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to profile system performance (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60106" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to take ownership of files (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60100" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to generate security audits (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60094" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to lock pages in memory (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60088" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to remove computer from dock (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60082" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to replace a process token (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60076" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to backup files/directories (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60070" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to create a pagefile (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60064" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to create perm shared objects (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60058" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to create a token object (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60052" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to adjust memory quotas (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60046" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to debug programs (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60040" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Denied logon through Terminal Service (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60034" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to profile a single process (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60028" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to act as part of the OS (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60022" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Pipe delimited list of authorized accounts: (ex: user1|user2|user3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60016" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Denied logon as a batch job (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60010" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to add workstations to domain (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:60004" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to logon via Terminal Service (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59998" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to force shutdown remotely (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59992" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to restore files/directories (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59986" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to sync directory svc data (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59980" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to change the system time (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59974" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to manage audit and security (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59968" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to log on as a batch job (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59962" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to increase schedule priority (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59956" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Denied logon locally (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59950" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to perform volume maintenance (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59944" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to increase process work set (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59806" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to change the time zone (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59800" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to modify an object label (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59794" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allow Install on Demand (Internet Explorer)" datatype="int" id="oval:com.mcafee.oval:var:59769" version="1">
      <possible_value hint="Disabled">1</possible_value>
      <possible_value hint="Enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Remove Security tab" datatype="string" id="oval:com.mcafee.oval:var:59547" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Remove CD Burning features" datatype="string" id="oval:com.mcafee.oval:var:59546" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prompt for password on resume from hibernate / suspend" datatype="string" id="oval:com.mcafee.oval:var:59545" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Online" datatype="string" id="oval:com.mcafee.oval:var:59544" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off the 'Publish to Web' task for files and folders" datatype="string" id="oval:com.mcafee.oval:var:59543" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Help Ratings" datatype="string" id="oval:com.mcafee.oval:var:59542" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Help Experience Improvement Program" datatype="string" id="oval:com.mcafee.oval:var:59541" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Remove Default Programs Link from the Start Menu" datatype="string" id="oval:com.mcafee.oval:var:59540" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Password protect the screen saver" datatype="string" id="oval:com.mcafee.oval:var:59539" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Windows Movie Maker Saving to Online Video Hosting Provider" datatype="string" id="oval:com.mcafee.oval:var:59538" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Windows Movies Maker Automatic Codec Downloads" datatype="string" id="oval:com.mcafee.oval:var:59537" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on bandwidth optimization" datatype="int" id="oval:com.mcafee.oval:var:59536" version="3">
      <possible_value hint="Disabled">99</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="No optimization">14</possible_value>
      <possible_value hint="No full window drag">12</possible_value>
      <possible_value hint="Turn off background">8</possible_value>
      <possible_value hint="Full optimization (Use 8-bit color)">0</possible_value>
    </external_variable>
    <external_variable comment="Customization Warning Messages" datatype="string" id="oval:com.mcafee.oval:var:59535" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow only Vista or later connections" datatype="string" id="oval:com.mcafee.oval:var:59534" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Don’t Display the Getting Started Welcome Screen at Logon" datatype="string" id="oval:com.mcafee.oval:var:59533" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Always Use Classic Logon" datatype="string" id="oval:com.mcafee.oval:var:59532" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Windows Movie Maker Online Web Links" datatype="string" id="oval:com.mcafee.oval:var:59531" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Error Reporting" datatype="string" id="oval:com.mcafee.oval:var:59530" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off the Order Prints Picture Task" datatype="string" id="oval:com.mcafee.oval:var:59529" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Registration if URL Connection is Referring to Microsoft.com" datatype="string" id="oval:com.mcafee.oval:var:59528" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Internet File Association Service" datatype="string" id="oval:com.mcafee.oval:var:59527" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com" datatype="string" id="oval:com.mcafee.oval:var:59526" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Help and Support Center Microsoft Knowledge Base Search" datatype="string" id="oval:com.mcafee.oval:var:59525" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Help and Support Center Did You Know? Content" datatype="string" id="oval:com.mcafee.oval:var:59524" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Event Views Events.asp Links" datatype="string" id="oval:com.mcafee.oval:var:59523" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Automatic Root Certificates Update" datatype="string" id="oval:com.mcafee.oval:var:59522" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Access to All Windows Update Feature" datatype="string" id="oval:com.mcafee.oval:var:59521" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Reschedule Automatic Updates scheduled installations" datatype="int" id="oval:com.mcafee.oval:var:59520" version="5">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. (Value is in minutes)">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">60</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="No auto-restart for scheduled Automatic Updates installations" datatype="string" id="oval:com.mcafee.oval:var:59519" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Configure Automatic Updates" datatype="string" id="oval:com.mcafee.oval:var:59518" version="4">
      <possible_value hint="2 - Notify for download and notify for install">Notify</possible_value>
      <possible_value hint="3 - Auto download and notify for install">Auto_Notify</possible_value>
      <possible_value hint="4 - Auto download and schedule the install">Auto_Schedule</possible_value>
      <possible_value hint="5 - Allow local admin to choose settings">Admin</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not adjust default option to ‘Install Updates and Shut Down’ in Shut Down Windows Dialog box" datatype="string" id="oval:com.mcafee.oval:var:59517" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not display 'Install Updates and Shut Down' option in the Shut Down Windows dialog box" datatype="string" id="oval:com.mcafee.oval:var:59516" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow Windows Messenger to be run" datatype="string" id="oval:com.mcafee.oval:var:59515" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow users to connect remotely using Terminal Services" datatype="string" id="oval:com.mcafee.oval:var:59514" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow passwords to be saved" datatype="string" id="oval:com.mcafee.oval:var:59513" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable remote Desktop Sharing" datatype="string" id="oval:com.mcafee.oval:var:59512" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Deny all add-ons unless specifically allowed in the Add-on List" datatype="string" id="oval:com.mcafee.oval:var:59511" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Restrict File Download)" datatype="string" id="oval:com.mcafee.oval:var:59510" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Restrict ActiveX Install)" datatype="string" id="oval:com.mcafee.oval:var:59509" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Zone Elevation Protection)" datatype="string" id="oval:com.mcafee.oval:var:59508" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Scripted Window Security Restrictions)" datatype="string" id="oval:com.mcafee.oval:var:59507" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (MIME Sniffing)" datatype="string" id="oval:com.mcafee.oval:var:59506" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Consistent MIME Handling)" datatype="string" id="oval:com.mcafee.oval:var:59505" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (MK Protocol)" datatype="string" id="oval:com.mcafee.oval:var:59504" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow software to run or install even if the signature is invalid" datatype="string" id="oval:com.mcafee.oval:var:59503" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Crash Detection" datatype="string" id="oval:com.mcafee.oval:var:59502" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Security Zones: Use only machine settings" datatype="string" id="oval:com.mcafee.oval:var:59501" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Security Zones: Do not allow users to change policies" datatype="string" id="oval:com.mcafee.oval:var:59500" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Security Zones: Do not allow users to add/delete sites" datatype="string" id="oval:com.mcafee.oval:var:59499" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Make proxy settings per-machine (rather than per-user)" datatype="string" id="oval:com.mcafee.oval:var:59498" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow users to enable or disable add-ons" datatype="string" id="oval:com.mcafee.oval:var:59497" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable software update shell notifications on program launch" datatype="string" id="oval:com.mcafee.oval:var:59496" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Periodic Check for Internet Explorer software updates" datatype="string" id="oval:com.mcafee.oval:var:59495" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Automatic Install of Internet Explorer components" datatype="string" id="oval:com.mcafee.oval:var:59494" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Require trusted path for credential entry" datatype="string" id="oval:com.mcafee.oval:var:59493" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Update device driver searching" datatype="string" id="oval:com.mcafee.oval:var:59492" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off downloading of print drivers over HTTP" datatype="string" id="oval:com.mcafee.oval:var:59491" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off printing over HTTP" datatype="string" id="oval:com.mcafee.oval:var:59490" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Search Companion content file updates" datatype="string" id="oval:com.mcafee.oval:var:59489" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off the Windows Messenger Customer Experience Improvement Program" datatype="string" id="oval:com.mcafee.oval:var:59488" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Internet download for Web publishing and online ordering wizards" datatype="string" id="oval:com.mcafee.oval:var:59487" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off the Publish to Web task for files and folders" datatype="string" id="oval:com.mcafee.oval:var:59486" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="RPC Endpoint Mapper Client Authentication" datatype="string" id="oval:com.mcafee.oval:var:59485" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Solicited Remote Assistance" datatype="string" id="oval:com.mcafee.oval:var:59484" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Offer Remote Assistance" datatype="string" id="oval:com.mcafee.oval:var:59483" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Registry policy processing" datatype="string" id="oval:com.mcafee.oval:var:59482" version="3">
      <possible_value hint="Enabled: Do not apply during periodic background processing">DoNotApply</possible_value>
      <possible_value hint="Enabled: Process even if the GPOs have not changed">ProcessGPOs</possible_value>
      <possible_value hint="Enabled: Both checked">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not process the run once list" datatype="string" id="oval:com.mcafee.oval:var:59481" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not process the legacy run list" datatype="string" id="oval:com.mcafee.oval:var:59480" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Configure Outlook Express" datatype="string" id="oval:com.mcafee.oval:var:59479" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Notify antivirus programs when opening attachments" datatype="string" id="oval:com.mcafee.oval:var:59478" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Hide mechanisms to remove zone information" datatype="string" id="oval:com.mcafee.oval:var:59477" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not preserve zone information in file attachments" datatype="string" id="oval:com.mcafee.oval:var:59476" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prompt for password on resume from hibernate/suspend" datatype="string" id="oval:com.mcafee.oval:var:59475" version="1">
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent access to registry editing tools" datatype="string" id="oval:com.mcafee.oval:var:59474" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not store LAN Manager hash value" datatype="string" id="oval:com.mcafee.oval:var:59473" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prevent users from sharing files within their profile" datatype="string" id="oval:com.mcafee.oval:var:59472" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Enable indexing uncached Exchange folders" datatype="string" id="oval:com.mcafee.oval:var:59471" version="3">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow indexing of encrypted files" datatype="string" id="oval:com.mcafee.oval:var:59470" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Downloading of Game Information" datatype="string" id="oval:com.mcafee.oval:var:59469" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow Digital Locker to run" datatype="string" id="oval:com.mcafee.oval:var:59468" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Approved Installation Sites for ActiveX Controls" datatype="string" id="oval:com.mcafee.oval:var:59467" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on session logging" datatype="string" id="oval:com.mcafee.oval:var:59466" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (Plugged)" datatype="string" id="oval:com.mcafee.oval:var:59465" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Require a Password when a Computer Wakes (On Battery)" datatype="string" id="oval:com.mcafee.oval:var:59464" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Startup Sound" datatype="string" id="oval:com.mcafee.oval:var:59463" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Handwriting Recognition Error Reporting" datatype="string" id="oval:com.mcafee.oval:var:59462" version="3">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Always prompt client for password upon connection" datatype="string" id="oval:com.mcafee.oval:var:59461" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow drive redirection" datatype="string" id="oval:com.mcafee.oval:var:59460" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Enumerate administrator accounts on elevation" datatype="string" id="oval:com.mcafee.oval:var:59459" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Protect all network connections - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59458" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Prohibit unicast response to multicast or broadcast requests - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59457" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Prohibit notifications - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59456" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Do not allow exceptions - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59455" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Define inbound program exceptions - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59454" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Define inbound port exceptions - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59453" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow local program exceptions - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59452" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow local port exceptions - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59451" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow inbound UPnP framework exceptions - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59450" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow inbound Remote Desktop exceptions - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59449" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow inbound remote administration exception - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59448" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow inbound file and printer sharing exception - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:59447" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Protect all network connections - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59446" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Prohibit unicast response to multicast or broadcast requests - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59445" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Prohibit notifications - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59444" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Do not allow exceptions - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59443" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Define inbound program exceptions - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59442" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Define inbound port exceptions - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59441" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow local program exceptions - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59440" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow local port exceptions - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59439" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow inbound UPnP framework exceptions - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59438" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow inbound Remote Desktop exceptions - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59437" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow inbound remote administration exception - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59436" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow inbound file and printer sharing exception - Domain Profile" datatype="string" id="oval:com.mcafee.oval:var:59435" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound packet too big" datatype="string" id="oval:com.mcafee.oval:var:59155" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound packet too big" datatype="string" id="oval:com.mcafee.oval:var:59154" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow inbound mask request" datatype="string" id="oval:com.mcafee.oval:var:59153" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow inbound mask request" datatype="string" id="oval:com.mcafee.oval:var:59152" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow inbound timestamp request" datatype="string" id="oval:com.mcafee.oval:var:59151" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow inbound timestamp request" datatype="string" id="oval:com.mcafee.oval:var:59150" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound parameter problem" datatype="string" id="oval:com.mcafee.oval:var:59149" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound parameter problem" datatype="string" id="oval:com.mcafee.oval:var:59148" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound time exceeded" datatype="string" id="oval:com.mcafee.oval:var:59147" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound time exceeded" datatype="string" id="oval:com.mcafee.oval:var:59146" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow inbound router request" datatype="string" id="oval:com.mcafee.oval:var:59145" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow inbound router request" datatype="string" id="oval:com.mcafee.oval:var:59144" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow inbound echo request" datatype="string" id="oval:com.mcafee.oval:var:59143" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow inbound echo request" datatype="string" id="oval:com.mcafee.oval:var:59142" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow redirect" datatype="string" id="oval:com.mcafee.oval:var:59141" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow redirect" datatype="string" id="oval:com.mcafee.oval:var:59140" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound source quench" datatype="string" id="oval:com.mcafee.oval:var:59139" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound source quench" datatype="string" id="oval:com.mcafee.oval:var:59138" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound destination unreachable" datatype="string" id="oval:com.mcafee.oval:var:59137" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ICMP - Allow outbound destination unreachable" datatype="string" id="oval:com.mcafee.oval:var:59136" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Setup Log size (in bytes)" datatype="int" id="oval:com.mcafee.oval:var:59135" version="2" />
    <external_variable comment="Set Update Interval for NIS Subordinate Servers" datatype="int" id="oval:com.mcafee.oval:var:59133" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">999999999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 143999999">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">143999999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Set the Retry Interval for Password Sync Servers" datatype="int" id="oval:com.mcafee.oval:var:59131" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_restriction hint="Enabeld. Range is 1 to 600">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">600</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Set the Number of Retries for Password Sync Servers" datatype="int" id="oval:com.mcafee.oval:var:59129" version="2">
      <possible_value hint="Disabled">99</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 0 to 9">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">9</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Refresh Interval for Server Manager" datatype="int" id="oval:com.mcafee.oval:var:59128" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Value is in minutes.">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">34560</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Allow Asynchronous User Group Policy Processing When Loggon On Through Terminal Services" datatype="string" id="oval:com.mcafee.oval:var:59125" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do Not Display Server Manager Automatically at Logon" datatype="string" id="oval:com.mcafee.oval:var:59124" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do Not Display Initial Configuration Tasks Window Automatically at Logon" datatype="string" id="oval:com.mcafee.oval:var:59123" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn On Extensive Logging for Domain Controllers Running Server for NIS" datatype="string" id="oval:com.mcafee.oval:var:59122" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn On the Windows to NIS Password Sync for Migrated Users for Password Sync Servers" datatype="string" id="oval:com.mcafee.oval:var:59121" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn On Extensive Logging for Password Sync Servers" datatype="string" id="oval:com.mcafee.oval:var:59120" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Use Terminal Services Easy Print Printer Driver First" datatype="string" id="oval:com.mcafee.oval:var:59119" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Set Time Limit for Logoff of RemoteApp Sessions." datatype="int" id="oval:com.mcafee.oval:var:59118" version="2">
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_value hint="Immediately">0</possible_value>
      <possible_value hint="1 minute">60000</possible_value>
      <possible_value hint="5 minutes">300000</possible_value>
      <possible_value hint="10 minutes">600000</possible_value>
      <possible_value hint="15 minutes">900000</possible_value>
      <possible_value hint="30 minutes">1800000</possible_value>
      <possible_value hint="1 hour">3600000</possible_value>
      <possible_value hint="2 hours">7200000</possible_value>
      <possible_value hint="3 hours">10800000</possible_value>
      <possible_value hint="6 hours">21600000</possible_value>
      <possible_value hint="8 hours">28800000</possible_value>
      <possible_value hint="12 hours">43200000</possible_value>
      <possible_value hint="16 hours">57600000</possible_value>
      <possible_value hint="18 hours">64800000</possible_value>
      <possible_value hint="1 day">86400000</possible_value>
      <possible_value hint="2 days">172800000</possible_value>
      <possible_value hint="3 days">259200000</possible_value>
      <possible_value hint="4 days">345600000</possible_value>
      <possible_value hint="5 days">432000000</possible_value>
    </external_variable>
    <external_variable comment="Redirect Only the Default Client Printer" datatype="string" id="oval:com.mcafee.oval:var:59117" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Use TS Session Broker Load Balancing" datatype="string" id="oval:com.mcafee.oval:var:59116" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Remote Start of Unlisted Programs" datatype="string" id="oval:com.mcafee.oval:var:59115" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Simple Mail Transfer Protocol (SMTP) Service (SMTPSVC) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:59114" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Do not store LAN Manager hash value" datatype="int" id="oval:com.mcafee.oval:var:59113" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Default owner for objects" datatype="int" id="oval:com.mcafee.oval:var:59112" version="2">
      <possible_value hint="Administrators group">0</possible_value>
      <possible_value hint="Object creator">1</possible_value>
    </external_variable>
    <external_variable comment="IPSec exemptions" datatype="int" id="oval:com.mcafee.oval:var:59111" version="4">
      <possible_value hint="Multicast, broadcast, RSVP, Kerberos, and ISAKMP are exempt (default for Windows 2000 and Windows XP)">0</possible_value>
      <possible_value hint="Multicast, broadcast and ISAKMP are exempt">1</possible_value>
      <possible_value hint="RSVP, Kerberos and ISAKMP are exempt">2</possible_value>
      <possible_value hint="Only ISAKMP is exempt (default for Windows Server 2003)">3</possible_value>
    </external_variable>
    <external_variable comment="DCOM: Machine Launch Restrictions" datatype="string" id="oval:com.mcafee.oval:var:59110" version="1" />
    <external_variable comment="DCOM: Machine Access Restrictions" datatype="string" id="oval:com.mcafee.oval:var:59109" version="1" />
    <external_variable comment="Disable Autorun" datatype="int" id="oval:com.mcafee.oval:var:59108" version="3">
      <possible_value hint="Allow autorun">0</possible_value>
      <possible_value hint="Disable Autorun for all drives">255</possible_value>
    </external_variable>
    <external_variable comment="Allowed to create global objects (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:59107" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="RegEx (Pattern match)?" datatype="string" id="oval:com.mcafee.oval:var:56788" version="2" />
    <external_variable comment="Allowed to impersonate a client (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:56772" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Screen Saver to be used. (logon.scr is default in most cases)" datatype="string" id="oval:com.mcafee.oval:var:56769" version="2" />
    <external_variable comment="Screen Saver timeout in seconds. (900 = 15 minutes)" datatype="string" id="oval:com.mcafee.oval:var:56768" version="2" />
    <external_variable comment="Screen Save Secure" datatype="string" id="oval:com.mcafee.oval:var:56767" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Screen Save Active" datatype="string" id="oval:com.mcafee.oval:var:56766" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56763" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Image Acquisition (WIA) Service (stisvc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56762" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Audio Service (Audiosrv) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56761" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="WebClient Service (WebClient) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56760" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Volume Shadow Copy Service (VSS) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56759" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Virtual Disk Service (vds) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56758" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Upload Manager Service (uploadmgr) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56757" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Themes Service (Themes) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56756" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Terminal Services Session Directory Service (Tssdis) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56755" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Special Administration Console Helper Service (sacsvr) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56753" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Shell Hardware Detection Service (ShellHWDetection) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56752" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Secondary Logon Service (seclogon) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56751" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Resultant Set of Policy Provider Service (RSoPProv) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56750" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Desktop Help Session Manager Service (RDSessMgr) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56749" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Portable Media Serial Number Service (WmdmPmSN) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56748" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Network Location Awareness Service (Nla / NlaSvc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56747" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Microsoft Software Shadow Copy Provider Service (swprv) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56746" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="IMAPI CD-Burning COM Service (ImapiService) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56745" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Human Interface Device Access Service (hidserv) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56744" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Cryptographic Services Service (CryptSvc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56743" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="COM+ System Application Service (COMSysApp) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56436" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Application Layer Gateway Service (ALG) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56435" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Refuse machine account password changes" datatype="int" id="oval:com.mcafee.oval:var:56434" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Automatic Updates Service (wuauserv) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56432" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Workstation Service (LanmanWorkstation) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56431" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Time Service (W32Time) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56430" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Management Instrumentation Driver Extensions Service (Wmi) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56429" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Management Instrumentation Service (Winmgmt) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56428" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Installer Service (msiserver) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56427" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Utility Manager Service (UtilMan) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56426" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Uninterruptible Power Supply Service (UPS) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56425" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="TCP/IP NetBIOS Helper Service (lmhosts) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56423" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Event Notification Service (SENS) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56421" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Smart Card Helper Service (SCardDrv) Type" datatype="int" id="oval:com.mcafee.oval:var:56420" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Smart Card Service (SCardSvr) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56419" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Security Accounts Manager Service (SamSs) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56418" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="RunAs / Secondary Logon Service (seclogon) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56417" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Removable Storage Service (Ntmssvc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56415" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Procedure Call (RPC) Service (RpcSs) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56414" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Protected Storage Service (ProtectedStorage) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56412" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Plug and Play Service (PlugPlay) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56411" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Performance Logs and Alerts Service (SysmonLog / pla) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56410" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="NT LM Security Support Provider Service (NtLmSsp) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56409" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Network Connections Service (Netman) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56406" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Net Logon Service (Netlogon) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56404" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Logical Disk Manager Administrative Service (dmadmin) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56402" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Logical Disk Manager Service (dmserver) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56401" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Kerberos Key Distribution Center Service (kdc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56400" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="IPSEC Policy Agent Service (PolicyAgent) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56399" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Intersite Messaging Service (IsmServ) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56398" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Event Log Service (Eventlog) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56396" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Distributed Transaction Coordinator Service (MSDTC) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56394" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Distributed Link Tracking Server Service (TrkSvr) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56393" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Distributed Link Tracking Client Service (TrkWks) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56392" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Distributed File System Service (Dfs) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56391" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="COM+ Event System Service (EventSystem) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56389" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Application Management Service (AppMgmt) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:56387" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="WWAN AutoConfig Service (Wwansvc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:560446" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="MSS: (DisableSavePassword) Prevent the dial-up password from being saved (recommended)" datatype="int" id="oval:com.mcafee.oval:var:560437" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required login shell for the ftp account? For eg. - /bin/bash, /sbin/nologin, /bin/sh etc." datatype="string" id="oval:com.mcafee.oval:var:554492" version="1" />
    <external_variable comment="What is the required login shell for the daemon account? For eg. - /bin/bash, /sbin/nologin, /bin/sh etc." datatype="string" id="oval:com.mcafee.oval:var:554491" version="1" />
    <external_variable comment="What is the required login shell for the root account? For eg. - /bin/bash, /sbin/nologin, /bin/sh etc." datatype="string" id="oval:com.mcafee.oval:var:554490" version="1" />
    <external_variable comment="IKE and AuthIP IPsec Keying Modules Service (IKEEXT) startup mode" datatype="int" id="oval:com.mcafee.oval:var:548513" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Special Administration Console Helper Service (sacsvr) startup mode" datatype="int" id="oval:com.mcafee.oval:var:548504" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Management Instrumentation Service (Winmgmt) startup mode" datatype="int" id="oval:com.mcafee.oval:var:548500" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Internet Connection Sharing (ICS) Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:548496" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Volume Shadow Copy Service (VSS) startup mode" datatype="int" id="oval:com.mcafee.oval:var:548492" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Audio Endpoint Builder Service (AudioEndpointBuilder) startup mode" datatype="int" id="oval:com.mcafee.oval:var:548488" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Portable Device Enumerator Service (WPDBusEnum) startup mode" datatype="int" id="oval:com.mcafee.oval:var:548483" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Intersite Messaging Service (IsmServ) startup mode" datatype="int" id="oval:com.mcafee.oval:var:548479" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Access Connection Manager Service (RasMan) startup mode" datatype="int" id="oval:com.mcafee.oval:var:548472" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Audio Service (Audiosrv) startup mode" datatype="int" id="oval:com.mcafee.oval:var:548468" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Health Key and Certificate Management Service (hkmsvc) startup mode" datatype="int" id="oval:com.mcafee.oval:var:547010" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Superfetch Service (SysMain) startup mode" datatype="int" id="oval:com.mcafee.oval:var:547005" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="COM+ Event System Service (EventSystem) startup mode" datatype="int" id="oval:com.mcafee.oval:var:547001" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="DFS Namespace Service (Dfs) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546997" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Performance Counter DLL Host Service (PerfHost) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546992" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Cryptographic Services Service (CryptSvc) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546988" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Error Reporting Service (WerSvc) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546983" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Extensible Authentication Protocol Service (EapHost) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546978" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Access Auto Connection Manager Service (RasAuto) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546974" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="SSDP Discovery Service (SSDPSRV) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546970" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Secure Socket Tunneling Protocol Service (SstpSvc) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546965" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="DHCP Client Service (Dhcp) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546961" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="IPsec Policy Agent (PolicyAgent) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546957" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Diagnostic Service Host Service (WdiServiceHost) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546952" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Update Service (wuauserv) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546948" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="WMI Performance Adapter Service (wmiApSrv) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546944" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Function Discovery Provider Host Service (fdPHost) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546939" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="File Replication Service (NtFrs) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546935" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Plug and Play Service (PlugPlay) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546931" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Smart Card Removal Policy Service (SCPolicySvc) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546926" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Registry Service (RemoteRegistry) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546917" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Network Access Protection Agent Service (napagent) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546912" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Human Interface Device Access Service (hidserv) Startup mode" datatype="int" id="oval:com.mcafee.oval:var:546908" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Secondary Logon Service (seclogon) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546904" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall Service (MpsSvc) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546899" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Windows Time Service (W32Time) startup mode" datatype="int" id="oval:com.mcafee.oval:var:546895" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Authentication level" datatype="int" id="oval:com.mcafee.oval:var:54616" version="3">
      <possible_value hint="Send LM and NTLM responses">0</possible_value>
      <possible_value hint="Send LM and NTLM responses - use NTLMv2 session security if negotiated">1</possible_value>
      <possible_value hint="Send NTLM response only">2</possible_value>
      <possible_value hint="Send NTMLv2 response only">3</possible_value>
      <possible_value hint="Send NTLMv2 response only/refuse LM">4</possible_value>
      <possible_value hint="Send NTLMv2 response only/refuse LM and NTLM">5</possible_value>
    </external_variable>
    <external_variable comment="Select a restriction level below:" datatype="int" id="oval:com.mcafee.oval:var:54615" version="2">
      <possible_value hint="None. Rely on default permissions">0</possible_value>
      <possible_value hint="Do not allow enumeration of SAM accounts and shares">1</possible_value>
      <possible_value hint="No access without explicit anonymous permissions">2</possible_value>
    </external_variable>
    <external_variable comment="RRAS NetBIOS Gateway status" datatype="int" id="oval:com.mcafee.oval:var:54612" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allowed to log on locally (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:54611" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Allowed to access from the network (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:54609" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Pipe delimited list of accounts to check (ex: user1|user2|user3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:54607" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Status of listed accounts" datatype="boolean" id="oval:com.mcafee.oval:var:54605" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Syskey encryption level" datatype="int" id="oval:com.mcafee.oval:var:54604" version="6">
      <possible_value hint="Store Startup Key Locally (no interaction required)">1</possible_value>
      <possible_value hint="Password Startup (requires password at system start)">2</possible_value>
      <possible_value hint="Store Startup Key on Floppy Disk (requires floppy disk at system start)">3</possible_value>
    </external_variable>
    <external_variable comment="Direct Draw" datatype="int" id="oval:com.mcafee.oval:var:54603" version="1">
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Clear Pagefile at Shutdown" datatype="int" id="oval:com.mcafee.oval:var:54602" version="1">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Specifies how the system responds when a user tries to install non-device driver files that are not digitally signed" datatype="int" id="oval:com.mcafee.oval:var:54601" version="1">
      <possible_value hint="Silently succeed (Ignore)">00</possible_value>
      <possible_value hint="Warn but allow installation (Warn)">01</possible_value>
      <possible_value hint="Do not allow installation (Block)">02</possible_value>
    </external_variable>
    <external_variable comment='Enable the Screen Saver' datatype='string' id='oval:com.mcafee.oval:var:54600' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Screen Saver is password protected.' datatype='string' id='oval:com.mcafee.oval:var:54599' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Screen Saver timeout in seconds. (900 = 15 minutes)' datatype='string' deprecated='false' id='oval:com.mcafee.oval:var:54598' version='1' xmlns='http://oval.mitre.org/XMLSchema/oval-definitions-5' />
    <external_variable comment='Enable the Screen Saver.' datatype='string' id='oval:com.mcafee.oval:var:54597' version='1'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Password protect the screen saver.' datatype='string' id='oval:com.mcafee.oval:var:54596' version='1'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Minimum number of free connections for Winsock applications (20 recommended for systems under attack, 10 otherwise).' datatype='int' deprecated='false' id='oval:com.mcafee.oval:var:54595' version='0' xmlns='http://oval.mitre.org/XMLSchema/oval-definitions-5' />
    <external_variable comment='Maximum number of quasi-free connections for Winsock applications (20000).' datatype='int' id='oval:com.mcafee.oval:var:54594' version='0'>
      <possible_value hint='10000'>10000</possible_value>
      <possible_value hint='15000'>15000</possible_value>
      <possible_value hint='20000 (recommended)'>20000</possible_value>
      <possible_value hint='40000'>40000</possible_value>
      <possible_value hint='80000'>80000</possible_value>
      <possible_value hint='160000'>160000</possible_value>
    </external_variable>
    <external_variable comment='Enable dynamic backlog for Winsock applications (ENABLE recommended).' datatype='int' id='oval:com.mcafee.oval:var:54593' version='0'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Number of connections to create when additional connections are necessary for Winsock applications (10 recommended).' datatype='int' deprecated='false' id='oval:com.mcafee.oval:var:54592' version='0' xmlns='http://oval.mitre.org/XMLSchema/oval-definitions-5' />
    <external_variable comment='Client Service for NetWare Service (NWCWorkstation) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54591' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Wireless Configuration Service (WZCSVC) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54590' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Trivial FTP Daemon Service (TFTPD) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54589' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Telephony Service (TapiSrv) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54588' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Server Service (LanmanServer) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54587' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remote Storage Notification Service (Remote_Storage_User_Link) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54586' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remote Server Manager Service (appmgr) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54585' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remote Registry Service (RemoteRegistry) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54584' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remote Procedure Call (RPC) Locator Service (RpcLocator) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54583' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remote Administration Service (srvcsurg) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54582' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remote Access Auto Connection Manager Service (RasAuto) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54581' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Print Spooler Service (Spooler) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54580' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Print Server for Macintosh Service (MacPrint) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54579' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Network News Transfer Protocol (NNTP) Service (NntpSvc) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54578' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Microsoft POP3 Service (Pop3Svc) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54577' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='License Logging Service (LicenseService) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54576' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Internet Connection Sharing (ICS) Service (SharedAccess) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54575' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='File Server for Macintosh Service (MacFile) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54574' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='File Replication Service (NtFrs) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54573' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='HTTP SSL Service (HTTPFilter) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54572' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Help and Support Service (helpsvc) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54571' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='DHCP Client Service (Dhcp) Startup Type' datatype='int' id='oval:com.mcafee.oval:var:54570' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment="Multimedia Class Scheduler service startup mode" datatype="int" id="oval:com.mcafee.oval:var:545447" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Shell Hardware Detection service startup mode" datatype="int" id="oval:com.mcafee.oval:var:545443" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Print Spooler Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:545438" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Workstation Service (LanmanWorkstation) startup mode" datatype="int" id="oval:com.mcafee.oval:var:545434" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Group Policy Client" datatype="int" id="oval:com.mcafee.oval:var:545424" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="User Profile Service" datatype="int" id="oval:com.mcafee.oval:var:545419" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Distributed Transaction Coordinator" datatype="int" id="oval:com.mcafee.oval:var:545414" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: DNS Client" datatype="int" id="oval:com.mcafee.oval:var:543967" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: CNG Key Isolation" datatype="int" id="oval:com.mcafee.oval:var:543963" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Telephony" datatype="int" id="oval:com.mcafee.oval:var:543958" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Network Location Awareness" datatype="int" id="oval:com.mcafee.oval:var:543954" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Driver Foundation - User-mode Driver Framework" datatype="int" id="oval:com.mcafee.oval:var:543950" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: COM+ System Application" datatype="int" id="oval:com.mcafee.oval:var:543945" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: IP Helper" datatype="int" id="oval:com.mcafee.oval:var:543940" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Performance Logs Alerts Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:543934" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: DFS Replication" datatype="int" id="oval:com.mcafee.oval:var:543933" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: DCOM Server Process Launcher" datatype="int" id="oval:com.mcafee.oval:var:543928" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Net.Tcp Port Sharing Service" datatype="int" id="oval:com.mcafee.oval:var:543923" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Virtual Disk" datatype="int" id="oval:com.mcafee.oval:var:543918" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Application Information" datatype="int" id="oval:com.mcafee.oval:var:543914" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Remote Procedure Call (RPC) Locator" datatype="int" id="oval:com.mcafee.oval:var:543908" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Server Service (LanmanServer) startup mode" datatype="int" id="oval:com.mcafee.oval:var:543903" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Kerberos Key Distribution Center" datatype="int" id="oval:com.mcafee.oval:var:543901" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Font Cache Service" datatype="int" id="oval:com.mcafee.oval:var:543897" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Smart Card" datatype="int" id="oval:com.mcafee.oval:var:543891" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Diagnostic Policy Service" datatype="int" id="oval:com.mcafee.oval:var:543886" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Problem Reports and Solutions Control Panel Support Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:543879" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Base Filtering Engine" datatype="int" id="oval:com.mcafee.oval:var:543877" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Event Log" datatype="int" id="oval:com.mcafee.oval:var:543871" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Resultant Set of Policy Provider Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:543866" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Certificate Propagation" datatype="int" id="oval:com.mcafee.oval:var:543864" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: KtmRm for Distributed Transaction Coordinator" datatype="int" id="oval:com.mcafee.oval:var:543856" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Background Intelligent Transfer Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:543854" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Thread Ordering Server" datatype="int" id="oval:com.mcafee.oval:var:543850" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Themes" datatype="int" id="oval:com.mcafee.oval:var:543844" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Link-Layer Topology Discovery Mapper" datatype="int" id="oval:com.mcafee.oval:var:543837" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Microsoft iSCSI Initiator Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:543836" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: TCP/IP NetBIOS Helper" datatype="int" id="oval:com.mcafee.oval:var:543831" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Microsoft Software Shadow Copy Provider" datatype="int" id="oval:com.mcafee.oval:var:543824" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Distributed Link Tracking Client Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:543822" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Wired AutoConfig" datatype="int" id="oval:com.mcafee.oval:var:543819" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Network Connections" datatype="int" id="oval:com.mcafee.oval:var:543812" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Computer Browser Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:543807" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Modules Installer" datatype="int" id="oval:com.mcafee.oval:var:543805" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Security Accounts Manager" datatype="int" id="oval:com.mcafee.oval:var:543799" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Net Logon Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:543794" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The state of the kill bit. This specifies whether the service should be stopped at the specified runlevel" datatype="boolean" id="oval:com.mcafee.oval:var:54336" version="1">
      <possible_value hint="The service should be configured to be stopped at the specified runlevel">1</possible_value>
      <possible_value hint="The service should NOT be configured to be stopped at the specified runlevel">0</possible_value>
    </external_variable>
    <external_variable comment="The state of the start bit. This specifies whether the service should be started at the specified runlevel" datatype="boolean" id="oval:com.mcafee.oval:var:54335" version="1">
      <possible_value hint="The service should be configured to start at the specified runlevel">1</possible_value>
      <possible_value hint="The service should NOT be configured to start at the specified runlevel">0</possible_value>
    </external_variable>
    <external_variable comment="This name is usually the filename of the script file located in /etc/init.d directory." datatype="string" id="oval:com.mcafee.oval:var:54334" version="1" />
    <external_variable comment="The runlevel to examine the service" datatype="string" id="oval:com.mcafee.oval:var:54333" version="1" />
    <external_variable comment="System Services: DNS Server" datatype="int" id="oval:com.mcafee.oval:var:540905" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Remote Procedure Call (RPC)" datatype="int" id="oval:com.mcafee.oval:var:540900" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: SNMP Trap" datatype="int" id="oval:com.mcafee.oval:var:540896" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Application Layer Gateway Service" datatype="int" id="oval:com.mcafee.oval:var:540892" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Active Directory Domain Services" datatype="int" id="oval:com.mcafee.oval:var:540888" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Color System" datatype="int" id="oval:com.mcafee.oval:var:540883" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: System Event Notification Service" datatype="int" id="oval:com.mcafee.oval:var:540877" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: UPnP Device Host" datatype="int" id="oval:com.mcafee.oval:var:540874" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Task Scheduler" datatype="int" id="oval:com.mcafee.oval:var:540870" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Installer" datatype="int" id="oval:com.mcafee.oval:var:540866" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Network Store Interface Service" datatype="int" id="oval:com.mcafee.oval:var:540862" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Event Collector" datatype="int" id="oval:com.mcafee.oval:var:540857" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Interactive Services Detection" datatype="int" id="oval:com.mcafee.oval:var:540852" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Remote Management (WS-Management)" datatype="int" id="oval:com.mcafee.oval:var:539516" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="WinHTTP Web Proxy Auto-Discovery Service startup mode" datatype="int" id="oval:com.mcafee.oval:var:539511" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Diagnostic System Host" datatype="int" id="oval:com.mcafee.oval:var:539508" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Application Management" datatype="int" id="oval:com.mcafee.oval:var:539503" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Function Discovery Resource Publication" datatype="int" id="oval:com.mcafee.oval:var:539497" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Configure Force specific screen saver" datatype="string" id="oval:com.mcafee.oval:var:529473" version="1">
      <possible_value hint="Not Configured / Disabled">Disable</possible_value>
      <possible_restriction hint="Enabled. Type Filename of screensaver">
        <restriction operation="greater than">" "</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Other execute permission. 0 equals disable, 1 equals enable" datatype="boolean" id="oval:com.mcafee.oval:var:52931" version="2" />
    <external_variable comment="Other write permission. 0 equals disable, 1 equals enable" datatype="boolean" id="oval:com.mcafee.oval:var:52930" version="2" />
    <external_variable comment="Other read permission. 0 equals disable, 1 equals enable" datatype="boolean" id="oval:com.mcafee.oval:var:52929" version="2" />
    <external_variable comment="Group execute permission. 0 equals disable, 1 equals enable" datatype="boolean" id="oval:com.mcafee.oval:var:52928" version="2" />
    <external_variable comment="Group write permission. 0 equals disable, 1 equals enable" datatype="boolean" id="oval:com.mcafee.oval:var:52927" version="2" />
    <external_variable comment="Group read permission. 0 equals disable, 1 equals enable" datatype="boolean" id="oval:com.mcafee.oval:var:52926" version="2" />
    <external_variable comment="User execute permission. 0 equals disable, 1 equals enable" datatype="boolean" id="oval:com.mcafee.oval:var:52925" version="2" />
    <external_variable comment="User write permission. 0 equals disable, 1 equals enable" datatype="boolean" id="oval:com.mcafee.oval:var:52924" version="2" />
    <external_variable comment="User read permission. 0 equals disable, 1 equals enable" datatype="boolean" id="oval:com.mcafee.oval:var:52923" version="2" />
    <external_variable comment="Configure Password protect the screen saver" datatype="int" id="oval:com.mcafee.oval:var:526811" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Screen saver timeout" datatype="int" id="oval:com.mcafee.oval:var:525512" version="2">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 86400">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">86400</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Configure screen saver" datatype="int" id="oval:com.mcafee.oval:var:525500" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Notify antivirus programs" datatype="int" id="oval:com.mcafee.oval:var:525490" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">1</possible_value>
      <possible_value hint="Enabled">3</possible_value>
    </external_variable>
    <external_variable comment="Configure zone information in file attachments" datatype="int" id="oval:com.mcafee.oval:var:525476" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">2</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Hide mechanisms to remove zone information" datatype="int" id="oval:com.mcafee.oval:var:525465" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow storage of passwords and credentials for network authentication" datatype="int" id="oval:com.mcafee.oval:var:525462" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Process even if the Group Policy objects have not changed" datatype="int" id="oval:com.mcafee.oval:var:525457" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Do not apply during periodic background processing" datatype="int" id="oval:com.mcafee.oval:var:525446" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="optional:The name of the package" datatype="string" id="oval:com.mcafee.oval:var:5241" version="2" />
    <external_variable comment="The instance of the package" datatype="string" id="oval:com.mcafee.oval:var:5240" version="1" />
    <external_variable comment="Service Disabled?" datatype="boolean" id="oval:com.mcafee.oval:var:5238" version="2">
      <possible_value hint="TRUE">true</possible_value>
      <possible_value hint="FALSE">false</possible_value>
    </external_variable>
    <external_variable comment="optional:Wait Status" datatype="boolean" id="oval:com.mcafee.oval:var:5237" version="3" />
    <external_variable comment="optional:Exec as user" datatype="string" id="oval:com.mcafee.oval:var:5236" version="2" />
    <external_variable comment="optional:Type of service" datatype="string" id="oval:com.mcafee.oval:var:5235" version="2" />
    <external_variable comment="optional:Socket Type" datatype="string" id="oval:com.mcafee.oval:var:5234" version="2" />
    <external_variable comment="optional:Server Arguments" datatype="string" id="oval:com.mcafee.oval:var:5233" version="2" />
    <external_variable comment="optional:Server application." datatype="string" id="oval:com.mcafee.oval:var:5232" version="2" />
    <external_variable comment="optional:Port that the service runs on" datatype="int" id="oval:com.mcafee.oval:var:5231" version="3" />
    <external_variable comment="optional:Access only allowed from this location" datatype="string" id="oval:com.mcafee.oval:var:5230" version="2" />
    <external_variable comment="optional:No Access" datatype="string" id="oval:com.mcafee.oval:var:5229" version="2" />
    <external_variable comment="optional:Flags, for future use." datatype="string" id="oval:com.mcafee.oval:var:5228" version="2" />
    <external_variable comment="The name of a valid service" datatype="string" id="oval:com.mcafee.oval:var:5227" version="2" />
    <external_variable comment="optional:A recognized protocol. normally TCP or UDP" datatype="string" id="oval:com.mcafee.oval:var:5226" version="2">
      <possible_value hint="TCP Protcol">tcp</possible_value>
      <possible_value hint="UDP Protocol">udp</possible_value>
    </external_variable>
    <external_variable comment="optional:This entry specifies whether the server that is invoked by inetd will take over the listening socket associated with the service, and whether once launched, inetd will wait for that server to exit, if ever, before it resumes listening for new service requests." datatype="string" id="oval:com.mcafee.oval:var:5225" version="3">
      <possible_value hint="wait">wait</possible_value>
      <possible_value hint="nowait">nowait</possible_value>
    </external_variable>
    <external_variable comment="optional:Exec As User" datatype="string" id="oval:com.mcafee.oval:var:5224" version="2" />
    <external_variable comment="optional:Endpoint Type" datatype="string" id="oval:com.mcafee.oval:var:5223" version="2" />
    <external_variable comment="optional:Server Arguments" datatype="string" id="oval:com.mcafee.oval:var:5222" version="2" />
    <external_variable comment="optional:Either the pathname of a server program to be invoked by inetd to perform the requested service, or the value internal if inetd itself provides the service." datatype="string" id="oval:com.mcafee.oval:var:5221" version="2" />
    <external_variable comment="The name of a valid service listed in the services file. For RPC services, the value of the service-name field consists of the RPC service name or program number, followed by a &quot;/&quot; (slash) and either a version number or a range of version numbers (for example, rstatd/2-4)" datatype="string" id="oval:com.mcafee.oval:var:5220" version="2" />
    <external_variable comment="A recognized protocol listed in the file /etc/inet/protocols" datatype="string" id="oval:com.mcafee.oval:var:5219" version="2">
      <possible_value hint="TCP">tcp</possible_value>
      <possible_value hint="UDP">udp</possible_value>
    </external_variable>
    <external_variable comment="This includes the command line, pid, ppid, priority, and user id. Please refer to the individual elements in the documentation for more details about what each represents." datatype="string" id="oval:com.mcafee.oval:var:5217" version="1" />
    <external_variable comment="This is a reserved field that the shadow file may use in the future." datatype="string" id="oval:com.mcafee.oval:var:5216" version="1" />
    <external_variable comment="Configure Do not enable BitLocker until recovery information is stored" datatype="int" id="oval:com.mcafee.oval:var:515520" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure storage of BitLocker recovery info to AD DS" datatype="int" id="oval:com.mcafee.oval:var:515512" version="2">
      <possible_value hint="Store recovery passwords only">2</possible_value>
      <possible_value hint="Store recovery passwords and key packages">1</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure Save BitLocker recovery information to AD DS" datatype="int" id="oval:com.mcafee.oval:var:515502" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure Recovery key options" datatype="int" id="oval:com.mcafee.oval:var:515494" version="1">
      <possible_value hint="Allow 256-bit recovery key">2</possible_value>
      <possible_value hint="Require 256-bit recovery key">1</possible_value>
      <possible_value hint="Do not allow 256-bit recovery key">0</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure Omit recovery options from the BitLocker setup wizard" datatype="int" id="oval:com.mcafee.oval:var:515483" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure user storage of BitLocker recovery information" datatype="int" id="oval:com.mcafee.oval:var:515475" version="1">
      <possible_value hint="Allow 48-digit recovery password">2</possible_value>
      <possible_value hint="Require 48-digit recovery password">1</possible_value>
      <possible_value hint="Do not allow 48-digit recovery password">0</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Second Unnamed value" datatype="int" id="oval:com.mcafee.oval:var:515454" version="1">
      <possible_value hint="Allow 256-bit recovery key">2</possible_value>
      <possible_value hint="Require 256-bit recovery key">1</possible_value>
      <possible_value hint="Do not allow 256-bit recovery key">0</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="First Unnamed value" datatype="int" id="oval:com.mcafee.oval:var:515442" version="1">
      <possible_value hint="Allow 48-digit recovery password">2</possible_value>
      <possible_value hint="Require 48-digit recovery password">1</possible_value>
      <possible_value hint="Do not allow 48-digit recovery password">0</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Allow data recovery agent" datatype="int" id="oval:com.mcafee.oval:var:515434" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Choose how BitLocker-protected fixed drives can be recovered" datatype="int" id="oval:com.mcafee.oval:var:515424" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure Allow data recovery agent" datatype="int" id="oval:com.mcafee.oval:var:515406" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure how BitLocker-protected OS drives recovered" datatype="int" id="oval:com.mcafee.oval:var:515394" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure TPM startup key and PIN" datatype="int" id="oval:com.mcafee.oval:var:514109" version="1">
      <possible_value hint="Do not allow startup key and PIN with TPM">0</possible_value>
      <possible_value hint="Require startup key and PIN with TPM">1</possible_value>
      <possible_value hint="Allow startup key and PIN with TPM">2</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure TPM startup PIN" datatype="int" id="oval:com.mcafee.oval:var:514102" version="1">
      <possible_value hint="Do not allow startup PIN with TPM">0</possible_value>
      <possible_value hint="Require startup PIN with TPM">1</possible_value>
      <possible_value hint="Allow startup PIN with TPM">2</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure TPM startup key" datatype="int" id="oval:com.mcafee.oval:var:514095" version="1">
      <possible_value hint="Do not allow startup key with TPM">0</possible_value>
      <possible_value hint="Require startup key with TPM">1</possible_value>
      <possible_value hint="Allow startup key with TPM">2</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Type Disabled or type the name of Intranet update service" datatype="string" id="oval:com.mcafee.oval:var:514093" version="3" />
    <external_variable comment="Type Disabled or type the url for Intranet statistics server (example: http://Intranet )" datatype="string" id="oval:com.mcafee.oval:var:514085" version="3" />
    <external_variable comment="Set intranet Microsoft update service location setting" datatype="int" id="oval:com.mcafee.oval:var:514078" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Do not display Install Updates and Shut Down option in Shut Down Windows dialog box" datatype="int" id="oval:com.mcafee.oval:var:512761" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="No auto-restart with logged on users for scheduled automatic updates installations" datatype="int" id="oval:com.mcafee.oval:var:512751" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure use of passwords for removable data drives" datatype="int" id="oval:com.mcafee.oval:var:512734" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Do not enable BitLocker until recovery information is stored to AD DS for removable data drives" datatype="int" id="oval:com.mcafee.oval:var:512723" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure storage of BitLocker recovery information to AD DS" datatype="int" id="oval:com.mcafee.oval:var:512710" version="1">
      <possible_value hint="Backup recovery passwords only">2</possible_value>
      <possible_value hint="Backup recovery passwords and key packages">1</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Save BitLocker recovery information to AD DS for removable data drives" datatype="int" id="oval:com.mcafee.oval:var:512703" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Second Unnamed value" datatype="int" id="oval:com.mcafee.oval:var:512690" version="1">
      <possible_value hint="Allow 256-bit recovery key">2</possible_value>
      <possible_value hint="Require 256-bit recovery key">1</possible_value>
      <possible_value hint="Do not allow 256-bit recovery key">0</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="First Unnamed value" datatype="int" id="oval:com.mcafee.oval:var:512683" version="1">
      <possible_value hint="Allow 48-digit recovery password">2</possible_value>
      <possible_value hint="Require 48-digit recovery password">1</possible_value>
      <possible_value hint="Do not allow 48-digit recovery password">0</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Omit recovery options from the BitLocker setup wizard" datatype="int" id="oval:com.mcafee.oval:var:512677" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Allow data recovery agent" datatype="int" id="oval:com.mcafee.oval:var:512666" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Choose how BitLocker-protected removable drives can be recovered" datatype="int" id="oval:com.mcafee.oval:var:512657" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Dsiabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives" datatype="int" id="oval:com.mcafee.oval:var:511365" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Save BitLocker recovery information to Active Directory Doman Services" datatype="int" id="oval:com.mcafee.oval:var:511355" version="1">
      <possible_value hint="Backup recovery passwords and key packages">1</possible_value>
      <possible_value hint="Backup recovery password only">2</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Save BitLocker recovery information to Active Directory Doman Services" datatype="int" id="oval:com.mcafee.oval:var:511339" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment='Disable Autoplay' datatype='int' id='oval:com.mcafee.oval:var:51133' version='1'>
      <possible_value hint='0 - Autoplay not disabled (or not configured)'>0</possible_value>
      <possible_value hint='4 - Autoplay disabled on removable Drives'>0</possible_value>
      <possible_value hint='32 - Autoplay disabled on CD-ROM Drives'>0</possible_value>
      <possible_value hint='181 - Autoplay disabled on CD-ROM and removable media drives'>181</possible_value>
      <possible_value hint='255 - Autoplay Disabled on All Drives'>255</possible_value>
      <possible_restriction hint='Other -- enter an integer value of 255 or less'>
        <restriction operation='less than or equal'>255</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Number of passwords to remember" datatype="int" id="oval:com.mcafee.oval:var:51127" version="2" />
    <external_variable comment="Number of days before a password may be changed" datatype="int" id="oval:com.mcafee.oval:var:51118" version="2" />
    <external_variable comment='This field contains the 64-bit PGP key ID that the RPM issuer (generally the original operating system vendor) uses to sign the key. Note that the value should NOT contain a hyphen to seperat the higher 32-bits from the lower 32-bits. It should simply be a 16 character hex string. PGP is used to verify the authenticity and integrity of the RPM being considered. Software packages and patches are signed cryptographically to allow administrators to allay concerns that the distribution mechanism has been compromised, whether that mechanism is web site, FTP server, or even a mirror controlled by a hostile party. OVAL uses this field most of all to confirm that the package installed on the system is that shipped by the vendor, since comparing package version numbers against patch announcements is only programmatically valid if the installed package is known to contain the patched code.' datatype='string' id='oval:com.mcafee.oval:var:51100' version='1' />
    <external_variable comment='This represents the epoch, version, and release fields as a single version string. It has the form "EPOCH:VERSION-RELEASE". Note that a null epoch (or (none) as returned by rpm) is equivalent to 0 and would hence have the form 0:VERSION-RELEASE. Comparisons involving this datatype should follow the algorithm of librpms rpmvercmp() function.' datatype='string' id='oval:com.mcafee.oval:var:51099' version='1' />
    <external_variable comment='This is the version number of the build. In the case of an apache rpm named httpd-2.0.40-21.11.4.i686.rpm, this value would be 21.11.4.' datatype='string' id='oval:com.mcafee.oval:var:51098' version='1' />
    <external_variable comment='This is the release number of the build, changed by the vendor/builder.' datatype='string' id='oval:com.mcafee.oval:var:51097' version='1' />
    <external_variable comment='This is the epoch number of the RPM, this is used as a kludge for version-release comparisons where the vendor has done some kind of re-numbering or version forking. For a null epoch (or (none) as returned by rpm) is equivalent to 0. This number is not revealed by a normal query of the RPMs information -- you must use a formatted rpm query command to gather this data from the command line, like so. For an already-installed RPM: rpm -q --qf %{EPOCH}\n installed_rpm For an RPM file that has not been installed: rpm -qp --qf %{EPOCH}\n rpm_file' datatype='string' id='oval:com.mcafee.oval:var:51096' version='1' />
    <external_variable comment='This is the architecture for which the RPM was built, like : i386, ppc, sparc, noarch. In the case of an apache rpm named httpd-2.0.40-21.11.4.i686.rpm, this value would be i686.' datatype='string' id='oval:com.mcafee.oval:var:51095' version='1' />
    <external_variable comment='This is the package name to check.' datatype='string' id='oval:com.mcafee.oval:var:51094' version='1' />
    <external_variable comment='This is the package name to check.' datatype='string' id='oval:com.mcafee.oval:var:51093' version='1' />
    <external_variable comment="Number of days before a password will expire" datatype="int" id="oval:com.mcafee.oval:var:51087" version="2" />
    <external_variable comment="Number of days a user account can be idle before being deactivated" datatype="int" id="oval:com.mcafee.oval:var:51085" version="2" />
    <external_variable comment="The number of upper case characters (ucredit) required by the policy" datatype="int" id="oval:com.mcafee.oval:var:51078" version="4" />
    <external_variable comment="The number of password characters required by the policy" datatype="int" id="oval:com.mcafee.oval:var:51077" version="2" />
    <external_variable comment="Configure TPM Startup" datatype="int" id="oval:com.mcafee.oval:var:510049" version="1">
      <possible_value hint="Do not allow TPM">0</possible_value>
      <possible_value hint="Require TPM">1</possible_value>
      <possible_value hint="Allow TPM">2</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure Allow BitLocker without a compatible TPM" datatype="int" id="oval:com.mcafee.oval:var:510039" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure require additional authentication at startup" datatype="int" id="oval:com.mcafee.oval:var:510031" version="2">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="McAfee VirusScan Enterprise Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:510" version="3" />
    <external_variable comment='The Windows Defender Maximum DAT Age in seconds' datatype='int' id='oval:com.mcafee.oval:var:50981' version='1'>
      <possible_value hint='1 day (86400 seconds)'>86400</possible_value>
      <possible_value hint='3 days (259200 seconds)'>259200</possible_value>
      <possible_value hint='5 days (432000 seconds)'>432000</possible_value>
      <possible_value hint='7 days (604800 seconds)'>604800</possible_value>
      <possible_value hint='14 days (1209600 seconds)'>1209600</possible_value>
      <possible_value hint='21 days (1814400 seconds)'>1814400</possible_value>
      <possible_value hint='30 days (2592000 seconds)'>2592000</possible_value>
      <possible_restriction hint='Custom: Enter a custom age in seconds'>
        <restriction operation='greater than'>0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment='F-Secure AntiVirus Maximum DAT age in seconds' datatype='int' id='oval:com.mcafee.oval:var:50963' version='2'>
      <possible_value hint='1 day (86400 seconds)'>86400</possible_value>
      <possible_value hint='3 days (259200 seconds)'>259200</possible_value>
      <possible_value hint='5 days (432000 seconds)'>432000</possible_value>
      <possible_value hint='7 days (604800 seconds)'>604800</possible_value>
      <possible_value hint='14 days (1209600 seconds)'>1209600</possible_value>
      <possible_value hint='21 days (1814400 seconds)'>1814400</possible_value>
      <possible_value hint='30 days (2592000 seconds)'>2592000</possible_value>
      <possible_restriction hint='Custom: Enter a custom age in seconds'>
        <restriction operation='greater than'>0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment='Computer Associates Maximum DAT age in seconds (vet.dat)' datatype='int' id='oval:com.mcafee.oval:var:50946' version='2'>
      <possible_value hint='1 day (86400 seconds)'>86400</possible_value>
      <possible_value hint='3 days (259200 seconds)'>259200</possible_value>
      <possible_value hint='5 days (432000 seconds)'>432000</possible_value>
      <possible_value hint='7 days (604800 seconds)'>604800</possible_value>
      <possible_value hint='14 days (1209600 seconds)'>1209600</possible_value>
      <possible_value hint='21 days (1814400 seconds)'>1814400</possible_value>
      <possible_value hint='30 days (2592000 seconds)'>2592000</possible_value>
      <possible_restriction hint='Custom: Enter a custom age in seconds'>
        <restriction operation='greater than'>0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment='The McAfee VirusScan Enterprise Patch or Hotfix version level.' datatype='int' id='oval:com.mcafee.oval:var:50928' version='3' />
    <external_variable comment='Maximum TrendMicro ServerProtect DAT file age in seconds' datatype='int' id='oval:com.mcafee.oval:var:50921' version='2'>
      <possible_value hint='1 day (86400 seconds)'>86400</possible_value>
      <possible_value hint='3 days (259200 seconds)'>259200</possible_value>
      <possible_value hint='5 days (432000 seconds)'>432000</possible_value>
      <possible_value hint='7 days (604800 seconds)'>604800</possible_value>
      <possible_value hint='14 days (1209600 seconds)'>1209600</possible_value>
      <possible_value hint='21 days (1814400 seconds)'>1814400</possible_value>
      <possible_value hint='30 days (2592000 seconds)'>2592000</possible_value>
      <possible_restriction hint='Custom: Enter a custom age in seconds'>
        <restriction operation='greater than'>0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment='Sophos AntiVirus Maximum DAT age ins seconds' datatype='int' id='oval:com.mcafee.oval:var:50906' version='2'>
      <possible_value hint='1 day (86400 seconds)'>86400</possible_value>
      <possible_value hint='3 days (259200 seconds)'>259200</possible_value>
      <possible_value hint='5 days (432000 seconds)'>432000</possible_value>
      <possible_value hint='7 days (604800 seconds)'>604800</possible_value>
      <possible_value hint='14 days (1209600 seconds)'>1209600</possible_value>
      <possible_value hint='21 days (1814400 seconds)'>1814400</possible_value>
      <possible_value hint='30 days (2592000 seconds)'>2592000</possible_value>
      <possible_restriction hint='Custom: Enter a custom age in seconds'>
        <restriction operation='greater than'>0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="McAfee VirusScan Enterprise Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:509" version="3" />
    <external_variable comment='Symantec/Norton Antivirus maximum DAT age in seconds.' datatype='int' id='oval:com.mcafee.oval:var:50890' version='2'>
      <possible_value hint='1 day (86400 seconds)'>86400</possible_value>
      <possible_value hint='3 days (259200 seconds)'>259200</possible_value>
      <possible_value hint='5 days (432000 seconds)'>432000</possible_value>
      <possible_value hint='7 days (604800 seconds)'>604800</possible_value>
      <possible_value hint='14 days (1209600 seconds)'>1209600</possible_value>
      <possible_value hint='21 days (1814400 seconds)'>1814400</possible_value>
      <possible_value hint='30 days (2592000 seconds)'>2592000</possible_value>
      <possible_restriction hint='Custom: Enter a custom age in seconds'>
        <restriction operation='greater than'>0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Symantec AntiVirus/Endpoint Protection maximum DAT age in seconds." datatype="int" id="oval:com.mcafee.oval:var:50867" version="5">
      <possible_value hint="2 days (172800 seconds)">172800</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds greater than 2 days">
        <restriction operation="greater than">172800</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment='McAfee AntiSpyware Enterprise Maximum Engine Age in seconds' datatype='int' id='oval:com.mcafee.oval:var:50836' version='3' />
    <external_variable comment='McAfee AntiSpyware Enterprise Maximum DAT age in seconds' datatype='int' id='oval:com.mcafee.oval:var:50804' version='4'>
      <possible_value hint='1 day (86400 seconds)'>86400</possible_value>
      <possible_value hint='3 days (259200 seconds)'>259200</possible_value>
      <possible_value hint='5 days (432000 seconds)'>432000</possible_value>
      <possible_value hint='7 days (604800 seconds)'>604800</possible_value>
      <possible_value hint='14 days (1209600 seconds)'>1209600</possible_value>
      <possible_value hint='21 days (1814400 seconds)'>1814400</possible_value>
      <possible_value hint='30 days (2592000 seconds)'>2592000</possible_value>
      <possible_restriction hint='Custom: Enter a custom age in seconds'>
        <restriction operation='greater than'>0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="McAfee AntiSpyware Minimum DAT Version" datatype="string" id="oval:com.mcafee.oval:var:508" version="3" />
    <external_variable comment='McAfee VirusScan Enterprise maximum Scan Engine age in seconds.' datatype='int' id='oval:com.mcafee.oval:var:50788' version='2' />
    <external_variable comment="McAfee Virus Scan Maximum DAT age in seconds" datatype="int" id="oval:com.mcafee.oval:var:50766" version="5">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="This is the minimum allowed engine version for the McAfee AntiSpyware product." datatype="string" id="oval:com.mcafee.oval:var:507" version="3" />
    <external_variable comment='Approved NTP server 2' datatype='string' id='oval:com.mcafee.oval:var:50655' version='1' />
    <external_variable comment='Approved NTP server 1' datatype='string' id='oval:com.mcafee.oval:var:50654' version='1' />
    <external_variable comment="Omit recovery options from the BitLocker setup wizard" datatype="int" id="oval:com.mcafee.oval:var:506350" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment='This is the maximum version of Computer Associates eTrust Anti-Virus software that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:505' version='1' />
    <external_variable comment='This is the minimum version of Computer Associates eTrust Anti-Virus software that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:504' version='1' />
    <external_variable comment='McAfee ePolicy Orchestrator Maximum Agent Version' datatype='version' id='oval:com.mcafee.oval:var:4935' version='1' />
    <external_variable comment='McAfee ePolicy Orchestrator Minimum Agent Version' datatype='version' id='oval:com.mcafee.oval:var:4934' version='1' />
    <external_variable comment='McAfee Desktop Firewall Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4932' version='1' />
    <external_variable comment='McAfee Desktop Firewall Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4931' version='1' />
    <external_variable comment='Sygate Personal Firewall Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4930' version='1' />
    <external_variable comment='Sygate Personal Firewall Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4929' version='1' />
    <external_variable comment='McAfee VirusScan Professional Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4928' version='3' />
    <external_variable comment='McAfee VirusScan Professional Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4927' version='3' />
    <external_variable comment="McAfee VirusScan Enterprise Minimum Engine Version" datatype="string" id="oval:com.mcafee.oval:var:4924" version="5" />
    <external_variable comment="McAfee VirusScan Enterprise Minimum DAT Version" datatype="string" id="oval:com.mcafee.oval:var:4923" version="5" />
    <external_variable comment='Computer Associates AntiSpyware Maximum Product Version (CAAntiSpyware.exe)' datatype='version' id='oval:com.mcafee.oval:var:4922' version='1' />
    <external_variable comment='Computer Associates AntiSpyware Minimum Product Version (CAAntiSpyware.exe)' datatype='version' id='oval:com.mcafee.oval:var:4921' version='1' />
    <external_variable comment='SpywareBlaster Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4919' version='1' />
    <external_variable comment='SpywareBlaster Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4918' version='1' />
    <external_variable comment='Spyware Terminator Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4917' version='1' />
    <external_variable comment='Spyware Terminator Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4916' version='1' />
    <external_variable comment='SpyRemover AntiSpyware Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4915' version='1' />
    <external_variable comment='SpyRemover AntiSpyware Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4914' version='1' />
    <external_variable comment='Omniquad Total Security Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4913' version='1' />
    <external_variable comment='Omniquad Total Security Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4912' version='1' />
    <external_variable comment='Trend Micro AntiSpyware Maximum Product Version (Tmasy.exe)' datatype='version' id='oval:com.mcafee.oval:var:4911' version='1' />
    <external_variable comment='Trend Micro AntiSpyware Minimum Product Version (Tmasy.exe)' datatype='version' id='oval:com.mcafee.oval:var:4910' version='1' />
    <external_variable comment="Ashampoo AntiSpyware Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4908" version="2" />
    <external_variable comment="Ashampoo AntiSpyware Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4907" version="2" />
    <external_variable comment='ZoneAlarm AntiSpyware Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4906' version='1' />
    <external_variable comment='ZoneAlarm AntiSpyware Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4905' version='1' />
    <external_variable comment='AVG AntiSpyware Maximum Product Version (avgas.exe)' datatype='version' id='oval:com.mcafee.oval:var:4904' version='1' />
    <external_variable comment='AVG AntiSpyware Minimum Product Version (avgas.exe)' datatype='version' id='oval:com.mcafee.oval:var:4903' version='1' />
    <external_variable comment="Avira AntiVir Personal Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4901" version="2" />
    <external_variable comment="Avira AntiVir Personal AntiVirus Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4900" version="2" />
    <external_variable comment='Panda AntiVirus Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4898' version='1' />
    <external_variable comment='Panda AntiVirus Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4897' version='1' />
    <external_variable comment="ZoneAlarm Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4896" version="2" />
    <external_variable comment="ZoneAlarm Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4895" version="2" />
    <external_variable comment='Dr Web AntiVirus Maximum Product Version (spidernt.exe)' datatype='version' id='oval:com.mcafee.oval:var:4894' version='1' />
    <external_variable comment='Dr Web AntiVirus Minimum Product Version (spidernt.exe)' datatype='version' id='oval:com.mcafee.oval:var:4893' version='1' />
    <external_variable comment="Set the appropriate retention time value for .log in com.apple.install file. Recommended value: 365 (in days)" datatype="int" id="oval:com.mcafee.oval:var:481233" version="1" />
    <external_variable comment="Set the appropriate retention time value for .log in /etc/asl.conf. Recommended value: 90 (in days)" datatype="int" id="oval:com.mcafee.oval:var:481232" version="1" />
    <external_variable comment="Set the appropriate retention time value for .log. Recommended value: 12 or higher" datatype="int" id="oval:com.mcafee.oval:var:469322" version="1" />
    <external_variable comment="Set the appropriate retention time value for .log. Recommended value: 3 or higher" datatype="int" id="oval:com.mcafee.oval:var:466592" version="2" />
    <external_variable comment='This is the minimum allowed Engine version for the McAfee VirusScan Professional (Retail) product. The version value should be entered in as &#39;x.x.x.x&#39;.' datatype='version' id='oval:com.mcafee.oval:var:4603' version='3' />
    <external_variable comment='This is the minimum allowed DAT version for the McAfee VirusScan Professional (Retail) product.' datatype='version' id='oval:com.mcafee.oval:var:4602' version='3' />
    <external_variable comment='This is the minimum version of ZoneAlarm Pro that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4601' version='1' />
    <external_variable comment='This is the maximum version of ZoneAlarm Pro that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4600' version='1' />
    <external_variable comment='This is the maximum version of McAfee HIPS that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4598' version='1' />
    <external_variable comment='This is the minimum version of McAfee HIPS that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4597' version='1' />
    <external_variable comment='This is the maximum version of McAfee Entercept that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4596' version='1' />
    <external_variable comment='This is the minimum version of McAfee Entercept that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4595' version='1' />
    <external_variable comment="This is the maximum version of Trend Micro Internet Security/AntiVirus plus AntiSpyware that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:4594" version="2" />
    <external_variable comment="This is the minimum version of Trend Micro Internet Security/AntiVirus plus AntiSpyware that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:4593" version="2" />
    <external_variable comment='This is the minimum version of PGP Desktop software that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4591' version='1' />
    <external_variable comment='This is the maximum version of McAfee SiteAdvisor software that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4590' version='2' />
    <external_variable comment='This is the minimum version of McAfee SiteAdvisor software that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4588' version='2' />
    <external_variable comment='This is the maximum version of ZoneAlarm Security Suite that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4587' version='1' />
    <external_variable comment='This is the minimum version of ZoneAlarm Security Suite that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4586' version='1' />
    <external_variable comment='F-Prot AntiVirus Maximum Engine Version (FPAVENG.dll)' datatype='version' id='oval:com.mcafee.oval:var:4494' version='1' />
    <external_variable comment='F-Prot AntiVirus Minimum Engine Version (FPAVENG.dll)' datatype='version' id='oval:com.mcafee.oval:var:4493' version='1' />
    <external_variable comment="NOD32 AntiVirus/Smart Security Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4491" version="3" />
    <external_variable comment="NOD32 AntiVirus/Smart Security Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4490" version="3" />
    <external_variable comment="McAfee Total Protection Service (Managed VirusScan) Minimum Engine Version" datatype="string" id="oval:com.mcafee.oval:var:4488" version="3" />
    <external_variable comment="McAfee Total Protection Service (Managed VirusScan) Minimum DAT Version" datatype="string" id="oval:com.mcafee.oval:var:4486" version="3" />
    <external_variable comment='Microsoft OneCare Live Maximum Product Version (WinSSUI.exe)' datatype='version' id='oval:com.mcafee.oval:var:4485' version='1' />
    <external_variable comment='Microsoft OneCare Live Maximum Product Version (WinSSUI.exe)' datatype='version' id='oval:com.mcafee.oval:var:4484' version='1' />
    <external_variable comment="AVG AntiVirus Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4482" version="2" />
    <external_variable comment="AVG AntiVirus Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4481" version="2" />
    <external_variable comment='Avast! AnitVirus Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4479' version='1' />
    <external_variable comment='Avast! AnitVirus Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4478' version='1' />
    <external_variable comment='Sunbelt counterSpy Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4477' version='1' />
    <external_variable comment='Sunbelt counterSpy Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4476' version='1' />
    <external_variable comment="AhnLab SpyZero Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4475" version="2" />
    <external_variable comment="AhnLab SpyZero Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4474" version="2" />
    <external_variable comment="V3 VirusBlock Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4472" version="2" />
    <external_variable comment="V3 VirusBlock Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4471" version="2" />
    <external_variable comment='Clam AntiVirus Maximum Product Version (ClamWin.exe)' datatype='version' id='oval:com.mcafee.oval:var:4469' version='1' />
    <external_variable comment="Clam AntiVirus Minimum Product Version (ClamWin.exe)" datatype="version" id="oval:com.mcafee.oval:var:4468" version="2" />
    <external_variable comment='Windows Defender Maximum Product Version (MSASCui.exe)' datatype='version' id='oval:com.mcafee.oval:var:4466' version='1' />
    <external_variable comment='Windows Defender Minimum Product Version (MSASCui.exe)' datatype='version' id='oval:com.mcafee.oval:var:4465' version='1' />
    <external_variable comment="F-Secure AntiVirus/Internet Security Maximum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4463" version="3">
      <possible_restriction hint="Enter version with build number. For example, the product version for &quot;F-Secure Internet Security 2009 9.00 build 149&quot; is 9.00.149">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="F-Secure AntiVirus/Internet Security Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:4462" version="3">
      <possible_restriction hint="Enter version with build number. For example, the product version for &quot;F-Secure Internet Security 2009 9.00 build 149&quot; is 9.00.149">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment='Kaspersky AntiViurs Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4461' version='1' />
    <external_variable comment='Kaspersky AntiViurs Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4460' version='1' />
    <external_variable comment='Computer Associates eTrust AntiVirus Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4459' version='1' />
    <external_variable comment='Computer Associates eTrust AntiVirus Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4458' version='1' />
    <external_variable comment='Trend ServerProtect Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4457' version='1' />
    <external_variable comment='Trend ServerProtect Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4456' version='1' />
    <external_variable comment='Trend OfficeScan maximum required product version' datatype='version' id='oval:com.mcafee.oval:var:4455' version='1' />
    <external_variable comment='Trend OfficeScan Minimum required product version' datatype='version' id='oval:com.mcafee.oval:var:4454' version='1' />
    <external_variable comment='Symantec Norton AntiVirus (Retail) maximum product version' datatype='version' id='oval:com.mcafee.oval:var:4453' version='1' />
    <external_variable comment='Symantec Norton AntiVirus (Retail) minimum product version' datatype='version' id='oval:com.mcafee.oval:var:4452' version='1' />
    <external_variable comment="Symantec AntiVirus/Endpoint Protection Maximum Version" datatype="version" id="oval:com.mcafee.oval:var:4451" version="2" />
    <external_variable comment="Symantec AntiVirus/Endpoint Protection Minimum Version" datatype="version" id="oval:com.mcafee.oval:var:4450" version="2" />
    <external_variable comment='Sophos AntiVirus Maximum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4448' version='1' />
    <external_variable comment='Sophos AntiVirus Minimum Product Version' datatype='version' id='oval:com.mcafee.oval:var:4447' version='1' />
    <external_variable comment='This is the minimum version of Patchlink Update that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4409' version='1' />
    <external_variable comment='This is the maximum version of Patchlink Update that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4408' version='1' />
    <external_variable comment='This is the minimum version of BigFix Patch Manager that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4407' version='1' />
    <external_variable comment='This is the maximum version of BigFix Patch Manager that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4406' version='1' />
    <external_variable comment='This is the value of BigFix Patch Manager BES Posture Evaluation that should be on the system.' datatype='version' id='oval:com.mcafee.oval:var:4405' version='1' />
    <external_variable comment="Maximum version of Windows Update Client software that should be on the system as indicated by the version of wuaueng.dll" datatype="version" id="oval:com.mcafee.oval:var:4404" version="4" />
    <external_variable comment="Minimum version of Windows Update Client software that should be on the system as indicated by the version of wuaueng.dll" datatype="version" id="oval:com.mcafee.oval:var:4403" version="3" />
    <external_variable comment="This is the maximum version of SCCM Client software that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:4402" version="2" />
    <external_variable comment="This is the minimum version of SCCM Client software that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:4400" version="3" />
    <external_variable comment="This is the maximum version of SCCM 2007/2012 Server software that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:4399" version="3" />
    <external_variable comment="This is the minimum version of SCCM 2007/2012 Server software that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:4398" version="3" />
    <external_variable comment="ipv6 should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:435126" version="1">
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="What is the expected banner text for all gui logins?(This should be in regex format)" datatype="string" id="oval:com.mcafee.oval:var:432014" version="1" />
    <external_variable comment="The number of special characters (ocredit) required by the policy" datatype="int" id="oval:com.mcafee.oval:var:430021" version="1" />
    <external_variable comment="What is the expected setting for PROMPT in /etc/sysconfig/boot?" datatype="string" id="oval:com.mcafee.oval:var:429980" version="1">
      <possible_value hint="to allow hotkey interactive startup">yes</possible_value>
      <possible_value hint="not to allow hotkey interactive startup">no</possible_value>
    </external_variable>
    <external_variable comment="Set the appropriate retention time value for install.log Recommended value: 30" datatype="int" id="oval:com.mcafee.oval:var:416300" version="1" />
    <external_variable comment="Set the appropriate retention time value for appfirewall.log Recommended value: 30" datatype="int" id="oval:com.mcafee.oval:var:416295" version="1" />
    <external_variable comment="Set the appropriate retention time value for wtmp.log Recommended value: 30" datatype="int" id="oval:com.mcafee.oval:var:416290" version="1" />
    <external_variable comment="UsePrivilegeSeparation should be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:406043" version="1">
      <possible_value hint="Enabled">yes</possible_value>
      <possible_value hint="Disabled">no</possible_value>
    </external_variable>
    <external_variable comment="Enter input for IPv6 status." datatype="string" id="oval:com.mcafee.oval:var:405155" version="1">
      <possible_value hint="Enabled">enable</possible_value>
      <possible_value hint="Disabled">disable</possible_value>
    </external_variable>
    <external_variable comment="Prevent Avahi from advertising its services?" datatype="string" id="oval:com.mcafee.oval:var:403405" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="disable publishing any information about the system?" datatype="string" id="oval:com.mcafee.oval:var:403403" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="what is the setting for check-response-ttl?" datatype="string" id="oval:com.mcafee.oval:var:403401" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Enter the value for - admin_space_left_action" datatype="string" id="oval:com.mcafee.oval:var:403347" version="1">
      <possible_value hint="The audit daemon does nothing (ignore)">ignore</possible_value>
      <possible_value hint="Issues a warning to syslog (syslog)">syslog</possible_value>
      <possible_value hint="Cause the audit daemon to stop writing records to the disk. The daemon will still be alive (suspend)">suspend</possible_value>
      <possible_value hint="Sends warning to the email account specified in action_mail_acct as well as sending the message to syslog (email)">email</possible_value>
      <possible_value hint="Execute the script (exec)">exec</possible_value>
      <possible_value hint="Cause the audit daemon to put the computer system in single user mode (single)">single</possible_value>
      <possible_value hint="Cause the audit daemon to shutdown the computer system (halt)">halt</possible_value>
    </external_variable>
    <external_variable comment="Enter the valid email address/alias for action_mail_acct (default is root)" datatype="string" id="oval:com.mcafee.oval:var:403346" version="1" />
    <external_variable comment="Enter the value for space_left_action parameter" datatype="string" id="oval:com.mcafee.oval:var:403345" version="1">
      <possible_value hint="The audit daemon does nothing (ignore)">ignore</possible_value>
      <possible_value hint="Issues a warning to syslog (syslog)">syslog</possible_value>
      <possible_value hint="Cause the audit daemon to stop writing records to the disk. The daemon will still be alive (suspend)">suspend</possible_value>
      <possible_value hint="Sends warning to the email account specified in action_mail_acct (email)">email</possible_value>
      <possible_value hint="Execute the script (exec)">exec</possible_value>
      <possible_value hint="Cause the audit daemon to put the computer system in single user mode (single)">single</possible_value>
      <possible_value hint="Cause the audit daemon to shutdown the computer system (halt)">halt</possible_value>
    </external_variable>
    <external_variable comment="optional:The name of a valid service" datatype="string" id="oval:com.mcafee.oval:var:402741" version="1" />
    <external_variable comment="optional:Defines different values that are valid for the service_state entity of a smf_state" datatype="string" id="oval:com.mcafee.oval:var:402692" version="1">
      <possible_value hint="The instance is enabled and running or available to run.">DEGRADED</possible_value>
      <possible_value hint="The instance is disabled.">DISABLED</possible_value>
      <possible_value hint="The instance is enabled, but not able to run.">MAINTENANCE</possible_value>
      <possible_value hint="This state represents a legacy instance that is not managed by the service management facility.">LEGACY-RUN</possible_value>
      <possible_value hint="The instance is enabled, but not yet running or available to run.">OFFLINE</possible_value>
      <possible_value hint="The instance is enabled and running or is available to run.">ONLINE</possible_value>
      <possible_value hint="This is the initial state for all service instances">UNINITIALIZED</possible_value>
    </external_variable>
    <external_variable comment="Address Space Layout Randomization should be enabled or not?" datatype="int" id="oval:com.mcafee.oval:var:402409" version="2">
      <possible_value hint="To Disable it set it to 0">0</possible_value>
      <possible_value hint="Randomize the positions of the stack set 1">1</possible_value>
      <possible_value hint="For default setting set 2">2</possible_value>
    </external_variable>
    <external_variable comment="ExecShield Protection should be enabled or not?" datatype="int" id="oval:com.mcafee.oval:var:402404" version="1">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="What is the fs.suid_dumpable variable value ?" datatype="int" id="oval:com.mcafee.oval:var:402399" version="1" />
    <external_variable comment="What is the hard core parameter value ?" datatype="string" id="oval:com.mcafee.oval:var:402395" version="1" />
    <external_variable comment="gpgcheck should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:401602" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Password Age" datatype="int" id="oval:com.mcafee.oval:var:2945955" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 365">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">365</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Configure Attack Surface Reduction rules" datatype="int" id="oval:com.mcafee.oval:var:2939333" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Attack Surface Reduction rules" datatype="int" id="oval:com.mcafee.oval:var:2939332" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Attack Surface Reduction rules" datatype="int" id="oval:com.mcafee.oval:var:2939308" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
    </external_variable>
    <external_variable comment="ConfiguredetectionforpotentiallyunwantedapplicationsissettoEnabled:Block" datatype="int" id="oval:com.mcafee.oval:var:2924160" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled: Block">1</possible_value>
      <possible_value hint="Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="PreventcertificateerroroverridesissettoEnabled" datatype="int" id="oval:com.mcafee.oval:var:2924159" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Turn On Virtualization Based Security" datatype="int" id="oval:com.mcafee.oval:var:2924121" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Manage preview builds" datatype="int" id="oval:com.mcafee.oval:var:2924113" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="AllowSideloadingofextensionissettoDisabled" datatype="int" id="oval:com.mcafee.oval:var:2924101" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Require user authentication for remote connections by using Network Level Authentication" datatype="int" id="oval:com.mcafee.oval:var:2924097" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled:Block All">0</possible_value>
      <possible_value hint="Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Enter the value and the recommended value is 1" datatype="int" id="oval:com.mcafee.oval:var:2920499" version="1" />
    <external_variable comment="Enter the value and the recommended value is 1" datatype="int" id="oval:com.mcafee.oval:var:2920493" version="1" />
    <external_variable comment="Enter the value and the recommended value is 1" datatype="int" id="oval:com.mcafee.oval:var:2920487" version="1" />
    <external_variable comment="Enter the value and the recommended value is 1" datatype="int" id="oval:com.mcafee.oval:var:2920480" version="1" />
    <external_variable comment="Enter the value and the recommended value is 1" datatype="int" id="oval:com.mcafee.oval:var:2920474" version="1" />
    <external_variable comment="Enter the value and the recommended value is 1" datatype="int" id="oval:com.mcafee.oval:var:2920468" version="1" />
    <external_variable comment="Enter the value and the recommended value is 1" datatype="int" id="oval:com.mcafee.oval:var:2920462" version="1" />
    <external_variable comment="Turn off Windows Defender AntiVirus" datatype="int" id="oval:com.mcafee.oval:var:2919942" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow upload of User Activities" datatype="int" id="oval:com.mcafee.oval:var:2919933" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Encryption Oracle Remediation" datatype="int" id="oval:com.mcafee.oval:var:2919924" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Enabled - Force Updated Clients">0</possible_value>
      <possible_value hint="Enabled - Mitigated">1</possible_value>
      <possible_value hint="Enabled - Vulnerable">2</possible_value>
    </external_variable>
    <external_variable comment="Turn off notifications network usage" datatype="int" id="oval:com.mcafee.oval:var:2919911" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off picture password sign-in" datatype="int" id="oval:com.mcafee.oval:var:2919897" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow Message Service Cloud Sync" datatype="int" id="oval:com.mcafee.oval:var:2918944" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Windows Store Install Service" datatype="int" id="oval:com.mcafee.oval:var:2918936" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Windows PushToInstall Service" datatype="int" id="oval:com.mcafee.oval:var:2918928" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Manage preview builds" datatype="int" id="oval:com.mcafee.oval:var:2918919" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled/ Disable preview builds">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure users from modifying settings" datatype="int" id="oval:com.mcafee.oval:var:2918912" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure users and apps from accessing dangerous websites" datatype="int" id="oval:com.mcafee.oval:var:2918904" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled/Blocked">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Windows Defender Application Guard in Enterprise Mode" datatype="int" id="oval:com.mcafee.oval:var:2917763" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Application Guard clipboard settings" datatype="int" id="oval:com.mcafee.oval:var:2917755" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Scan removable drives" datatype="int" id="oval:com.mcafee.oval:var:2917747" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Windows Defender Application Guard" datatype="int" id="oval:com.mcafee.oval:var:2917739" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Credential Guard" datatype="int" id="oval:com.mcafee.oval:var:2917731" version="1">
      <possible_value hint="Not Configured">3</possible_value>
      <possible_value hint="Enabled without lock">2</possible_value>
      <possible_value hint="Enabled with UEFI lock">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure UEFI Memory Attributes Table" datatype="int" id="oval:com.mcafee.oval:var:2917723" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled/Checked">1</possible_value>
      <possible_value hint="Disabled/Unchecked">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Turn On Virtualization Based Security" datatype="int" id="oval:com.mcafee.oval:var:2917715" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Virtualization Based Protection of Code Integrity" datatype="int" id="oval:com.mcafee.oval:var:2917714" version="1">
      <possible_value hint="Not Configured/Disabled">3</possible_value>
      <possible_value hint="Enabled without lock">2</possible_value>
      <possible_value hint="Enabled with UEFI lock">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Platform Security Level rules" datatype="int" id="oval:com.mcafee.oval:var:2917706" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Secure Boot and DMA Protection">3</possible_value>
      <possible_value hint="Secure Boot">1</possible_value>
    </external_variable>
    <external_variable comment="Startup type for Windows Push Notifications System Service (WpnService):" datatype="int" id="oval:com.mcafee.oval:var:2916521" version="1">
      <possible_value hint="Automatic/Automatic (Delayed Start)">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled/Not Installed">4</possible_value>
    </external_variable>
    <external_variable comment="Choose the value for the Attack Surface Reduction rule" datatype="int" id="oval:com.mcafee.oval:var:2916520" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Block">1</possible_value>
      <possible_value hint="Off">0</possible_value>
      <possible_value hint="Audit">2</possible_value>
    </external_variable>
    <external_variable comment="Enter the value for Attack Surface Reduction rule. Ex: 26190899-1602-49e8-8b27-eb1d0a1ce869 - 1 (Block Office communication application from creating child processes)" datatype="string" id="oval:com.mcafee.oval:var:2916519" version="1" />
    <external_variable comment="Audit Other Policy Change Events subcategory." datatype="string" id="oval:com.mcafee.oval:var:2916518" version="1">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit MPSSVC Rule-Level Policy Change subcategory." datatype="string" id="oval:com.mcafee.oval:var:2916517" version="2">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit Detailed File Share subcategory." datatype="string" id="oval:com.mcafee.oval:var:2916516" version="2">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Do not display last last signed-in user name" datatype="int" id="oval:com.mcafee.oval:var:2916515" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Startup type for OpenSSH SSH Server (sshd)" datatype="int" id="oval:com.mcafee.oval:var:2916514" version="1">
      <possible_value hint="Automatic/Automatic (Delayed Start)">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled/Not Installed">4</possible_value>
    </external_variable>
    <external_variable comment="Require user authentication for remote connections by using Network Level Authentication" datatype="int" id="oval:com.mcafee.oval:var:2916513" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Specific Security layer for remote (RDP) connections" datatype="int" id="oval:com.mcafee.oval:var:2916512" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Enabled: Security Layer: RDP">0</possible_value>
      <possible_value hint="Enabled: Security Layer: Negotiate">1</possible_value>
      <possible_value hint="Enabled: Security Layer: SSL">2</possible_value>
    </external_variable>
    <external_variable comment="Microsoft Store Install Service" datatype="int" id="oval:com.mcafee.oval:var:2916511" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Bluetooth Audio Gateway Service (BTAGService) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:2916510" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Only display the private store within the Microsoft Store" datatype="int" id="oval:com.mcafee.oval:var:2916509" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Block launching Universal Windows apps with Windows Runtime API access from hosted content" datatype="int" id="oval:com.mcafee.oval:var:2916508" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Disable all apps from Microsoft Store" datatype="int" id="oval:com.mcafee.oval:var:2916507" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Attack Surface Reduction rules" datatype="int" id="oval:com.mcafee.oval:var:2912520" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Allow Cloud Search" datatype="int" id="oval:com.mcafee.oval:var:2912511" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="User Selected">2</possible_value>
      <possible_value hint="Enable Cloud Search">1</possible_value>
      <possible_value hint="Disable Cloud Search">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Push To Install service" datatype="int" id="oval:com.mcafee.oval:var:2912503" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow Online Tips - Allow Setting to retrieve online tips" datatype="int" id="oval:com.mcafee.oval:var:2912497" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on e-mail scanning" datatype="int" id="oval:com.mcafee.oval:var:2912285" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Scan removable drives" datatype="int" id="oval:com.mcafee.oval:var:2912277" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn on behavior monitoring" datatype="int" id="oval:com.mcafee.oval:var:2912263" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure local setting override for reporting to Microsoft MAPS" datatype="int" id="oval:com.mcafee.oval:var:2912255" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="ATP Status" datatype="int" id="oval:com.mcafee.oval:var:2912070" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Enter minimum version required on the system for Endpoint Security IPS Content ex:- 8.0.0.3624" datatype="version" id="oval:com.mcafee.oval:var:2911930" version="1" />
    <external_variable comment="Enter minimum version required on the system for Endpoint Security AMCore ex:- 1.5.0.5002.7" datatype="version" id="oval:com.mcafee.oval:var:2911924" version="1" />
    <external_variable comment="Default action if first response fails" datatype="int" id="oval:com.mcafee.oval:var:2911834" version="2">
      <possible_value hint="Delete files">2</possible_value>
      <possible_value hint="Deny access to files">5</possible_value>
    </external_variable>
    <external_variable comment="Default Threat detection first response" datatype="int" id="oval:com.mcafee.oval:var:2911829" version="2">
      <possible_value hint="Clean files">0</possible_value>
      <possible_value hint="Delete files">2</possible_value>
      <possible_value hint="Deny access to files">5</possible_value>
    </external_variable>
    <external_variable comment="McAfee GTI Sensitivity level" datatype="int" id="oval:com.mcafee.oval:var:2911823" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Very Low">1</possible_value>
      <possible_value hint="Low">2</possible_value>
      <possible_value hint="Medium">3</possible_value>
      <possible_value hint="High">4</possible_value>
      <possible_value hint="Very High">5</possible_value>
    </external_variable>
    <external_variable comment="On Access Scanner Status" datatype="int" id="oval:com.mcafee.oval:var:2911817" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="McAfee EndpointSecurity AMCore engine version required (ex - 5900.7806) where 5900 is major version and 7806 is minor version" datatype="version" id="oval:com.mcafee.oval:var:2911813" version="1" />
    <external_variable comment="McAfee EndpointSecurity AMCore Content version required (ex - 3368.0) where 3368 is major version and 0 is minor version" datatype="version" id="oval:com.mcafee.oval:var:2911805" version="1" />
    <external_variable comment="McAfee Endpoint Security Maximum DAT age in seconds" datatype="int" id="oval:com.mcafee.oval:var:2911795" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Firewall status" datatype="int" id="oval:com.mcafee.oval:var:2911789" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Exploit Prevention feature status" datatype="int" id="oval:com.mcafee.oval:var:2911784" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="On Access Scanner Status" datatype="string" id="oval:com.mcafee.oval:var:2911777" version="1">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Self Protection status" datatype="int" id="oval:com.mcafee.oval:var:2911772" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Enter minimum version required on the system for Endpoint Security ex:- 10.5.4" datatype="version" id="oval:com.mcafee.oval:var:2911767" version="1" />
    <external_variable comment="Applocker Installed or Not" datatype="int" id="oval:com.mcafee.oval:var:2911574" version="2">
      <possible_value hint="Not Installed">99999</possible_value>
      <possible_value hint="Installed">1</possible_value>
    </external_variable>
    <external_variable comment="Applocker Enabled or Disabled" datatype="int" id="oval:com.mcafee.oval:var:2911567" version="2">
      <possible_value hint="Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure the Adobe Flash Click-to-Run setting" datatype="int" id="oval:com.mcafee.oval:var:2903371" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow Adobe Flash" datatype="int" id="oval:com.mcafee.oval:var:2903363" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Xbox Game Monitoring (xbgm)" datatype="int" id="oval:com.mcafee.oval:var:2903355" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
      <possible_value hint="Not Installed">5</possible_value>
    </external_variable>
    <external_variable comment="Xbox Accessory Management Service (XboxGipSvc)" datatype="int" id="oval:com.mcafee.oval:var:2903346" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
      <possible_value hint="Not Installed">5</possible_value>
    </external_variable>
    <external_variable comment="Do not use diagnostic data for tailored experiences" datatype="int" id="oval:com.mcafee.oval:var:2903338" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow Address bar drop-down list suggestions" datatype="int" id="oval:com.mcafee.oval:var:2903330" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Block all consumer Microsoft account user authentication" datatype="int" id="oval:com.mcafee.oval:var:2903322" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service" datatype="int" id="oval:com.mcafee.oval:var:2903314" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Enable Authenticated Proxy usage">0</possible_value>
      <possible_value hint="Disable Authenticated Proxy usage">1</possible_value>
    </external_variable>
    <external_variable comment="Disable new DMA devices when this computer is locked" datatype="int" id="oval:com.mcafee.oval:var:2903306" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Windows Defender SmartScreen" datatype="string" id="oval:com.mcafee.oval:var:2903292" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Warn">Warn</possible_value>
      <possible_value hint="Warn and prevent bypass">Block</possible_value>
    </external_variable>
    <external_variable comment="Remote host allows delegation of non-exportable credentials" datatype="int" id="oval:com.mcafee.oval:var:2903284" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on Windows Defender protection against Potentially Unwanted Applications" datatype="int" id="oval:com.mcafee.oval:var:2903276" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Enable Structured Exception Handling Overwrite Protection (SEHOP)" datatype="int" id="oval:com.mcafee.oval:var:2903270" version="1">
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure SMB v1 server" datatype="int" id="oval:com.mcafee.oval:var:2903262" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure MrxSmb10 driver" datatype="int" id="oval:com.mcafee.oval:var:2903254" version="1">
      <possible_value hint="Disabled">99999</possible_value>
      <possible_value hint="Disable driver">4</possible_value>
      <possible_value hint="Manal start">3</possible_value>
      <possible_value hint="Automatic start">2</possible_value>
    </external_variable>
    <external_variable comment="System Services: Microsoft FTP Service" datatype="int" id="oval:com.mcafee.oval:var:2902094" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
      <possible_value hint="Not Installed">5</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Media Player Network Sharing Service" datatype="int" id="oval:com.mcafee.oval:var:2902089" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: LxssManager" datatype="int" id="oval:com.mcafee.oval:var:2902084" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
      <possible_value hint="Not Installed">5</possible_value>
    </external_variable>
    <external_variable comment="System Services: Windows Mobile Hotspot Service" datatype="int" id="oval:com.mcafee.oval:var:2902079" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Xbox Live Networking Service" datatype="int" id="oval:com.mcafee.oval:var:2902074" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Xbox Live Game Save" datatype="int" id="oval:com.mcafee.oval:var:2902069" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Xbox Live Auth Manager" datatype="int" id="oval:com.mcafee.oval:var:2902064" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Peer Networking Grouping" datatype="int" id="oval:com.mcafee.oval:var:2902059" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Geolocation Service" datatype="int" id="oval:com.mcafee.oval:var:2902054" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Downloaded Maps Manager (MapsBroker)" datatype="int" id="oval:com.mcafee.oval:var:2902048" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System Services: Bluetooth Handsfree Service" datatype="int" id="oval:com.mcafee.oval:var:2902043" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Enable Font Providers" datatype="int" id="oval:com.mcafee.oval:var:2901879" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Prohibit unicast response to multicast or broadcast requests - Standard Profile" datatype="string" id="oval:com.mcafee.oval:var:2900695" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Specify types of Logging events that needs to be recorded ex:- iweap" datatype="string" id="oval:com.mcafee.oval:var:2900557" version="1" />
    <external_variable comment="Setup - Configure log access as required ex:- O:BAG:SYD:(D;; 0xf0007;;;AN) (A;; 0x7;;;SO)(A;; 0x3;;;IU)" datatype="string" id="oval:com.mcafee.oval:var:2900552" version="1" />
    <external_variable comment="Security - Configure log access as required ex:- O:BAG:SYD:(D;; 0xf0007;;;AN) (A;; 0x7;;;SO)(A;; 0x3;;;IU)" datatype="string" id="oval:com.mcafee.oval:var:2900548" version="1" />
    <external_variable comment="Application - Configure log access as required ex:- O:BAG:SYD:(D;; 0xf0007;;;AN) (A;; 0x7;;;SO)(A;; 0x3;;;IU)" datatype="string" id="oval:com.mcafee.oval:var:2900544" version="1" />
    <external_variable comment="System - Configure log access as required ex:- O:BAG:SYD:(D;; 0xf0007;;;AN) (A;; 0x7;;;SO)(A;; 0x3;;;IU)" datatype="string" id="oval:com.mcafee.oval:var:2900540" version="1" />
    <external_variable comment="Set roaming profile path for all users logging onto this computer as required ex:- \\Computername\Sharename\%USERNAME%" datatype="string" id="oval:com.mcafee.oval:var:2900536" version="1" />
    <external_variable comment="Enter System Log File Path as required" datatype="string" id="oval:com.mcafee.oval:var:2900532" version="1" />
    <external_variable comment="Enter Setup Log File Path as required" datatype="string" id="oval:com.mcafee.oval:var:2900528" version="1" />
    <external_variable comment="Log File Path as required" datatype="string" id="oval:com.mcafee.oval:var:2900524" version="1" />
    <external_variable comment="Trusted Hosts list ex:- local,10.213.212.2" datatype="string" id="oval:com.mcafee.oval:var:2900520" version="1" />
    <external_variable comment="Set Teredo Server Name as required" datatype="string" id="oval:com.mcafee.oval:var:2900516" version="1" />
    <external_variable comment="SSL Cipher Suite Order as required" datatype="string" id="oval:com.mcafee.oval:var:2900512" version="1" />
    <external_variable comment="Specify Windows Service Pack installation file location as required" datatype="string" id="oval:com.mcafee.oval:var:2900508" version="1" />
    <external_variable comment="Specify Windows installation file location as required" datatype="string" id="oval:com.mcafee.oval:var:2900504" version="1" />
    <external_variable comment="Specify site name as required" datatype="string" id="oval:com.mcafee.oval:var:2900500" version="1" />
    <external_variable comment="Set the SMTP Server used to send notifications as required" datatype="string" id="oval:com.mcafee.oval:var:2900496" version="1" />
    <external_variable comment="Site-Local Set the Seed Server as required" datatype="string" id="oval:com.mcafee.oval:var:2900492" version="1" />
    <external_variable comment="Set the Seed Server as required" datatype="string" id="oval:com.mcafee.oval:var:2900488" version="1" />
    <external_variable comment="Set the Email IDs to which notifications are to be sent as required seperated by semi colon" datatype="string" id="oval:com.mcafee.oval:var:2900484" version="1" />
    <external_variable comment="Type the name of hosted cache server" datatype="string" id="oval:com.mcafee.oval:var:2900480" version="1" />
    <external_variable comment="Server Authentication Certificate Template name required" datatype="string" id="oval:com.mcafee.oval:var:2900476" version="1" />
    <external_variable comment="ISATAP Router Name required" datatype="string" id="oval:com.mcafee.oval:var:2900472" version="1" />
    <external_variable comment="enter semi colon sepereated file extensions to be excluded ex:- *.dbf;*.jpg" datatype="string" id="oval:com.mcafee.oval:var:2900468" version="1" />
    <external_variable comment="Exclude credential providers as required for ex:- {ba0dd1d5-9754-4ba3-973c-40dce7901283},{383f1aa4-65dd-45bc-9f5a-ddd2f222f07d}" datatype="string" id="oval:com.mcafee.oval:var:2900464" version="1" />
    <external_variable comment="Exclude credential providers" datatype="string" id="oval:com.mcafee.oval:var:2900456" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Events.asp URL required" datatype="string" id="oval:com.mcafee.oval:var:2900453" version="1" />
    <external_variable comment="Events.asp program command line parameters required" datatype="string" id="oval:com.mcafee.oval:var:2900449" version="1" />
    <external_variable comment="Events.asp program required" datatype="string" id="oval:com.mcafee.oval:var:2900445" version="1" />
    <external_variable comment="Specify domain location determination URL required" datatype="string" id="oval:com.mcafee.oval:var:2900441" version="1" />
    <external_variable comment="Display string to be entered when smart card is blocked" datatype="string" id="oval:com.mcafee.oval:var:2900436" version="1" />
    <external_variable comment="Configure custom alert text to be used" datatype="string" id="oval:com.mcafee.oval:var:2900431" version="1" />
    <external_variable comment="Computer location path ex:- cityname/building/floor1/1800" datatype="string" id="oval:com.mcafee.oval:var:2900427" version="1" />
    <external_variable comment="Turn on Security Center Domain PCs only" datatype="int" id="oval:com.mcafee.oval:var:2900418" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Logging" datatype="string" id="oval:com.mcafee.oval:var:2900410" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Set the Time interval in minutes for logging accounting data" datatype="int" id="oval:com.mcafee.oval:var:2900402" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">2</restriction>
        <restriction operation="less than or equal">60000</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Delete data from devices running Microsoft firmware when a user logs off from the computer" datatype="int" id="oval:com.mcafee.oval:var:2900395" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Setup Configure log access" datatype="string" id="oval:com.mcafee.oval:var:2900393" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Security Configure log access" datatype="string" id="oval:com.mcafee.oval:var:2900385" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Application Configure log access" datatype="string" id="oval:com.mcafee.oval:var:2900377" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="System Configure log access" datatype="string" id="oval:com.mcafee.oval:var:2900369" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="System Log retention method" datatype="int" id="oval:com.mcafee.oval:var:2900363" version="1">
      <possible_value hint="Events in the System Log should be overwritten as needed">0</possible_value>
      <possible_restriction hint="Events in the System Log should be overwritten when they are X seconds old">
        <restriction operation="less than">4294967295</restriction>
      </possible_restriction>
      <possible_value hint="Events in the System Log should not be overwritten">4294967295</possible_value>
    </external_variable>
    <external_variable comment="Setup Log retention method" datatype="int" id="oval:com.mcafee.oval:var:2900357" version="1">
      <possible_value hint="Events in the Setup Log should be overwritten as needed">0</possible_value>
      <possible_restriction hint="Events in the Setup Log should be overwritten when they are X seconds old">
        <restriction operation="less than">4294967295</restriction>
      </possible_restriction>
      <possible_value hint="Events in the Setup Log should not be overwritten">4294967295</possible_value>
    </external_variable>
    <external_variable comment="Turn on logging" datatype="int" id="oval:com.mcafee.oval:var:2900237" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Resultant Set of Policy logging" datatype="int" id="oval:com.mcafee.oval:var:2900229" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Set roaming profile path for all users logging onto this computer" datatype="string" id="oval:com.mcafee.oval:var:2900221" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Restricts the UI language Windows uses for all logged users" datatype="string" id="oval:com.mcafee.oval:var:2900213" version="2">
      <possible_value hint="Disabled/Not Configured">Not Configured/Disabled</possible_value>
      <possible_value hint="English">en-US</possible_value>
      <possible_value hint="Japanese">ja-JP</possible_value>
      <possible_value hint="Korean">ko-KR</possible_value>
      <possible_value hint="German">de-DE</possible_value>
      <possible_value hint="Simplified Chinese">zh-CN</possible_value>
      <possible_value hint="Traditional Chinese (Taiwan)">zh-TW</possible_value>
      <possible_value hint="French">fr-FR</possible_value>
      <possible_value hint="Spanish">es-ES</possible_value>
      <possible_value hint="Italian">it-IT</possible_value>
      <possible_value hint="Swedish">sv-SE</possible_value>
      <possible_value hint="Dutch">nl-NL</possible_value>
      <possible_value hint="Portuguese (Brazil)">pt-BR</possible_value>
      <possible_value hint="Finnish">fi-FI</possible_value>
      <possible_value hint="Norwegian">nb-NO</possible_value>
      <possible_value hint="Danish">da-DK</possible_value>
      <possible_value hint="Hungarian">hu-HU</possible_value>
      <possible_value hint="Polish">pl-PL</possible_value>
      <possible_value hint="Russian">ru-RU</possible_value>
      <possible_value hint="Czech">cs-CZ</possible_value>
      <possible_value hint="Greek">el-GR</possible_value>
      <possible_value hint="Portuguese (Portugal)">pt-PT</possible_value>
      <possible_value hint="Turkish">tr-TR</possible_value>
      <possible_value hint="Arabic">ar-SA</possible_value>
      <possible_value hint="Hebrew">he-IL</possible_value>
      <possible_value hint="Slovak">sk-SK</possible_value>
      <possible_value hint="Slovenian">sl-SI</possible_value>
      <possible_value hint="Romanian">ro-RO</possible_value>
      <possible_value hint="Croatian">hr-HR</possible_value>
      <possible_value hint="Bulgarian">bg-BG</possible_value>
      <possible_value hint="Estonian">et-EE</possible_value>
      <possible_value hint="Lithuanian">lt-LT</possible_value>
      <possible_value hint="Latvian">lv-LV</possible_value>
      <possible_value hint="Thai">th-TH</possible_value>
      <possible_value hint="Traditional Chinese (Hong Kong)">zh-HK</possible_value>
      <possible_value hint="Serbian (Latin)">sr-Latn-CS</possible_value>
      <possible_value hint="Ukrainian">uk-UA</possible_value>
    </external_variable>
    <external_variable comment="Remove browse dialog box for new source" datatype="int" id="oval:com.mcafee.oval:var:2900205" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="System Log File Path" datatype="string" id="oval:com.mcafee.oval:var:2900197" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Setup Log File Path" datatype="string" id="oval:com.mcafee.oval:var:2900189" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Application Log File Path" datatype="string" id="oval:com.mcafee.oval:var:2900181" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Log event when quota limit exceeded" datatype="int" id="oval:com.mcafee.oval:var:2900173" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Log directory pruning retry events" datatype="int" id="oval:com.mcafee.oval:var:2900165" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not log users on with temporary profiles" datatype="int" id="oval:com.mcafee.oval:var:2900157" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not forcefully unload the users registry at user logoff" datatype="int" id="oval:com.mcafee.oval:var:2900149" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off logging via package settings" datatype="int" id="oval:com.mcafee.oval:var:2900141" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Disable logging via package settings on">0</possible_value>
      <possible_value hint="Disable logging via package settings off">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Start Menu preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900133" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Shortcuts preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900125" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Services preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900117" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Scheduled Tasks preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900109" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Registry preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900101" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Regional Options preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900093" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Local Users and Groups preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900085" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Internet Settings preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900077" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Ini Files preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900069" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Folders preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900061" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Folder Options preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900053" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Files preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900045" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Environment preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900032" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Drive Maps preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900024" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Devices preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900016" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Data Sources preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900008" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure Applications preference logging and tracing" datatype="string" id="oval:com.mcafee.oval:var:2900000" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Background upload of a roaming user profiles registry file while user is logged on" datatype="int" id="oval:com.mcafee.oval:var:2899992" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Run at set interval">1</possible_value>
      <possible_value hint="Run at specified time of day">2</possible_value>
    </external_variable>
    <external_variable comment="Set Windows Scaling Heuristics State" datatype="int" id="oval:com.mcafee.oval:var:2899984" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Use mandatory profiles on the RD Session Host server" datatype="int" id="oval:com.mcafee.oval:var:2899976" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Use localized subfolder names when redirecting Start Menu and My Documents" datatype="int" id="oval:com.mcafee.oval:var:2899968" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Use IP Address Redirection" datatype="int" id="oval:com.mcafee.oval:var:2899960" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Kerberos Use forest search order" datatype="int" id="oval:com.mcafee.oval:var:2899952" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Use forest search order" datatype="int" id="oval:com.mcafee.oval:var:2899944" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on TPM backup to Active Directory Domain Services" datatype="int" id="oval:com.mcafee.oval:var:2899936" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on Software Notifications" datatype="int" id="oval:com.mcafee.oval:var:2899928" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on root certificate propagation from smart card" datatype="int" id="oval:com.mcafee.oval:var:2899920" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on recommended updates via Automatic Updates" datatype="int" id="oval:com.mcafee.oval:var:2899912" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on economical application of administratively assigned Offline Files" datatype="int" id="oval:com.mcafee.oval:var:2899904" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on definition updates through both WSUS and Windows Update" datatype="int" id="oval:com.mcafee.oval:var:2899896" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on definition updates through both WSUS and the Microsoft Malware Protection Center" datatype="int" id="oval:com.mcafee.oval:var:2899888" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on certificate propagation from smart card" datatype="int" id="oval:com.mcafee.oval:var:2899880" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on Accounting for WSRM" datatype="int" id="oval:com.mcafee.oval:var:2899872" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="TTL value for A and PTR records" datatype="int" id="oval:com.mcafee.oval:var:2899864" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">4294967200</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Try Next Closest Site" datatype="int" id="oval:com.mcafee.oval:var:2899856" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Trusted Hosts" datatype="string" id="oval:com.mcafee.oval:var:2899848" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Specify traps for public community" datatype="string" id="oval:com.mcafee.oval:var:2899840" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Time (in seconds) to force reboot when required for policy changes to take effect" datatype="int" id="oval:com.mcafee.oval:var:2899832" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">4294968</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Set Time (in seconds) to force reboot" datatype="int" id="oval:com.mcafee.oval:var:2899824" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">9999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Set Teredo Server Name" datatype="string" id="oval:com.mcafee.oval:var:2899816" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Set Teredo Refresh Rate" datatype="int" id="oval:com.mcafee.oval:var:2899808" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">86400</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Set Teredo Default Qualified" datatype="string" id="oval:com.mcafee.oval:var:2899800" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Set teredo Client Port" datatype="int" id="oval:com.mcafee.oval:var:2899792" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">65535</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Tag Windows Customer Experience Improvement data with Study Identifier" datatype="int" id="oval:com.mcafee.oval:var:2899784" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">9999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Set SYSVOL share compatibility" datatype="int" id="oval:com.mcafee.oval:var:2899776" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="SiteLocal Clouds Switch to the Simplified Chinese (PRC) gestures" datatype="int" id="oval:com.mcafee.oval:var:2899768" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="SSL Cipher Suite Order" datatype="string" id="oval:com.mcafee.oval:var:2899760" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Specify Windows Service Pack installation file location" datatype="string" id="oval:com.mcafee.oval:var:2899752" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Specify Windows installation file location" datatype="string" id="oval:com.mcafee.oval:var:2899744" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Specify Shell Timeout" datatype="int" id="oval:com.mcafee.oval:var:2899736" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">2147483647</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Specify maximum number of processes per Shell" datatype="int" id="oval:com.mcafee.oval:var:2899728" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">2147483647</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Specify maximum amount of memory in MB per Shell" datatype="int" id="oval:com.mcafee.oval:var:2899720" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">2147483647</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Specify idle Timeout" datatype="int" id="oval:com.mcafee.oval:var:2899712" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">2147483647</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Specify a default color" datatype="int" id="oval:com.mcafee.oval:var:2899704" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Specify site name" datatype="string" id="oval:com.mcafee.oval:var:2899696" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure how often a DFS client discovers domain controllers" datatype="int" id="oval:com.mcafee.oval:var:2899688" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">15</restriction>
        <restriction operation="less than or equal">360</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Set timer resolution" datatype="int" id="oval:com.mcafee.oval:var:2899680" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">4000000000</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Set the SMTP Server used to send notifications" datatype="string" id="oval:com.mcafee.oval:var:2899672" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Site-Local Clouds Set the Seed Server" datatype="string" id="oval:com.mcafee.oval:var:2899664" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Global Clouds Set the Seed Server" datatype="string" id="oval:com.mcafee.oval:var:2899656" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Set the Email IDs to which notifications are to be sent" datatype="string" id="oval:com.mcafee.oval:var:2899649" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="SiteLocal Clouds Set PNRP cloud to resolve only" datatype="int" id="oval:com.mcafee.oval:var:2899640" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Set PNRP cloud to resolve only" datatype="int" id="oval:com.mcafee.oval:var:2899632" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Set percentage of disk space used for client computer cache" datatype="int" id="oval:com.mcafee.oval:var:2899624" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">100</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Configure compression for RemoteFX data" datatype="int" id="oval:com.mcafee.oval:var:2899616" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Optimized to use less memory">1</possible_value>
      <possible_value hint="Optimized to use less network bandwidth">3</possible_value>
      <possible_value hint="Balances memory and network bandwidth">2</possible_value>
      <possible_value hint="Do not use an RDP compression algorithm">0</possible_value>
    </external_variable>
    <external_variable comment="Set BranchCache Hosted Cache mode" datatype="string" id="oval:com.mcafee.oval:var:2899608" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Server Authentication Certificate Template" datatype="string" id="oval:com.mcafee.oval:var:2899600" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Set Scavenge Interval" datatype="int" id="oval:com.mcafee.oval:var:2899592" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">4294967200</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Display instructions in startup scripts as they run" datatype="int" id="oval:com.mcafee.oval:var:2899584" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Run startup scripts asynchronously" datatype="int" id="oval:com.mcafee.oval:var:2899576" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Display instructions in shutdown scripts as they run" datatype="int" id="oval:com.mcafee.oval:var:2899568" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="RPC Troubleshooting State Information" datatype="int" id="oval:com.mcafee.oval:var:2899560" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Auto1">1</possible_value>
      <possible_value hint="Auto2">2</possible_value>
      <possible_value hint="Full">4</possible_value>
      <possible_value hint="None">0</possible_value>
      <possible_value hint="Server">3</possible_value>
    </external_variable>
    <external_variable comment="Reverse the subject name stored in a certificate when displaying" datatype="int" id="oval:com.mcafee.oval:var:2899552" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Require strict KDC validation" datatype="int" id="oval:com.mcafee.oval:var:2899544" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Re-prompt for restart with scheduled installations" datatype="int" id="oval:com.mcafee.oval:var:2899536" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">1440</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Remove Windows Security item from Start menu" datatype="int" id="oval:com.mcafee.oval:var:2899528" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Remove users ability to invoke machine policy refresh" datatype="int" id="oval:com.mcafee.oval:var:2899520" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Remove Program Compatibility Property Page" datatype="int" id="oval:com.mcafee.oval:var:2899512" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registration Refresh Interval" datatype="int" id="oval:com.mcafee.oval:var:2899504" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">1800</restriction>
        <restriction operation="less than or equal">4294967200</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Register PTR Records" datatype="int" id="oval:com.mcafee.oval:var:2899496" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Do not register">0</possible_value>
      <possible_value hint="Register">1</possible_value>
      <possible_value hint="Register only if A record registration succeeds">2</possible_value>
    </external_variable>
    <external_variable comment="Propagation of extended error information" datatype="int" id="oval:com.mcafee.oval:var:2899488" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Off">0</possible_value>
      <possible_value hint="Off with Exceptions">2</possible_value>
      <possible_value hint="On">3</possible_value>
      <possible_value hint="On with Exceptions">1</possible_value>
    </external_variable>
    <external_variable comment="Prompt for credentials on the client computer" datatype="int" id="oval:com.mcafee.oval:var:2899480" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Features Updates" datatype="int" id="oval:com.mcafee.oval:var:2899432" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Current Branch">16</possible_value>
      <possible_value hint="Current Branch for Business">32</possible_value>
    </external_variable>
    <external_variable comment="DNS Client: NetBIOS node type" datatype="string" id="oval:com.mcafee.oval:var:2899426" version="1">
      <possible_value hint="Not Configured/ Disabled">Disabled</possible_value>
      <possible_value hint="B-Node">1</possible_value>
      <possible_value hint="H-Node">8</possible_value>
      <possible_value hint="M-Node">4</possible_value>
      <possible_value hint="P-Node">2</possible_value>
    </external_variable>
    <external_variable comment="Turn off all Windows spotlight features" datatype="int" id="oval:com.mcafee.oval:var:2899418" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not suggest third-party content in Windows spotlight" datatype="int" id="oval:com.mcafee.oval:var:2899409" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Windows spotlight on Lock Screen" datatype="int" id="oval:com.mcafee.oval:var:2899400" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">2</possible_value>
    </external_variable>
    <external_variable comment="Defer quality updates installation:" datatype="int" id="oval:com.mcafee.oval:var:2899392" version="1">
      <possible_restriction hint="Enter period in days:">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Select when Quality Updates are received:" datatype="string" id="oval:com.mcafee.oval:var:2899382" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Defer Feature Updates Period In Days" datatype="int" id="oval:com.mcafee.oval:var:2899372" version="1">
      <possible_restriction hint="Custom: Enter a custom age in days">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Allow Windows Ink Workspace" datatype="int" id="oval:com.mcafee.oval:var:2899357" version="1">
      <possible_value hint="Setting: Not Configured/ Disabled">99999</possible_value>
      <possible_value hint="Enabled and Action: Disabled">0</possible_value>
      <possible_value hint="Enabled and Action: On">2</possible_value>
      <possible_value hint="Enabled and Action: On, but disallow access above lock">1</possible_value>
    </external_variable>
    <external_variable comment="Allow suggested apps in Windows Ink Workspace" datatype="int" id="oval:com.mcafee.oval:var:2899349" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Watson events" datatype="int" id="oval:com.mcafee.oval:var:2899341" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Allow Cortana above lock screen" datatype="int" id="oval:com.mcafee.oval:var:2899333" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Microsoft Edge - Allow Extensions" datatype="string" id="oval:com.mcafee.oval:var:2899327" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent access to the about:flags page in Microsoft Edge" datatype="string" id="oval:com.mcafee.oval:var:2899326" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Require pin for pairing" datatype="string" id="oval:com.mcafee.oval:var:2899306" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Use of Camera" datatype="string" id="oval:com.mcafee.oval:var:2899296" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access notifications" datatype="int" id="oval:com.mcafee.oval:var:2899261" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access phone" datatype="int" id="oval:com.mcafee.oval:var:2899254" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Network connectivity during connectedstandby (plugged in)." datatype="string" id="oval:com.mcafee.oval:var:2899245" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Network connectivity during connected standby (on battery)." datatype="string" id="oval:com.mcafee.oval:var:2899235" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Block user from showing account details on signin:" datatype="string" id="oval:com.mcafee.oval:var:2899225" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Continue experiences on this device." datatype="string" id="oval:com.mcafee.oval:var:2899214" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off multicast name resolution" datatype="string" id="oval:com.mcafee.oval:var:2899204" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Restrict clients allowed to make remote calls to SAM" datatype="string" id="oval:com.mcafee.oval:var:2899194" version="1">
      <possible_value hint="Administrators- Remote Access: Allow:">O:BAG:BAD:(A;;RC;;;LA)</possible_value>
      <possible_restriction hint="Enter the security descriptor (cannot be blank):">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Allow remote server management through WinRM" datatype="int" id="oval:com.mcafee.oval:var:2898179" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent installation of devices that match any of these device IDs" datatype="string" id="oval:com.mcafee.oval:var:2898069" version="1">
      <possible_value hint="Disabled/ Not Configured">99999</possible_value>
      <possible_restriction hint="Enter hardware IDs and compatible IDs for prevented devices">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Allow remote server management through WinRM" datatype="int" id="oval:com.mcafee.oval:var:2898050" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Parameters: DisabledComponents value" datatype="int" id="oval:com.mcafee.oval:var:2898043" version="1">
      <possible_value hint="Enable IPV6">0</possible_value>
      <possible_value hint="Disable IPv6">255</possible_value>
    </external_variable>
    <external_variable comment="Prevent the usage of OneDrive for file storage on Windows 8.1" datatype="int" id="oval:com.mcafee.oval:var:2898033" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Include rarely used Chinese, Kanji, or Hanja characters" datatype="int" id="oval:com.mcafee.oval:var:2897801" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Ignore the local list of blocked TPM commands" datatype="int" id="oval:com.mcafee.oval:var:2897793" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Ignore the default list of blocked TPM commands" datatype="int" id="oval:com.mcafee.oval:var:2897785" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Ignore Delegation Failure" datatype="int" id="oval:com.mcafee.oval:var:2897777" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="On">1</possible_value>
      <possible_value hint="Off">0</possible_value>
    </external_variable>
    <external_variable comment="Ignore custom consent settings" datatype="int" id="oval:com.mcafee.oval:var:2897769" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Hide previous versions of files on backup location" datatype="int" id="oval:com.mcafee.oval:var:2897761" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Hide previous versions list for local files" datatype="int" id="oval:com.mcafee.oval:var:2897753" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Hide notifications about RD Licensing problems that affect the RD Session Host server" datatype="int" id="oval:com.mcafee.oval:var:2897745" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Hide entry points for Fast User Switching" datatype="int" id="oval:com.mcafee.oval:var:2897610" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Global Configuration Settings" datatype="string" id="oval:com.mcafee.oval:var:2897602" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure forwarder resource usage" datatype="int" id="oval:com.mcafee.oval:var:2897594" version="2">
      <possible_value hint="Disabled/Not Configured">-1</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">9999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Force the reading of all certificates from the smart card" datatype="int" id="oval:com.mcafee.oval:var:2897586" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Force selected system UI language to overwrite the user UI language" datatype="int" id="oval:com.mcafee.oval:var:2897578" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Force Rediscovery Interval" datatype="int" id="oval:com.mcafee.oval:var:2897569" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">3600</restriction>
        <restriction operation="less than or equal">4294967200</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="For touch input dont show the Input Panel icon" datatype="int" id="oval:com.mcafee.oval:var:2897561" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Specify positive periodic DC Cache refresh for non-background callers" datatype="int" id="oval:com.mcafee.oval:var:2897553" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">4294967200</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Use positive periodic DC cache refresh for background callers" datatype="int" id="oval:com.mcafee.oval:var:2897545" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">4233600</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Permitted Managers" datatype="string" id="oval:com.mcafee.oval:var:2897537" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Notify blocked drivers" datatype="int" id="oval:com.mcafee.oval:var:2897529" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">2</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Non-conforming packets" datatype="int" id="oval:com.mcafee.oval:var:2897521" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">7</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Specify negative DC Discovery cache setting" datatype="int" id="oval:com.mcafee.oval:var:2897513" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">604800</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Use maximum DC discovery retry interval setting for background callers" datatype="int" id="oval:com.mcafee.oval:var:2897505" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">4233600</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="MaxConcurrentUsers" datatype="int" id="oval:com.mcafee.oval:var:2897498" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">100</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="List of applications to be excluded" datatype="string" id="oval:com.mcafee.oval:var:2897489" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="License server security group" datatype="int" id="oval:com.mcafee.oval:var:2897481" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="ISATAP Router Name" datatype="string" id="oval:com.mcafee.oval:var:2897473" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Use initial DC discovery retry setting for background callers" datatype="int" id="oval:com.mcafee.oval:var:2897457" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">4233600</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Enter the desired firewalld version." datatype="version" id="oval:com.mcafee.oval:var:2897422" version="1" />
    <external_variable comment="For tablet pen input dont show the Input Panel icon" datatype="int" id="oval:com.mcafee.oval:var:2897381" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Final DC Discovery Retry Setting for Background Callers" datatype="int" id="oval:com.mcafee.oval:var:2897373" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">99999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Enable file screens" datatype="string" id="oval:com.mcafee.oval:var:2897365" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Events.asp URL" datatype="string" id="oval:com.mcafee.oval:var:2897350" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Events.asp program command line parameters" datatype="string" id="oval:com.mcafee.oval:var:2897341" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Events.asp program" datatype="string" id="oval:com.mcafee.oval:var:2897333" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Enforce upgrade component rules" datatype="int" id="oval:com.mcafee.oval:var:2897325" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Encrypt the Offline Files cache" datatype="int" id="oval:com.mcafee.oval:var:2897317" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Enable Transparent Caching" datatype="int" id="oval:com.mcafee.oval:var:2897309" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">100000000</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Enable client-side targeting" datatype="int" id="oval:com.mcafee.oval:var:2897301" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Dynamic Update" datatype="int" id="oval:com.mcafee.oval:var:2897293" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prevent AutoPlay fro remebering user choices" datatype="int" id="oval:com.mcafee.oval:var:2897285" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Specify domain location determination URL" datatype="string" id="oval:com.mcafee.oval:var:2897277" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Return domain controller address type" datatype="int" id="oval:com.mcafee.oval:var:2897269" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not process incoming mailslot messages used for domain controller location based on NetBIOS domain names" datatype="int" id="oval:com.mcafee.oval:var:2897261" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not check for user ownership of Roaming Profile Folders" datatype="int" id="oval:com.mcafee.oval:var:2897253" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Display string when smart card is blocked" datatype="string" id="oval:com.mcafee.oval:var:2897245" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure custom alert text" datatype="string" id="oval:com.mcafee.oval:var:2897237" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Directory pruning retry" datatype="int" id="oval:com.mcafee.oval:var:2897229" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="No Retry">0</possible_value>
      <possible_value hint="1 Retry">1</possible_value>
      <possible_value hint="2 Retries">2</possible_value>
      <possible_value hint="3 Retries">3</possible_value>
      <possible_value hint="4 Retries">4</possible_value>
      <possible_value hint="5 Retries">5</possible_value>
      <possible_value hint="6 Retries">6</possible_value>
    </external_variable>
    <external_variable comment="Directory pruning priority" datatype="int" id="oval:com.mcafee.oval:var:2897221" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Below Normal">4294967295</possible_value>
      <possible_value hint="Lowest">4294967294</possible_value>
      <possible_value hint="Normal">0</possible_value>
      <possible_value hint="Above Normal">1</possible_value>
      <possible_value hint="Highest">2</possible_value>
    </external_variable>
    <external_variable comment="Directory pruning interval" datatype="int" id="oval:com.mcafee.oval:var:2897213" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Continuous">0</possible_value>
      <possible_value hint="10 Minutes">10</possible_value>
      <possible_value hint="1 Hour">60</possible_value>
      <possible_value hint="4 Hours">240</possible_value>
      <possible_value hint="8 Hours">480</possible_value>
      <possible_value hint="12 Hours">720</possible_value>
      <possible_value hint="1 Day">1440</possible_value>
      <possible_value hint="2 Days">2880</possible_value>
      <possible_value hint="3 Days">4320</possible_value>
      <possible_value hint="4 Days">5760</possible_value>
      <possible_value hint="5 Days">7200</possible_value>
      <possible_value hint="6 Days">8640</possible_value>
      <possible_value hint="1 Week">10080</possible_value>
      <possible_value hint="2 Weeks">20160</possible_value>
      <possible_value hint="3 Weeks">30240</possible_value>
      <possible_value hint="4 Weeks">40320</possible_value>
      <possible_value hint="5 Weeks">50400</possible_value>
      <possible_value hint="6 Weeks">60480</possible_value>
      <possible_value hint="7 Weeks">70560</possible_value>
      <possible_value hint="Infinite">4294967295</possible_value>
    </external_variable>
    <external_variable comment="Configure scenario retention" datatype="int" id="oval:com.mcafee.oval:var:2897201" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">9999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Delete user profiles older than a specified number of days on system restart" datatype="int" id="oval:com.mcafee.oval:var:2897193" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">99999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Delete cached copies of roaming profiles" datatype="int" id="oval:com.mcafee.oval:var:2897185" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Delay Restart for scheduled installations" datatype="int" id="oval:com.mcafee.oval:var:2897173" version="1">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. (Value is in minutes)">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">30</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Define interoperable Kerberos V5 realm settings" datatype="string" id="oval:com.mcafee.oval:var:2897166" version="2">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Define host name-to-Kerberos realm mappings" datatype="string" id="oval:com.mcafee.oval:var:2897157" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Define Activation Security Check exemptions" datatype="int" id="oval:com.mcafee.oval:var:2897149" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Customize consent settings" datatype="string" id="oval:com.mcafee.oval:var:2897141" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure the server address, refresh interval, and issuer certificate authority of a target Subscription Manager" datatype="string" id="oval:com.mcafee.oval:var:2897133" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Configure the list of blocked TPM commands" datatype="int" id="oval:com.mcafee.oval:var:2897125" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure root certificate clean up" datatype="int" id="oval:com.mcafee.oval:var:2897117" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="No cleanup">0</possible_value>
      <possible_value hint="Clean up certificates on smart card removal">1</possible_value>
      <possible_value hint="Clean up certificates on log off">2</possible_value>
    </external_variable>
    <external_variable comment="Configure Report Queue" datatype="int" id="oval:com.mcafee.oval:var:2897109" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure Report Archive" datatype="int" id="oval:com.mcafee.oval:var:2897101" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Configure list of IEEE 1667 silos usable on your computer" datatype="int" id="oval:com.mcafee.oval:var:2897093" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Corrupted File Recovery behavior" datatype="int" id="oval:com.mcafee.oval:var:2897082" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Troubleshooting only">1</possible_value>
      <possible_value hint="Regular">2</possible_value>
      <possible_value hint="Silent">3</possible_value>
    </external_variable>
    <external_variable comment="Configure Background Sync" datatype="int" id="oval:com.mcafee.oval:var:2897074" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Computer location" datatype="string" id="oval:com.mcafee.oval:var:2897066" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Specify communities" datatype="string" id="oval:com.mcafee.oval:var:2897058" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Check published state" datatype="int" id="oval:com.mcafee.oval:var:2897050" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Never">4294967295</possible_value>
      <possible_value hint="30 Minutes">30</possible_value>
      <possible_value hint="1 hour">60</possible_value>
      <possible_value hint="4 hours">240</possible_value>
      <possible_value hint="8 hours">480</possible_value>
      <possible_value hint="12 hours">720</possible_value>
      <possible_value hint="1 Day">1440</possible_value>
    </external_variable>
    <external_variable comment="Check for the latest virus and spyware definitions before running a scheduled scan" datatype="int" id="oval:com.mcafee.oval:var:2897042" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Control maximum size of baseline file cache" datatype="int" id="oval:com.mcafee.oval:var:2897034" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">100</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Specify Administratively assigned offline files" datatype="string" id="oval:com.mcafee.oval:var:2897025" version="1">
      <possible_value hint="Not Configured/Disabled">Not Configured/Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
    </external_variable>
    <external_variable comment="Apply policy to removable media" datatype="int" id="oval:com.mcafee.oval:var:2897017" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Add the Administrators security group to roaming user profiles" datatype="int" id="oval:com.mcafee.oval:var:2897009" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Wrong certificate usage" datatype="int" id="oval:com.mcafee.oval:var:2897001" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Select">1</possible_value>
      <possible_value hint="Unselect">0</possible_value>
    </external_variable>
    <external_variable comment="Expired certificate validation date" datatype="int" id="oval:com.mcafee.oval:var:2896993" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Select">1</possible_value>
      <possible_value hint="Unselect">0</possible_value>
    </external_variable>
    <external_variable comment="Invalid certificate name" datatype="int" id="oval:com.mcafee.oval:var:2896985" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Select">1</possible_value>
      <possible_value hint="Unselect">0</possible_value>
    </external_variable>
    <external_variable comment="Unknown certification authority" datatype="int" id="oval:com.mcafee.oval:var:2896977" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Select">1</possible_value>
      <possible_value hint="Unselect">0</possible_value>
    </external_variable>
    <external_variable comment="Installation Policy for unsigned ActiveX control" datatype="int" id="oval:com.mcafee.oval:var:2896968" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Dont install">0</possible_value>
      <possible_value hint="Prompt the user">1</possible_value>
      <possible_value hint="Silently install">2</possible_value>
    </external_variable>
    <external_variable comment="Installation Policy for signed ActiveX control" datatype="int" id="oval:com.mcafee.oval:var:2896959" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Dont install">0</possible_value>
      <possible_value hint="Prompt the user">1</possible_value>
      <possible_value hint="Silently install">2</possible_value>
    </external_variable>
    <external_variable comment="Installation Policy for ActiveX control signed by trusted publisher" datatype="int" id="oval:com.mcafee.oval:var:2896951" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Dont install">0</possible_value>
      <possible_value hint="Prompt the user">1</possible_value>
      <possible_value hint="Silently install">2</possible_value>
    </external_variable>
    <external_variable comment="Allow audio and video playback redirection" datatype="int" id="oval:com.mcafee.oval:var:2896942" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="System: Backup log automatically when full" datatype="int" id="oval:com.mcafee.oval:var:2896934" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Application: Backup log automatically when full" datatype="int" id="oval:com.mcafee.oval:var:2895569" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Security: Backup log automatically when full" datatype="int" id="oval:com.mcafee.oval:var:2895561" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Automatic Updates detection frequency" datatype="int" id="oval:com.mcafee.oval:var:2895549" version="1">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. (Value is in hours)">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">22</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Prohibit New Task Creation" datatype="int" id="oval:com.mcafee.oval:var:2895541" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Hide Property Pages" datatype="int" id="oval:com.mcafee.oval:var:2895533" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Save copies of transform files in a secure location on workstation" datatype="int" id="oval:com.mcafee.oval:var:2895525" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow users to patch elevated products" datatype="int" id="oval:com.mcafee.oval:var:2895517" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow users to use media source while elevated" datatype="int" id="oval:com.mcafee.oval:var:2895509" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow users to browse for source while elevated" datatype="int" id="oval:com.mcafee.oval:var:2895500" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Disable changing certificate settings" datatype="int" id="oval:com.mcafee.oval:var:2895484" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Game Recording and Broadcasting" datatype="int" id="oval:com.mcafee.oval:var:2895112" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Disable IPv6" datatype="int" id="oval:com.mcafee.oval:var:2895103" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Disable IPv6">255</possible_value>
    </external_variable>
    <external_variable comment="Pause Upgrades and Updates" datatype="int" id="oval:com.mcafee.oval:var:2894915" version="1">
      <possible_value hint="Unchecked">99999</possible_value>
      <possible_value hint="Checked">1</possible_value>
    </external_variable>
    <external_variable comment="Defer updates duration" datatype="int" id="oval:com.mcafee.oval:var:2894910" version="1" />
    <external_variable comment="Defer upgrades duration" datatype="int" id="oval:com.mcafee.oval:var:2894905" version="1" />
    <external_variable comment="Do not show feedback notifications" datatype="int" id="oval:com.mcafee.oval:var:2894796" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Microsoft consumer experiences" datatype="int" id="oval:com.mcafee.oval:var:2894788" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Select the encryption method for removable data drives" datatype="int" id="oval:com.mcafee.oval:var:2894780" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="AES-CBC 128-bit (default)">3</possible_value>
      <possible_value hint="AES-CBC 256-bit">4</possible_value>
      <possible_value hint="XTS-AES 128-bit">6</possible_value>
      <possible_value hint="XTS-AES 256-bit">7</possible_value>
    </external_variable>
    <external_variable comment="Select the encryption method for fixed data drives" datatype="int" id="oval:com.mcafee.oval:var:2894772" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="AES-CBC 128-bit">3</possible_value>
      <possible_value hint="AES-CBC 256-bit">4</possible_value>
      <possible_value hint="XTS-AES 128-bit (default)">6</possible_value>
      <possible_value hint="XTS-AES 256-bit">7</possible_value>
    </external_variable>
    <external_variable comment="Select the encryption method for operating system drives" datatype="int" id="oval:com.mcafee.oval:var:2894763" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="AES-CBC 128-bit">3</possible_value>
      <possible_value hint="AES-CBC 256-bit">4</possible_value>
      <possible_value hint="XTS-AES 128-bit (default)">6</possible_value>
      <possible_value hint="XTS-AES 256-bit">7</possible_value>
    </external_variable>
    <external_variable comment="Use enhanced anti-spoofing when available" datatype="int" id="oval:com.mcafee.oval:var:2894755" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps sync with devices" datatype="int" id="oval:com.mcafee.oval:var:2894740" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access trusted devices" datatype="int" id="oval:com.mcafee.oval:var:2894731" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps control radios" datatype="int" id="oval:com.mcafee.oval:var:2894723" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access motion" datatype="int" id="oval:com.mcafee.oval:var:2894715" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access the microphone" datatype="int" id="oval:com.mcafee.oval:var:2894707" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access messaging" datatype="int" id="oval:com.mcafee.oval:var:2894699" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access location" datatype="int" id="oval:com.mcafee.oval:var:2894691" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access email" datatype="int" id="oval:com.mcafee.oval:var:2894683" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access contacts" datatype="int" id="oval:com.mcafee.oval:var:2894675" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access the camera" datatype="int" id="oval:com.mcafee.oval:var:2894668" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access call history" datatype="int" id="oval:com.mcafee.oval:var:2894659" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access the calendar" datatype="int" id="oval:com.mcafee.oval:var:2894651" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Let Windows apps access account information" datatype="int" id="oval:com.mcafee.oval:var:2894643" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="User is in control">0</possible_value>
      <possible_value hint="Force Allow">1</possible_value>
      <possible_value hint="Force Deny">2</possible_value>
    </external_variable>
    <external_variable comment="Enable insecure guest logons" datatype="int" id="oval:com.mcafee.oval:var:2894634" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off the Store application" datatype="int" id="oval:com.mcafee.oval:var:2894626" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off the offer to update to the latest version of Windows" datatype="int" id="oval:com.mcafee.oval:var:2894617" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Automatic Download and Install of updates" datatype="int" id="oval:com.mcafee.oval:var:2894609" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">2</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Disable all apps from Windows Store" datatype="int" id="oval:com.mcafee.oval:var:2894601" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off the SmartScreen Filter" datatype="int" id="oval:com.mcafee.oval:var:2894593" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Pop-up Blocker" datatype="string" id="oval:com.mcafee.oval:var:2894585" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">yes</possible_value>
      <possible_value hint="Disabled">no</possible_value>
    </external_variable>
    <external_variable comment="Turn off Password Manager" datatype="string" id="oval:com.mcafee.oval:var:2894576" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">yes</possible_value>
      <possible_value hint="Disabled">no</possible_value>
    </external_variable>
    <external_variable comment="Dynamic IP restriction" datatype="string" id="oval:com.mcafee.oval:var:2894553" version="1">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Maximum age in seconds" datatype="int" id="oval:com.mcafee.oval:var:2894547" version="1" />
    <external_variable comment="Enter the file path for web.config for required site" datatype="string" id="oval:com.mcafee.oval:var:2894540" version="1" />
    <external_variable comment="Maximum age in seconds" datatype="int" id="oval:com.mcafee.oval:var:2894537" version="1" />
    <external_variable comment="What is the partition name? for eg. (/tmp, /dev/shm,/home etc.)" datatype="string" id="oval:com.mcafee.oval:var:250224" version="1" />
    <external_variable comment="What is the expected SELinux policy?" datatype="string" id="oval:com.mcafee.oval:var:250052" version="1">
      <possible_value hint="Targeted processes are protected">targeted</possible_value>
      <possible_value hint="Multi Level Security protection">mls</possible_value>
    </external_variable>
    <external_variable comment="What is the expected SELinux state?" datatype="string" id="oval:com.mcafee.oval:var:250028" version="1">
      <possible_value hint="Enabled">enforcing</possible_value>
      <possible_value hint="Permissive">permissive</possible_value>
      <possible_value hint="Disabled">disabled</possible_value>
    </external_variable>
    <external_variable comment="What is the expected setting for PRELINKING in /etc/sysconfig/prelink?" datatype="string" id="oval:com.mcafee.oval:var:250002" version="2">
      <possible_value hint="to enable prelinking">yes</possible_value>
      <possible_value hint="To disable prelinking">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected setting for PROMPT in /etc/sysconfig/init?" datatype="string" id="oval:com.mcafee.oval:var:249946" version="1">
      <possible_value hint="to allow hotkey interactive startup">yes</possible_value>
      <possible_value hint="not to allow hotkey interactive startup">no</possible_value>
    </external_variable>
    <external_variable comment="Enter the value to check whether audit logs are retained - max_log_file_action" datatype="string" id="oval:com.mcafee.oval:var:249654" version="2">
      <possible_value hint="The audit daemon does nothing(IGNORE)">IGNORE</possible_value>
      <possible_value hint="Issues a warning to syslog(SYSLOG)">SYSLOG</possible_value>
      <possible_value hint="Cause the audit daemon to stop writing records to the disk. The daemon will still be alive(SUSPEND)">SUSPEND</possible_value>
      <possible_value hint="Cause the audit daemon to rotate the logs(ROTATE)">ROTATE</possible_value>
      <possible_value hint="Similar to ROTATE except it does not use the num_logs setting(KEEP_LOGS)">KEEP_LOGS</possible_value>
    </external_variable>
    <external_variable comment="Enter the value for maximum size of the audit log file - max_log_file" datatype="int" id="oval:com.mcafee.oval:var:249634" version="1" />
    <external_variable comment="Minimum version of Microsoft Lync that should be installed on the system" datatype="version" id="oval:com.mcafee.oval:var:249458" version="1" />
    <external_variable comment="Opera Minimum Product Version" datatype="version" id="oval:com.mcafee.oval:var:249412" version="1" />
    <external_variable comment="Minimum version of SharePoint that should be installed on the system" datatype="version" id="oval:com.mcafee.oval:var:249347" version="1" />
    <external_variable comment="What is the expected setting for PRELINKING in /etc/default/prelink?" datatype="string" id="oval:com.mcafee.oval:var:2488209" version="1">
      <possible_value hint="to enable prelinking">yes</possible_value>
      <possible_value hint="To disable prelinking">no</possible_value>
    </external_variable>
    <external_variable comment="Enter the name of the package to be verified." datatype="string" id="oval:com.mcafee.oval:var:2488205" version="1" />
    <external_variable comment="What is the expected setting for rsync in /etc/default/rsync?" datatype="string" id="oval:com.mcafee.oval:var:2488193" version="1">
      <possible_value hint="to enable rsync">true</possible_value>
      <possible_value hint="To disable rsync">false</possible_value>
    </external_variable>
    <external_variable comment="ipv6 should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2488188" version="1">
      <possible_value hint="Disabled">1</possible_value>
      <possible_value hint="Enabled">0</possible_value>
    </external_variable>
    <external_variable comment="ipv6 should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2488183" version="1">
      <possible_value hint="Disabled">1</possible_value>
      <possible_value hint="Enabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.ip_forward should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487813" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Set SSH LoginGraceTime - Enter the integer value." datatype="int" id="oval:com.mcafee.oval:var:2487798" version="1" />
    <external_variable comment="net.ipv6.conf.default.disable_ipv6 should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487760" version="1">
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="net.ipv6.conf.all.disable_ipv6 should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487755" version="1">
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="net.ipv6.conf.default.accept_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487750" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv6.conf.all.accept_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487745" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv6.conf.default.accept_ra should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487740" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv6.conf.all.accept_ra should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487735" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.tcp_syncookies should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487730" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.default.rp_filter should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487725" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.all.rp_filter should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487720" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.icmp_ignore_bogus_error_responses should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487715" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.icmp_echo_ignore_broadcasts should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487709" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.default.log_martians should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487704" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.all.log_martians should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487699" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.default.secure_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487694" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.all.secure_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487689" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.default.accept_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487684" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.all.accept_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487679" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.default.accept_source_route should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487674" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.all.accept_source_route should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487669" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.default.send_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487664" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.all.send_redirects should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:2487659" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Enter the partition name for eg. (/tmp, /dev/shm, /home, /var/tmp etc.)" datatype="string" id="oval:com.mcafee.oval:var:2487648" version="1" />
    <external_variable comment="Squid GUID should be set to which group?" datatype="string" id="oval:com.mcafee.oval:var:2487276" version="1" />
    <external_variable comment="Squid EUID should be set to which user?" datatype="string" id="oval:com.mcafee.oval:var:2487271" version="1" />
    <external_variable comment="Enable_anonymous_access?" datatype="string" id="oval:com.mcafee.oval:var:2487262" version="2">
      <possible_value hint="Allow">YES</possible_value>
      <possible_value hint="Disallow">NO</possible_value>
    </external_variable>
    <external_variable comment="Enable_file_uploads?" datatype="string" id="oval:com.mcafee.oval:var:2487257" version="2">
      <possible_value hint="Allow">YES</possible_value>
      <possible_value hint="Disallow">NO</possible_value>
    </external_variable>
    <external_variable comment="Turn off InPrivate browsing" datatype="int" id="oval:com.mcafee.oval:var:2486997" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off address bar search suggestions" datatype="int" id="oval:com.mcafee.oval:var:2486989" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Dont allow WebRTC to share the LocalHost IP address" datatype="int" id="oval:com.mcafee.oval:var:2486981" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Dont allow SmartScreen Filter warning overrides for unverified files" datatype="int" id="oval:com.mcafee.oval:var:2486973" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Dont allow SmartScreen Filter warning overrides" datatype="int" id="oval:com.mcafee.oval:var:2486965" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Cookies" datatype="int" id="oval:com.mcafee.oval:var:2486957" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Block all cookies">0</possible_value>
      <possible_value hint="Block only 3rd party cookies">1</possible_value>
      <possible_value hint="Allow all cookies (default)">2</possible_value>
    </external_variable>
    <external_variable comment="Turn off desktop gadgets" datatype="int" id="oval:com.mcafee.oval:var:2486771" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Default Action and Mitigation Settings: Exploit Action" datatype="int" id="oval:com.mcafee.oval:var:2486763" version="1">
      <possible_value hint="Default Action and Mitigation Setting: Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Exploit Action setting: Enabled">1</possible_value>
      <possible_value hint="Exploit Action setting: User Configured">2</possible_value>
      <possible_value hint="Exploit Action setting: Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Default Action and Mitigation Settings: Banned Functions" datatype="int" id="oval:com.mcafee.oval:var:2486754" version="1">
      <possible_value hint="Default Action and Mitigation Setting: Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Banned Functions setting: Enabled">1</possible_value>
      <possible_value hint="Banned Functions setting: User Configured">2</possible_value>
      <possible_value hint="Banned Functions setting: Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Default Action and Mitigation Settings: Deep Hooks" datatype="int" id="oval:com.mcafee.oval:var:2486752" version="1">
      <possible_value hint="Default Action and Mitigation Setting: Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Deep Hooks setting: Enabled">1</possible_value>
      <possible_value hint="Deep Hooks setting: User Configured">2</possible_value>
      <possible_value hint="Deep Hooks setting: Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Default Action and Mitigation Settings: Anti Detours" datatype="int" id="oval:com.mcafee.oval:var:2486739" version="1">
      <possible_value hint="Default Action and Mitigation Setting: Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Anti Detours setting: Enabled">1</possible_value>
      <possible_value hint="Anti Detours setting: User Configured">2</possible_value>
      <possible_value hint="Anti Detours setting: Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not delete temp folders upon exit" datatype="int" id="oval:com.mcafee.oval:var:2486666" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="1 - Disabled">1</possible_value>
      <possible_value hint="0 - Enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Default consent" datatype="int" id="oval:com.mcafee.oval:var:2486655" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="1 - Always ask before sending data">1</possible_value>
      <possible_value hint="2 - Send parameters">2</possible_value>
      <possible_value hint="3 - Send parameters and safe additional data">3</possible_value>
      <possible_value hint="4 - Send all data">4</possible_value>
    </external_variable>
    <external_variable comment="Prevent users from sharing files within their profile" datatype="int" id="oval:com.mcafee.oval:var:2486369" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Help Experience Improvement Program" datatype="int" id="oval:com.mcafee.oval:var:2486361" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Defer Upgrade" datatype="int" id="oval:com.mcafee.oval:var:2486352" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on PowerShell Transcription" datatype="int" id="oval:com.mcafee.oval:var:2486344" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on PowerShell Script Block Logging" datatype="int" id="oval:com.mcafee.oval:var:2486336" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Join Microsoft MAPS" datatype="int" id="oval:com.mcafee.oval:var:2486327" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="0 - Disabled">0</possible_value>
      <possible_value hint="1 - Basic MAPS">1</possible_value>
      <possible_value hint="2 - Advanced MAPS">2</possible_value>
    </external_variable>
    <external_variable comment="Turn off KMS Client Online AVS Validation" datatype="int" id="oval:com.mcafee.oval:var:2486319" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow search and Cortana to use location" datatype="int" id="oval:com.mcafee.oval:var:2486311" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow Cortana" datatype="int" id="oval:com.mcafee.oval:var:2486303" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="End a disconnected session" datatype="int" id="oval:com.mcafee.oval:var:2486297" version="1">
      <possible_value hint="Never">0</possible_value>
      <possible_value hint="1 minute">60000</possible_value>
      <possible_value hint="5 minutes">300000</possible_value>
      <possible_value hint="10 minutes">600000</possible_value>
      <possible_value hint="15 minutes">900000</possible_value>
      <possible_value hint="30 minutes">1800000</possible_value>
      <possible_value hint="1 hour">3600000</possible_value>
      <possible_value hint="2 hours">7200000</possible_value>
      <possible_value hint="3 hours">10800000</possible_value>
      <possible_value hint="6 hours">21600000</possible_value>
      <possible_value hint="8 hours">28800000</possible_value>
      <possible_value hint="12 hours">43200000</possible_value>
      <possible_value hint="16 hours">57600000</possible_value>
      <possible_value hint="18 hours">64800000</possible_value>
      <possible_value hint="1 day">86400000</possible_value>
      <possible_value hint="2 days">172800000</possible_value>
      <possible_value hint="3 days">259200000</possible_value>
      <possible_value hint="4 days">345600000</possible_value>
      <possible_value hint="5 days">432000000</possible_value>
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Prevent the usage of OneDrive for file storage" datatype="int" id="oval:com.mcafee.oval:var:2486289" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Download Mode" datatype="int" id="oval:com.mcafee.oval:var:2486281" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="None">0</possible_value>
      <possible_value hint="LAN">1</possible_value>
      <possible_value hint="Group">2</possible_value>
      <possible_value hint="Internet">3</possible_value>
    </external_variable>
    <external_variable comment="Toggle user control over Insider builds" datatype="int" id="oval:com.mcafee.oval:var:2486273" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Disable pre-release features or settings" datatype="int" id="oval:com.mcafee.oval:var:2486265" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow Telemetry" datatype="int" id="oval:com.mcafee.oval:var:2486257" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="0 - Enabled [Diagnostic data off (not recommended)]">0</possible_value>
      <possible_value hint="1 - Enabled [Send required diagnostic data]">1</possible_value>
      <possible_value hint="3 - Enabled [Send optional diagnostic data]">3</possible_value>
    </external_variable>
    <external_variable comment="Enter the file path for web.config for required site" datatype="string" id="oval:com.mcafee.oval:var:2485254" version="1" />
    <external_variable comment="Machine Key Validation Method" datatype="string" id="oval:com.mcafee.oval:var:2485248" version="1">
      <possible_value hint="SHA1">SHA1</possible_value>
      <possible_value hint="AES">AES</possible_value>
      <possible_value hint="MD5">MD5</possible_value>
      <possible_value hint="TripleDES">3DES</possible_value>
      <possible_value hint="HMACSHA256">HMACSHA256</possible_value>
      <possible_value hint="HMACSHA384">HMACSHA384</possible_value>
      <possible_value hint="HMACSHA512">HMACSHA512</possible_value>
    </external_variable>
    <external_variable comment="What should be the umask value?" datatype="int" id="oval:com.mcafee.oval:var:247772" version="1" />
    <external_variable comment="should su is allowed to root user?" datatype="string" id="oval:com.mcafee.oval:var:247771" version="1">
      <possible_value hint="enable">true</possible_value>
      <possible_value hint="disable">false</possible_value>
    </external_variable>
    <external_variable comment="should uucp user login remotely?" datatype="string" id="oval:com.mcafee.oval:var:247770" version="1">
      <possible_value hint="enable">true</possible_value>
      <possible_value hint="disable">false</possible_value>
    </external_variable>
    <external_variable comment="should sys user login remotely?" datatype="string" id="oval:com.mcafee.oval:var:247769" version="1">
      <possible_value hint="enable">true</possible_value>
      <possible_value hint="disable">false</possible_value>
    </external_variable>
    <external_variable comment="should nobody user login remotely?" datatype="string" id="oval:com.mcafee.oval:var:247768" version="1">
      <possible_value hint="enable">true</possible_value>
      <possible_value hint="disable">false</possible_value>
    </external_variable>
    <external_variable comment="should lpd user login remotely?" datatype="string" id="oval:com.mcafee.oval:var:247767" version="1">
      <possible_value hint="enable">true</possible_value>
      <possible_value hint="disable">false</possible_value>
    </external_variable>
    <external_variable comment="should daemon user login remotely?" datatype="string" id="oval:com.mcafee.oval:var:247766" version="1">
      <possible_value hint="enable">true</possible_value>
      <possible_value hint="disable">false</possible_value>
    </external_variable>
    <external_variable comment="should bin user login remotely?" datatype="string" id="oval:com.mcafee.oval:var:247765" version="1">
      <possible_value hint="enable">true</possible_value>
      <possible_value hint="disable">false</possible_value>
    </external_variable>
    <external_variable comment="should adm user login remotely?" datatype="string" id="oval:com.mcafee.oval:var:247764" version="1">
      <possible_value hint="enable">true</possible_value>
      <possible_value hint="disable">false</possible_value>
    </external_variable>
    <external_variable comment="Should the startup service be enabled or diabled ?" datatype="string" id="oval:com.mcafee.oval:var:247763" version="1">
      <possible_value hint="Enabled">rcncs</possible_value>
      <possible_value hint="Disabled">#rcncs</possible_value>
    </external_variable>
    <external_variable comment="Should the startup service be enabled or diabled ?" datatype="string" id="oval:com.mcafee.oval:var:247762" version="1">
      <possible_value hint="Enabled">pmd</possible_value>
      <possible_value hint="Disabled">#pmd</possible_value>
    </external_variable>
    <external_variable comment="Should the startup service be enabled or diabled ?" datatype="string" id="oval:com.mcafee.oval:var:247761" version="1">
      <possible_value hint="Enabled">i4ls</possible_value>
      <possible_value hint="Disabled">#i4ls</possible_value>
    </external_variable>
    <external_variable comment="Should the startup service be enabled or diabled ?" datatype="string" id="oval:com.mcafee.oval:var:247760" version="1">
      <possible_value hint="Enabled">httpdlite</possible_value>
      <possible_value hint="Disabled">#httpdlite</possible_value>
    </external_variable>
    <external_variable comment="Should TE policy TEP be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:246793" version="1">
      <possible_value hint="Enable">ON</possible_value>
      <possible_value hint="Disable">OFF</possible_value>
    </external_variable>
    <external_variable comment="Should TE implementation policy TE be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:246789" version="1">
      <possible_value hint="Enable">ON</possible_value>
      <possible_value hint="Disable">OFF</possible_value>
    </external_variable>
    <external_variable comment="Should TE policy STOP_ON_CHKFAIL be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:246785" version="1">
      <possible_value hint="Enable">ON</possible_value>
      <possible_value hint="Disable">OFF</possible_value>
    </external_variable>
    <external_variable comment="Should TE policy CHKSCRIPT be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:246781" version="1">
      <possible_value hint="Enable">ON</possible_value>
      <possible_value hint="Disable">OFF</possible_value>
    </external_variable>
    <external_variable comment="Should TE policy CHKEXEC be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:246777" version="1">
      <possible_value hint="Enable">ON</possible_value>
      <possible_value hint="Disable">OFF</possible_value>
    </external_variable>
    <external_variable comment="What is the core_hard parameter value ?" datatype="string" id="oval:com.mcafee.oval:var:246717" version="1" />
    <external_variable comment="What is the core parameter value ?" datatype="string" id="oval:com.mcafee.oval:var:246716" version="1" />
    <external_variable comment="What is the expected login herald text?(This should be a regex format)" datatype="string" id="oval:com.mcafee.oval:var:246703" version="1" />
    <external_variable comment="Desired value of nfs_use_reserved_ports?" datatype="int" id="oval:com.mcafee.oval:var:246070" version="1" />
    <external_variable comment="What is the logintimeout value (In seconds)?" datatype="int" id="oval:com.mcafee.oval:var:245986" version="1" />
    <external_variable comment="What is the loginreenable value (in minutes)?" datatype="int" id="oval:com.mcafee.oval:var:245985" version="1" />
    <external_variable comment="What is the logininterval (in seconds)?" datatype="int" id="oval:com.mcafee.oval:var:245984" version="1" />
    <external_variable comment="What is the logindisable value?" datatype="int" id="oval:com.mcafee.oval:var:245983" version="1" />
    <external_variable comment="What is the logindelay value (In seconds)?" datatype="int" id="oval:com.mcafee.oval:var:245982" version="1" />
    <external_variable comment="Should SSH UsePrivilegeSeparation be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:245762" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected password algorithm? (for eg. ssha1, ssha256, ssha512)" datatype="string" id="oval:com.mcafee.oval:var:245758" version="1" />
    <external_variable comment="Desired value of tcp_sendspace?" datatype="int" id="oval:com.mcafee.oval:var:245754" version="1" />
    <external_variable comment="Desired value of tcp_recvspace?" datatype="int" id="oval:com.mcafee.oval:var:245750" version="1" />
    <external_variable comment="Desired value of tcp_mssdflt?" datatype="int" id="oval:com.mcafee.oval:var:245746" version="1" />
    <external_variable comment="Desired value of sockthresh?" datatype="int" id="oval:com.mcafee.oval:var:245742" version="1" />
    <external_variable comment="Desired value of rfc1323?" datatype="int" id="oval:com.mcafee.oval:var:245739" version="1" />
    <external_variable comment="What is the expected SSH client Protocol version?" datatype="string" id="oval:com.mcafee.oval:var:245731" version="1">
      <possible_value hint="Only v2 (recommended)">2</possible_value>
      <possible_value hint="Only v1">1</possible_value>
      <possible_value hint="Both v1 and v2">2,1</possible_value>
    </external_variable>
    <external_variable comment="Should the startup service be enabled or diabled ?" datatype="string" id="oval:com.mcafee.oval:var:245709" version="1">
      <possible_value hint="Enabled">rcnfs</possible_value>
      <possible_value hint="Disabled">#rcnfs</possible_value>
    </external_variable>
    <external_variable comment="Should the startup service be enabled or diabled ?" datatype="string" id="oval:com.mcafee.oval:var:245702" version="1">
      <possible_value hint="Enabled">qdaemon</possible_value>
      <possible_value hint="Disabled">#qdaemon</possible_value>
    </external_variable>
    <external_variable comment="Should the startup service be enabled or diabled ?" datatype="string" id="oval:com.mcafee.oval:var:245695" version="1">
      <possible_value hint="Enabled">piobe</possible_value>
      <possible_value hint="Disabled">#piobe</possible_value>
    </external_variable>
    <external_variable comment="Should the startup service be enabled or diabled ?" datatype="string" id="oval:com.mcafee.oval:var:245688" version="1">
      <possible_value hint="Enabled">dt</possible_value>
      <possible_value hint="Disabled">#dt</possible_value>
    </external_variable>
    <external_variable comment="ttdbserver service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:245681" version="1">
      <possible_value hint="Enabled">ttdbserver</possible_value>
      <possible_value hint="Disabled">#ttdbserver</possible_value>
    </external_variable>
    <external_variable comment="shell service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:245674" version="1">
      <possible_value hint="Enabled">shell</possible_value>
      <possible_value hint="Disabled">#shell</possible_value>
    </external_variable>
    <external_variable comment="rquotad service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:245667" version="1">
      <possible_value hint="Enabled">rquotad</possible_value>
      <possible_value hint="Disabled">#rquotad</possible_value>
    </external_variable>
    <external_variable comment="instsrv service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:245660" version="1">
      <possible_value hint="Enabled">instsrv</possible_value>
      <possible_value hint="Disabled">#instsrv</possible_value>
    </external_variable>
    <external_variable comment="imap service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:245653" version="1">
      <possible_value hint="Enabled">imap</possible_value>
      <possible_value hint="Disabled">#imap</possible_value>
    </external_variable>
    <external_variable comment="dtspc service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:245644" version="1">
      <possible_value hint="Enabled">dtspc</possible_value>
      <possible_value hint="Disabled">#dtspc</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.icmp_ignore_bogus_error_responses should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:245587" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="net.ipv4.conf.default.log_martians should be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:245582" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Default file creation mask (Umask) for FTP users? (eg:027)" datatype="int" id="oval:com.mcafee.oval:var:245556" version="1" />
    <external_variable comment="Should the gdm-autologin be enabled or disabled" datatype="string" id="oval:com.mcafee.oval:var:244734" version="1">
      <possible_value hint="Enabled">gdm-autologin</possible_value>
      <possible_value hint="Disabled">#gdm-autologin</possible_value>
    </external_variable>
    <external_variable comment="file path and name for prelogin warning message" datatype="string" id="oval:com.mcafee.oval:var:244712" version="1" />
    <external_variable comment="Expected path for banner-DisplayConnect?(regex format - Ex. \/etc\/issue)" datatype="string" id="oval:com.mcafee.oval:var:244696" version="2" />
    <external_variable comment="Enter the value for min=N4-characters from four character classes." datatype="int" id="oval:com.mcafee.oval:var:244684" version="1" />
    <external_variable comment="Enter the value for min=N3- characters from three character classes." datatype="int" id="oval:com.mcafee.oval:var:244683" version="1" />
    <external_variable comment="Enter the value for min=N2-used for passphrases." datatype="int" id="oval:com.mcafee.oval:var:244682" version="1" />
    <external_variable comment="Enter the value for min=N1-characters from two character classes that do not meet the requirements for a passphrase." datatype="string" id="oval:com.mcafee.oval:var:244681" version="1" />
    <external_variable comment="Enter the value for min=N0-characters from one character class only." datatype="string" id="oval:com.mcafee.oval:var:244680" version="1" />
    <external_variable comment="Enable Hotspot Authentication" datatype="string" id="oval:com.mcafee.oval:var:244609" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Automatically workplace join client computers" datatype="string" id="oval:com.mcafee.oval:var:244608" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Force automatic setup for all users" datatype="string" id="oval:com.mcafee.oval:var:244607" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Do not connect to any WU internet locations" datatype="string" id="oval:com.mcafee.oval:var:244606" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Always automatically restart at the scheduled time" datatype="int" id="oval:com.mcafee.oval:var:244605" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 15 to 180.">
        <restriction operation="greater than or equal">15</restriction>
        <restriction operation="less than or equal">180</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Sign-in last interactive user automatically" datatype="string" id="oval:com.mcafee.oval:var:244604" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Automatically send memory dumps" datatype="string" id="oval:com.mcafee.oval:var:244603" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Do not sync start settings" datatype="string" id="oval:com.mcafee.oval:var:244602" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled: Allow Start layout sync">LayoutSync</possible_value>
      <possible_value hint="Enabled: Do not allow Start layout sync">NoLayoutSync</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Do not sync Apps" datatype="string" id="oval:com.mcafee.oval:var:244601" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled: Allow AppSync">AppSync</possible_value>
      <possible_value hint="Enabled: Do not allow AppSync">NoAppSync</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Turn off the offer to update to the latest version of Windows" datatype="string" id="oval:com.mcafee.oval:var:244600" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Turn off Automatic Download of updates (Win 8)" datatype="string" id="oval:com.mcafee.oval:var:244599" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Turn off Automatic Download and Install of updates" datatype="string" id="oval:com.mcafee.oval:var:244598" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Save documents and pictures to the local PC" datatype="string" id="oval:com.mcafee.oval:var:244597" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Prevent the usage of SkyDrive for file storage" datatype="string" id="oval:com.mcafee.oval:var:244596" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Prevent SkyDrive files from syncing (metered)" datatype="int" id="oval:com.mcafee.oval:var:244595" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Block syncing on all metered connections">0</possible_value>
      <possible_value hint="Enabled: Block syncing on metered connections only when roaming">1</possible_value>
    </external_variable>
    <external_variable comment="Set what information is shared in Search" datatype="int" id="oval:com.mcafee.oval:var:244594" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: User info and location">1</possible_value>
      <possible_value hint="Enabled: User info only">2</possible_value>
      <possible_value hint="Enabled: Anonymous info">3</possible_value>
    </external_variable>
    <external_variable comment="Set the SafeSearch setting for Search" datatype="int" id="oval:com.mcafee.oval:var:244593" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Strict">1</possible_value>
      <possible_value hint="Enabled: Moderate">2</possible_value>
      <possible_value hint="Enabled: Off">3</possible_value>
    </external_variable>
    <external_variable comment="Do not search the web or display web results (metered)" datatype="string" id="oval:com.mcafee.oval:var:244592" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Do not search the web or display web results" datatype="string" id="oval:com.mcafee.oval:var:244591" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Do not allow locations on removable drives to be added" datatype="string" id="oval:com.mcafee.oval:var:244590" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Use advanced RemoteFX graphics for RemoteApp" datatype="string" id="oval:com.mcafee.oval:var:244589" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Turn off phone number detection" datatype="string" id="oval:com.mcafee.oval:var:244588" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Trusted Sites Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244587" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244586" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Trusted Sites Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244585" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Restricted Sites Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244584" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Local Machine Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244583" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Intranet Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244582" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Internet Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244581" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Local Machine Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244580" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Intranet Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244579" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Do not run antimalware programs" datatype="int" id="oval:com.mcafee.oval:var:244578" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">3</possible_value>
      <possible_value hint="Enabled: Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on 64-bit tab processes" datatype="string" id="oval:com.mcafee.oval:var:244577" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Turn off sending UTF-8 query strings for URLs" datatype="int" id="oval:com.mcafee.oval:var:244576" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Never Encode query strings in UTF-8">0</possible_value>
      <possible_value hint="Enabled: Encode query strings in UTF-8 only in non-Intranet URLs">1</possible_value>
      <possible_value hint="Enabled: Encode query strings in UTF-8 only in Intranet URLs">2</possible_value>
      <possible_value hint="Enabled: Always encode query strings in UTF-8">3</possible_value>
    </external_variable>
    <external_variable comment="Turn off loading websites and content" datatype="string" id="oval:com.mcafee.oval:var:244575" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Allow Internet Explorer to use the SPDY/3 network protocol" datatype="string" id="oval:com.mcafee.oval:var:244574" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Allow Microsoft services to provide enhanced suggestions" datatype="string" id="oval:com.mcafee.oval:var:244573" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Disable help tips" datatype="string" id="oval:com.mcafee.oval:var:244572" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Allow Microsoft accounts to be optional" datatype="string" id="oval:com.mcafee.oval:var:244571" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Allow development of Windows Store apps" datatype="string" id="oval:com.mcafee.oval:var:244570" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Turn off the advertising ID" datatype="string" id="oval:com.mcafee.oval:var:244569" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Do not display network selection UI" datatype="string" id="oval:com.mcafee.oval:var:244568" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Use DNS name resolution when a single-label domain name is used" datatype="string" id="oval:com.mcafee.oval:var:244567" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Allow users to select when a password is required" datatype="string" id="oval:com.mcafee.oval:var:244566" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Always send compound authentication first" datatype="string" id="oval:com.mcafee.oval:var:244565" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Request compound authentication" datatype="string" id="oval:com.mcafee.oval:var:244564" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Caching for Servers - Timeout value (milliseconds)" datatype="int" id="oval:com.mcafee.oval:var:244563" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 0 to 600000.">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">600000</restriction>
      </possible_restriction>
      <possible_value hint="Disabled">9999</possible_value>
    </external_variable>
    <external_variable comment="Caching for Servers - Slow link value (milliseconds)" datatype="int" id="oval:com.mcafee.oval:var:244562" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 0 to 300000.">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">300000</restriction>
      </possible_restriction>
      <possible_value hint="Disabled">9999</possible_value>
    </external_variable>
    <external_variable comment="Configure Logon Script Delay" datatype="int" id="oval:com.mcafee.oval:var:244561" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 0 to 1000.">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">1000</restriction>
      </possible_restriction>
      <possible_value hint="Disabled">9999</possible_value>
    </external_variable>
    <external_variable comment="Slow link detection - WWAN Connection" datatype="string" id="oval:com.mcafee.oval:var:244560" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Slow link detection connection speed" datatype="int" id="oval:com.mcafee.oval:var:244559" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 0 to 4294967200. If set to 0, all connections are considered fast.">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">4294967200</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Restrict delegation of credentials to remote servers" datatype="string" id="oval:com.mcafee.oval:var:244558" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Include command line in process creation events" datatype="string" id="oval:com.mcafee.oval:var:244557" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Disallow run-once backups" datatype="string" id="oval:com.mcafee.oval:var:244556" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Disallow optical media as backup target" datatype="string" id="oval:com.mcafee.oval:var:244555" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Disallow network as backup target" datatype="string" id="oval:com.mcafee.oval:var:244554" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Disallow locally attached storage as backup target" datatype="string" id="oval:com.mcafee.oval:var:244553" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Allow only system backup" datatype="string" id="oval:com.mcafee.oval:var:244552" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Prevent enabling lock screen slide show" datatype="int" id="oval:com.mcafee.oval:var:244551" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent enabling lock screen camera" datatype="int" id="oval:com.mcafee.oval:var:244550" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Force a specific Start background" datatype="int" id="oval:com.mcafee.oval:var:244549" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 0 to 20. If set to 0, users will be able to change the background.">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">20</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Turn off Federation Service" datatype="int" id="oval:com.mcafee.oval:var:244514" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Allow support for 802.1x Enforcement Client component" datatype="string" id="oval:com.mcafee.oval:var:244513" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on Remote Desktop IP Virtualization" datatype="string" id="oval:com.mcafee.oval:var:244512" version="1">
      <possible_value hint="Enabled: Per Program">PerProgram</possible_value>
      <possible_value hint="Enabled: Per Session">PerSession</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Installer RDS Compatibility" datatype="string" id="oval:com.mcafee.oval:var:244511" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not use server IP when virtual IP is not available" datatype="string" id="oval:com.mcafee.oval:var:244510" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Use the hardware default graphics adapter for all sessions" datatype="string" id="oval:com.mcafee.oval:var:244509" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow font smoothing" datatype="string" id="oval:com.mcafee.oval:var:244508" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow desktop composition for remote desktop sessions" datatype="string" id="oval:com.mcafee.oval:var:244507" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Fair Share CPU Scheduling" datatype="string" id="oval:com.mcafee.oval:var:244506" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not display Manage Your Server page at logon" datatype="string" id="oval:com.mcafee.oval:var:244505" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Customer Experience Improvement Program" datatype="string" id="oval:com.mcafee.oval:var:244501" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Remove &quot;Disconnect&quot; option from menu" datatype="int" id="oval:com.mcafee.oval:var:244500" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow client printer redirection" datatype="string" id="oval:com.mcafee.oval:var:244499" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow smart card device redirection" datatype="string" id="oval:com.mcafee.oval:var:244498" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow supported PnP device redirection" datatype="string" id="oval:com.mcafee.oval:var:244497" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow LPT port redirection" datatype="string" id="oval:com.mcafee.oval:var:244496" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow COM port redirection" datatype="string" id="oval:com.mcafee.oval:var:244495" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow clipboard redirection" datatype="string" id="oval:com.mcafee.oval:var:244494" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Require secure RPC communication" datatype="string" id="oval:com.mcafee.oval:var:244493" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disallow installation of KM printers" datatype="string" id="oval:com.mcafee.oval:var:244492" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off background refresh of Group Policy" datatype="int" id="oval:com.mcafee.oval:var:244491" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Terminate session when time limits are reached" datatype="string" id="oval:com.mcafee.oval:var:244490" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow reconnection from original client only" datatype="string" id="oval:com.mcafee.oval:var:244489" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Limit number of connections" datatype="int" id="oval:com.mcafee.oval:var:244488" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 999999">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">999999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Always wait for the network at startup" datatype="string" id="oval:com.mcafee.oval:var:244487" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Rules for remote control of user sessions" datatype="int" id="oval:com.mcafee.oval:var:244486" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="No remote control allowed">0</possible_value>
      <possible_value hint="Full Control with user permission">1</possible_value>
      <possible_value hint="Full Control without user permission">2</possible_value>
      <possible_value hint="View Session with user permission">3</possible_value>
      <possible_value hint="View Session without user permission">4</possible_value>
    </external_variable>
    <external_variable comment="Turn off handwriting personalization data sharing" datatype="string" id="oval:com.mcafee.oval:var:244482" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="IP-HTTPS State" datatype="int" id="oval:com.mcafee.oval:var:244481" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Default State">0</possible_value>
      <possible_value hint="Enabled: Enabled State">2</possible_value>
      <possible_value hint="Enabled: Disabled State">3</possible_value>
    </external_variable>
    <external_variable comment="Teredo State" datatype="string" id="oval:com.mcafee.oval:var:244480" version="2">
      <possible_value hint="Not Configured / Disabled">DoesNotExist</possible_value>
      <possible_value hint="Enabled: Default State">Default</possible_value>
      <possible_value hint="Enabled: Disabled State">Disabled</possible_value>
      <possible_value hint="Enabled: Client State">Client</possible_value>
      <possible_value hint="Enabled: Enterprise Client State">Enterprise Client</possible_value>
    </external_variable>
    <external_variable comment="ISATAP State" datatype="string" id="oval:com.mcafee.oval:var:244479" version="1">
      <possible_value hint="Not Configured / Disabled">DoesNotExist</possible_value>
      <possible_value hint="Enabled: Default State">Default</possible_value>
      <possible_value hint="Enabled: Enabled State">Enabled</possible_value>
      <possible_value hint="Enabled: Disabled State">Disabled</possible_value>
    </external_variable>
    <external_variable comment="6to4 State" datatype="string" id="oval:com.mcafee.oval:var:244478" version="1">
      <possible_value hint="Not Configured / Disabled">DoesNotExist</possible_value>
      <possible_value hint="Enabled: Default State">Default</possible_value>
      <possible_value hint="Enabled: Enabled State">Enabled</possible_value>
      <possible_value hint="Enabled: Disabled State">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Parental Controls Service (WPCSvc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:244477" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Media Center Extender Service (Mcx2Svc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:244476" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="HomeGroup Provider Service (HomeGroupProvider) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:244475" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="HomeGroup Listener Service (HomeGroupListener) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:244474" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Bluetooth Support Service (bthserv) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:244473" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Default behavior for AutoRun" datatype="int" id="oval:com.mcafee.oval:var:244472" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Do not execute any autorun commands">1</possible_value>
      <possible_value hint="Automatically execute autorun commands">2</possible_value>
    </external_variable>
    <external_variable comment="Boot-Start Driver Initialization Policy" datatype="int" id="oval:com.mcafee.oval:var:244471" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Good only">8</possible_value>
      <possible_value hint="Good and unknown">1</possible_value>
      <possible_value hint="Good, unknown and bad but critical">3</possible_value>
      <possible_value hint="All">7</possible_value>
    </external_variable>
    <external_variable comment="Administrator account status" datatype="boolean" id="oval:com.mcafee.oval:var:244470" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Guest account status" datatype="boolean" id="oval:com.mcafee.oval:var:244469" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Windows SmartScreen" datatype="int" id="oval:com.mcafee.oval:var:244466" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Require approval from an admin">2</possible_value>
      <possible_value hint="Give user a warning">1</possible_value>
      <possible_value hint="Turn off SmartScreen">0</possible_value>
    </external_variable>
    <external_variable comment="Always install with elevated privileges" datatype="string" id="oval:com.mcafee.oval:var:244465" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="WinRM Client - Allow unencrypted traffic" datatype="string" id="oval:com.mcafee.oval:var:244464" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="WinRM Service - Allow unencrypted traffic" datatype="string" id="oval:com.mcafee.oval:var:244463" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="WinRM Service - Disallow WinRM from storing RunAs credentials" datatype="string" id="oval:com.mcafee.oval:var:244462" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="WinRM Service - Allow Basic authentication" datatype="string" id="oval:com.mcafee.oval:var:244461" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="WinRM Client - Allow Basic authentication" datatype="string" id="oval:com.mcafee.oval:var:244460" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="WinRM Client - Disallow Digest authentication" datatype="string" id="oval:com.mcafee.oval:var:244459" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow standby states when sleeping (Plugged In)" datatype="string" id="oval:com.mcafee.oval:var:244458" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow standby states when sleeping (On Battery)" datatype="string" id="oval:com.mcafee.oval:var:244457" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow access to removable data drives" datatype="string" id="oval:com.mcafee.oval:var:244456" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled - Install Reader (box not checked)">EnabledInstalled</possible_value>
      <possible_value hint="Enabled - Do not install Reader (box checked)">EnabledNotInstalled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Deny write access to removable drives" datatype="string" id="oval:com.mcafee.oval:var:244455" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled - Allow cross org write (box not checked)">EnabledAllowWrite</possible_value>
      <possible_value hint="Enabled - Deny cross org write (box checked)">EnabledDenyWrite</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Configure use of smart cards on removable data drives" datatype="string" id="oval:com.mcafee.oval:var:244454" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled - Not required (box not checked)">EnabledNotRequired</possible_value>
      <possible_value hint="Enabled - Required (box checked)">EnabledRequired</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Configure minimum PIN length for startup" datatype="int" id="oval:com.mcafee.oval:var:244453" version="2">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. (Minimum characters)">
        <restriction operation="greater than or equal">4</restriction>
        <restriction operation="less than or equal">20</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="What is the maximum number times the user must be prompted before returning the error.?" datatype="int" id="oval:com.mcafee.oval:var:244432" version="3" />
    <external_variable comment="Enter the name of the RPM package to be verified." datatype="string" id="oval:com.mcafee.oval:var:242779" version="1" />
    <external_variable comment="Set SSH ClientAliveCountMax - Enter the integer value." datatype="int" id="oval:com.mcafee.oval:var:242746" version="1" />
    <external_variable comment="Set SSH ClientAliveInterval - Enter the integer value." datatype="int" id="oval:com.mcafee.oval:var:242741" version="1" />
    <external_variable comment="Allow PermitUserEnvironment setting?" datatype="string" id="oval:com.mcafee.oval:var:242736" version="1">
      <possible_value hint="Yes">yes</possible_value>
      <possible_value hint="No">no</possible_value>
    </external_variable>
    <external_variable comment="Set SSH MaxAuthTries - Enter the integer value." datatype="int" id="oval:com.mcafee.oval:var:242731" version="1" />
    <external_variable comment="Select SSH LogLevel Setting - These are the verbosity levels that are used when logging messages from sshd." datatype="string" id="oval:com.mcafee.oval:var:242726" version="1">
      <possible_value hint="QUIET">QUIET</possible_value>
      <possible_value hint="FALTAL">FATAL</possible_value>
      <possible_value hint="ERROR">ERROR</possible_value>
      <possible_value hint="INFO">INFO</possible_value>
      <possible_value hint="VERBOSE">VERBOSE</possible_value>
      <possible_value hint="DEBUG">DEBUG</possible_value>
      <possible_value hint="DEBUG1">DEBUG1</possible_value>
      <possible_value hint="DEBUG2">DEBUG2</possible_value>
      <possible_value hint="DEBUG3">DEBUG3</possible_value>
    </external_variable>
    <external_variable comment="Error responses" datatype="string" id="oval:com.mcafee.oval:var:242657" version="1">
      <possible_value hint="DetailedLocalOnly">DetailedLocalOnly</possible_value>
      <possible_value hint="Custom">Custom</possible_value>
      <possible_value hint="Detailed">Detailed</possible_value>
    </external_variable>
    <external_variable comment="Machine Key Validation Method" datatype="string" id="oval:com.mcafee.oval:var:242649" version="1">
      <possible_value hint="SHA1">SHA1</possible_value>
      <possible_value hint="AES">AES</possible_value>
      <possible_value hint="MD5">MD5</possible_value>
      <possible_value hint="TripleDES">3DES</possible_value>
    </external_variable>
    <external_variable comment="Trace Method" datatype="string" id="oval:com.mcafee.oval:var:242626" version="1">
      <possible_value hint="Enable">true</possible_value>
      <possible_value hint="Disable">false</possible_value>
    </external_variable>
    <external_variable comment="notListedCgisAllowed" datatype="string" id="oval:com.mcafee.oval:var:242613" version="1">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment="notListedIsapisAllowed" datatype="string" id="oval:com.mcafee.oval:var:242606" version="2">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Enter the file path for web.config for required site" datatype="string" id="oval:com.mcafee.oval:var:242602" version="1" />
    <external_variable comment="Allow Unlisted File Extensions" datatype="string" id="oval:com.mcafee.oval:var:242403" version="1">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Double Escaping" datatype="string" id="oval:com.mcafee.oval:var:242374" version="1">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment=".NET Trust level setting" datatype="string" id="oval:com.mcafee.oval:var:242332" version="1">
      <possible_value hint="Full">Full</possible_value>
      <possible_value hint="High">High</possible_value>
      <possible_value hint="Medium">Medium</possible_value>
      <possible_value hint="Low">Low</possible_value>
      <possible_value hint="Minimal">Minimal</possible_value>
    </external_variable>
    <external_variable comment="Deployment Method" datatype="string" id="oval:com.mcafee.oval:var:242302" version="1">
      <possible_value hint="True">true</possible_value>
      <possible_value hint="False">false</possible_value>
    </external_variable>
    <external_variable comment="Cookie protection mode setting" datatype="string" id="oval:com.mcafee.oval:var:241543" version="1">
      <possible_value hint="Encryption and validation">All</possible_value>
      <possible_value hint="Encryption">Encryption</possible_value>
      <possible_value hint="Validation">Validation</possible_value>
      <possible_value hint="None">None</possible_value>
    </external_variable>
    <external_variable comment="Forms Authentication cookie setting" datatype="string" id="oval:com.mcafee.oval:var:241538" version="1">
      <possible_value hint="Use cookies">UseCookies</possible_value>
      <possible_value hint="Do not use cookies">UseUri</possible_value>
      <possible_value hint="Use device profile">UseDeviceProfile</possible_value>
      <possible_value hint="Auto Detect">AutoDetect</possible_value>
    </external_variable>
    <external_variable comment="Require SSL in Forms Authentication" datatype="string" id="oval:com.mcafee.oval:var:241532" version="1">
      <possible_value hint="True">true</possible_value>
      <possible_value hint="False">false</possible_value>
    </external_variable>
    <external_variable comment="The number of lowecase characters (lcredit) required by the policy" datatype="int" id="oval:com.mcafee.oval:var:240800" version="2" />
    <external_variable comment="Default Application Pool Identity" datatype="string" id="oval:com.mcafee.oval:var:240343" version="1">
      <possible_value hint="Built-in account - ApplicationPoolIdentity">ApplicationPoolIdentity</possible_value>
      <possible_value hint="Built-in account - LocalSystem">LocalSystem</possible_value>
      <possible_value hint="Built-in account - LocalService">LocalService</possible_value>
      <possible_value hint="Built-in account - NetworkService">NetworkService</possible_value>
      <possible_value hint="Custom Account with Least Privilege Principal">SpecificUser</possible_value>
    </external_variable>
    <external_variable comment="Directory Browsing" datatype="string" id="oval:com.mcafee.oval:var:240338" version="1">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Expected path for banner-DisplayLogin?(regex format - Ex. \/etc\/motd)" datatype="string" id="oval:com.mcafee.oval:var:239668" version="2" />
    <external_variable comment="Expected path for banner-DisplayConnect?(regex format - Ex. \/etc\/issue\.net)" datatype="string" id="oval:com.mcafee.oval:var:239667" version="2" />
    <external_variable comment="Enter the non-root group to be set for Printer daemon" datatype="string" id="oval:com.mcafee.oval:var:239666" version="1" />
    <external_variable comment="Enter the non-root user to be set for Printer daemon" datatype="string" id="oval:com.mcafee.oval:var:239665" version="1" />
    <external_variable comment="xferlog_std_format should be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:239662" version="2">
      <possible_value hint="Enabled">YES</possible_value>
      <possible_value hint="Disabled">NO</possible_value>
    </external_variable>
    <external_variable comment="Select if Move AntiVirus Agent should be Enabled or Disabled" datatype="string" id="oval:com.mcafee.oval:var:236793" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Should Sendmail Server be enabled or disabled" datatype="string" id="oval:com.mcafee.oval:var:236457" version="2">
      <possible_value hint="Disable">none</possible_value>
      <possible_value hint="Enable">[Dd]aemon|inetd</possible_value>
    </external_variable>
    <external_variable comment="Specify the required version of Move Anti-Virus Agent (eg - 2.0, 2.5)" datatype="version" id="oval:com.mcafee.oval:var:236346" version="1" />
    <external_variable comment="Should the service be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:236232" version="3">
      <possible_value hint="If server participates as NIS slave server">slave</possible_value>
      <possible_value hint="If server participates as NIS master server">master</possible_value>
      <possible_value hint="If NIS server is disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Should SGID be enabled or disabled" datatype="boolean" id="oval:com.mcafee.oval:var:234338" version="1">
      <possible_value hint="enabled">true</possible_value>
      <possible_value hint="disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Should SUID be enabled or disabled" datatype="boolean" id="oval:com.mcafee.oval:var:234337" version="1">
      <possible_value hint="enabled">true</possible_value>
      <possible_value hint="disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Should Single user mode password request be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:234192" version="1">
      <possible_value hint="Enable">YES</possible_value>
      <possible_value hint="Disable">NO</possible_value>
    </external_variable>
    <external_variable comment="What is the expected sendmail logging level value? (9 is the default value)" datatype="int" id="oval:com.mcafee.oval:var:234185" version="1">
      <possible_restriction hint="Must be between 0 and 98">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">98</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="What is the MINSPECIAL value ?" datatype="int" id="oval:com.mcafee.oval:var:234153" version="1" />
    <external_variable comment="What is the MINDIGIT value ?" datatype="int" id="oval:com.mcafee.oval:var:234149" version="1" />
    <external_variable comment="What is the expected MAXREPEATS value?" datatype="int" id="oval:com.mcafee.oval:var:234145" version="1" />
    <external_variable comment="tftp service in secure mode is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:233675" version="1">
      <possible_value hint="Enabled">tftp</possible_value>
      <possible_value hint="Disabled">#tftp</possible_value>
    </external_variable>
    <external_variable comment="Printer daemon should be disabled" datatype="string" id="oval:com.mcafee.oval:var:232726" version="1">
      <possible_value hint="Disable">''</possible_value>
    </external_variable>
    <external_variable comment="What is the duration for inactive user accounts lock out (in days)?" datatype="int" id="oval:com.mcafee.oval:var:232497" version="1" />
    <external_variable comment="Should Others have EXECUTE access to user dot files?" datatype="boolean" id="oval:com.mcafee.oval:var:232475" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to user dot files?" datatype="boolean" id="oval:com.mcafee.oval:var:232474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to user dot files?" datatype="boolean" id="oval:com.mcafee.oval:var:232473" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to user dot files?" datatype="boolean" id="oval:com.mcafee.oval:var:232472" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to user dot files?" datatype="boolean" id="oval:com.mcafee.oval:var:232471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to user dot files?" datatype="boolean" id="oval:com.mcafee.oval:var:232470" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to user dot files?" datatype="boolean" id="oval:com.mcafee.oval:var:232469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to user dot files?" datatype="boolean" id="oval:com.mcafee.oval:var:232468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to user dot files?" datatype="boolean" id="oval:com.mcafee.oval:var:232467" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have EXECUTE access to defined account home directory?" datatype="boolean" id="oval:com.mcafee.oval:var:232459" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to defined account home directory?" datatype="boolean" id="oval:com.mcafee.oval:var:232458" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to defined account home directory?" datatype="boolean" id="oval:com.mcafee.oval:var:232457" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to defined account home directory?" datatype="boolean" id="oval:com.mcafee.oval:var:232456" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to defined account home directory?" datatype="boolean" id="oval:com.mcafee.oval:var:232455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to defined account home directory?" datatype="boolean" id="oval:com.mcafee.oval:var:232454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to defined account home directory?" datatype="boolean" id="oval:com.mcafee.oval:var:232453" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to defined account home directory?" datatype="boolean" id="oval:com.mcafee.oval:var:232452" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to defined account home directory?" datatype="boolean" id="oval:com.mcafee.oval:var:232451" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have EXECUTE access to dot-netrc file?" datatype="boolean" id="oval:com.mcafee.oval:var:232441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to dot-netrc file?" datatype="boolean" id="oval:com.mcafee.oval:var:232440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to dot-netrc file?" datatype="boolean" id="oval:com.mcafee.oval:var:232439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to dot-netrc file?" datatype="boolean" id="oval:com.mcafee.oval:var:232438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to dot-netrc file?" datatype="boolean" id="oval:com.mcafee.oval:var:232437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to dot-netrc file?" datatype="boolean" id="oval:com.mcafee.oval:var:232436" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to dot-netrc file?" datatype="boolean" id="oval:com.mcafee.oval:var:232435" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to dot-netrc file?" datatype="boolean" id="oval:com.mcafee.oval:var:232434" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to dot-netrc file?" datatype="boolean" id="oval:com.mcafee.oval:var:232433" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Select the expected failed login delay, SLEEPTIME value (in seconds)?" datatype="int" id="oval:com.mcafee.oval:var:231845" version="1">
      <possible_value hint="0 second">0</possible_value>
      <possible_value hint="1 second">1</possible_value>
      <possible_value hint="2 seconds">2</possible_value>
      <possible_value hint="3 seconds">3</possible_value>
      <possible_value hint="4 seconds">4</possible_value>
      <possible_value hint="5 seconds">5</possible_value>
    </external_variable>
    <external_variable comment="Should the service mpxio-upgrade be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:231834" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Solaris Volume Manager Service mpxio-upgrade be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:231826" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service gdm2-login be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:231818" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="What is the expected daemon umask value?" datatype="int" id="oval:com.mcafee.oval:var:231801" version="1" />
    <external_variable comment="What is the expected number of copies to keep for failed login attempts?" datatype="int" id="oval:com.mcafee.oval:var:231795" version="1" />
    <external_variable comment="What is the required Group ID for /var/log/connlog?" datatype="int" id="oval:com.mcafee.oval:var:231791" version="1" />
    <external_variable comment="What is the required User ID for /var/log/connlog?" datatype="int" id="oval:com.mcafee.oval:var:231788" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /var/log/connlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231786" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /var/log/connlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /var/log/connlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231784" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /var/log/connlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231783" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /var/log/connlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231782" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /var/log/connlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /var/log/connlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /var/log/connlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231779" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /var/log/connlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231778" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the service syslogd be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:231766" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="What is the expected WARNWEEKS value (in weeks)?" datatype="int" id="oval:com.mcafee.oval:var:231757" version="2" />
    <external_variable comment="Should per-process core dumps be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231752" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected init core file pattern?" datatype="string" id="oval:com.mcafee.oval:var:231747" version="1" />
    <external_variable comment="What is the expected value for init core file content ?" datatype="string" id="oval:com.mcafee.oval:var:231743" version="1" />
    <external_variable comment="Should global set-id core dumps be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231739" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected global core file pattern?" datatype="string" id="oval:com.mcafee.oval:var:231735" version="1" />
    <external_variable comment="What is the expected value for global core file content?" datatype="string" id="oval:com.mcafee.oval:var:231731" version="1" />
    <external_variable comment="Should global core dump logging be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231727" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should global core dumps be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231722" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should the per-process set-id core dumps be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231718" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should Others have EXECUTE access directory /var/cores?" datatype="boolean" id="oval:com.mcafee.oval:var:231705" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access directory /var/cores?" datatype="boolean" id="oval:com.mcafee.oval:var:231704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access directory /var/cores?" datatype="boolean" id="oval:com.mcafee.oval:var:231703" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access directory /var/cores?" datatype="boolean" id="oval:com.mcafee.oval:var:231702" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access directory /var/cores?" datatype="boolean" id="oval:com.mcafee.oval:var:231701" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access directory /var/cores?" datatype="boolean" id="oval:com.mcafee.oval:var:231700" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access directory /var/cores?" datatype="boolean" id="oval:com.mcafee.oval:var:231699" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access directory /var/cores?" datatype="boolean" id="oval:com.mcafee.oval:var:231698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to directory /var/cores?" datatype="boolean" id="oval:com.mcafee.oval:var:231697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /var/cores directory?" datatype="int" id="oval:com.mcafee.oval:var:231694" version="1" />
    <external_variable comment="What is the required Group ID for /var/cores directory?" datatype="int" id="oval:com.mcafee.oval:var:231691" version="1" />
    <external_variable comment="Should Others have EXECUTE access directory /var/core?" datatype="boolean" id="oval:com.mcafee.oval:var:231686" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access directory /var/core?" datatype="boolean" id="oval:com.mcafee.oval:var:231685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access directory /var/core?" datatype="boolean" id="oval:com.mcafee.oval:var:231684" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access directory /var/core?" datatype="boolean" id="oval:com.mcafee.oval:var:231683" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access directory /var/core?" datatype="boolean" id="oval:com.mcafee.oval:var:231682" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access directory /var/core?" datatype="boolean" id="oval:com.mcafee.oval:var:231681" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access directory /var/core?" datatype="boolean" id="oval:com.mcafee.oval:var:231680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access directory /var/core?" datatype="boolean" id="oval:com.mcafee.oval:var:231679" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to directory /var/core?" datatype="boolean" id="oval:com.mcafee.oval:var:231678" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /var/core directory?" datatype="int" id="oval:com.mcafee.oval:var:231675" version="1" />
    <external_variable comment="What is the required Group ID for /var/core directory?" datatype="int" id="oval:com.mcafee.oval:var:231671" version="1" />
    <external_variable comment="What is the expected MINUPPER value?" datatype="int" id="oval:com.mcafee.oval:var:231649" version="1" />
    <external_variable comment="What is the expected MINLOWER value?" datatype="int" id="oval:com.mcafee.oval:var:231645" version="1" />
    <external_variable comment="What is the expected MINDIFF value?" datatype="int" id="oval:com.mcafee.oval:var:231641" version="1" />
    <external_variable comment="What is the expected dictionary file in DICTIONLIST?" datatype="string" id="oval:com.mcafee.oval:var:231637" version="1" />
    <external_variable comment="What is the expected path for DICTIONDBDIR?" datatype="string" id="oval:com.mcafee.oval:var:231633" version="1" />
    <external_variable comment="Should WHITESPACE for passwords be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231629" version="1">
      <possible_value hint="Enable">YES</possible_value>
      <possible_value hint="Disable">NO</possible_value>
    </external_variable>
    <external_variable comment="Should NAMECHECK be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231625" version="1">
      <possible_value hint="Enable">YES</possible_value>
      <possible_value hint="Disable">NO</possible_value>
    </external_variable>
    <external_variable comment="What is the expected umask value for ftpuser?" datatype="int" id="oval:com.mcafee.oval:var:231615" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /var/adm/messages?" datatype="boolean" id="oval:com.mcafee.oval:var:231609" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /var/adm/messages?" datatype="boolean" id="oval:com.mcafee.oval:var:231608" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /var/adm/messages?" datatype="boolean" id="oval:com.mcafee.oval:var:231607" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /var/adm/messages?" datatype="boolean" id="oval:com.mcafee.oval:var:231606" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /var/adm/messages?" datatype="boolean" id="oval:com.mcafee.oval:var:231605" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /var/adm/messages?" datatype="boolean" id="oval:com.mcafee.oval:var:231604" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /var/adm/messages?" datatype="boolean" id="oval:com.mcafee.oval:var:231603" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /var/adm/messages?" datatype="boolean" id="oval:com.mcafee.oval:var:231602" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /var/adm/messages?" datatype="boolean" id="oval:com.mcafee.oval:var:231601" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /var/adm/messages?" datatype="int" id="oval:com.mcafee.oval:var:231599" version="1" />
    <external_variable comment="What is the required Group ID for /var/adm/messages?" datatype="int" id="oval:com.mcafee.oval:var:231597" version="1" />
    <external_variable comment="Should Others have EXECUTE access to all files in /var/adm/sa directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231590" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to all files in /var/adm/sa directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231589" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to all files in /var/adm/sa directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231588" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to all files in /var/adm/sa directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231587" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to all files in /var/adm/sa directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231586" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to all files in /var/adm/sa directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231585" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to all files in /var/adm/sa directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231584" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to all files in /var/adm/sa directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231583" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to all files in /var/adm/sa directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231582" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for all the files in /var/adm/sa directory" datatype="int" id="oval:com.mcafee.oval:var:231581" version="1" />
    <external_variable comment="What is the required Group ID for all the files in /var/adm/sa directory?" datatype="int" id="oval:com.mcafee.oval:var:231580" version="1" />
    <external_variable comment="What is the required User ID for /var/log/authlog" datatype="int" id="oval:com.mcafee.oval:var:231577" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /var/log/authlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231567" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /var/log/authlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231566" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /var/log/authlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /var/log/authlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /var/log/authlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /var/log/authlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /var/log/authlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231561" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /var/log/authlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /var/log/authlog?" datatype="boolean" id="oval:com.mcafee.oval:var:231559" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required Group ID for /var/log/authlog?" datatype="int" id="oval:com.mcafee.oval:var:231557" version="1" />
    <external_variable comment="What is the required Group ID for /var/log/syslog?" datatype="int" id="oval:com.mcafee.oval:var:231555" version="1" />
    <external_variable comment="What is the required User ID for /var/log/syslog?" datatype="int" id="oval:com.mcafee.oval:var:231552" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /var/log/syslog?" datatype="boolean" id="oval:com.mcafee.oval:var:231550" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /var/log/syslog?" datatype="boolean" id="oval:com.mcafee.oval:var:231549" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /var/log/syslog?" datatype="boolean" id="oval:com.mcafee.oval:var:231548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /var/log/syslog?" datatype="boolean" id="oval:com.mcafee.oval:var:231547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /var/log/syslog?" datatype="boolean" id="oval:com.mcafee.oval:var:231546" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /var/log/syslog?" datatype="boolean" id="oval:com.mcafee.oval:var:231545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /var/log/syslog?" datatype="boolean" id="oval:com.mcafee.oval:var:231544" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /var/log/syslog?" datatype="boolean" id="oval:com.mcafee.oval:var:231543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /var/log/syslog?" datatype="boolean" id="oval:com.mcafee.oval:var:231542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /var/adm/wtmpx?" datatype="int" id="oval:com.mcafee.oval:var:231540" version="1" />
    <external_variable comment="What is the required Group ID for /var/adm/wtmpx?" datatype="int" id="oval:com.mcafee.oval:var:231537" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /var/adm/wtmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /var/adm/wtmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /var/adm/wtmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /var/adm/wtmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231531" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /var/adm/wtmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231530" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /var/adm/wtmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231529" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /var/adm/wtmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /var/adm/wtmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231527" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /var/adm/wtmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231526" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /var/adm/utmpx?" datatype="int" id="oval:com.mcafee.oval:var:231518" version="1" />
    <external_variable comment="What is the required Group ID for /var/adm/utmpx?" datatype="int" id="oval:com.mcafee.oval:var:231515" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /var/adm/utmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231512" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /var/adm/utmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /var/adm/utmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /var/adm/utmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231509" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /var/adm/utmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /var/adm/utmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /var/adm/utmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231506" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /var/adm/utmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /var/adm/utmpx ?" datatype="boolean" id="oval:com.mcafee.oval:var:231504" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have EXECUTE access to /etc/cron.d/cron.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231487" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /etc/cron.d/cron.allow ?" datatype="boolean" id="oval:com.mcafee.oval:var:231486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /etc/cron.d/cron.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /etc/cron.d/cron.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /etc/cron.d/cron.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /etc/cron.d/cron.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231482" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /etc/cron.d/cron.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231481" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /etc/cron.d/cron.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231480" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /etc/cron.d/cron.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231479" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /etc/cron.d/cron.allow?" datatype="int" id="oval:com.mcafee.oval:var:231476" version="1" />
    <external_variable comment="What is the required Group ID for /etc/cron.d/cron.allow?" datatype="int" id="oval:com.mcafee.oval:var:231473" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /etc/cron.d/at.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /etc/cron.d/at.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231467" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /etc/cron.d/at.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /etc/cron.d/at.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /etc/cron.d/at.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /etc/cron.d/at.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231463" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /etc/cron.d/at.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /etc/cron.d/at.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /etc/cron.d/at.allow?" datatype="boolean" id="oval:com.mcafee.oval:var:231460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /etc/cron.d/at.allow?" datatype="int" id="oval:com.mcafee.oval:var:231457" version="1" />
    <external_variable comment="What is the required Group ID for /etc/cron.d/at.allow?" datatype="int" id="oval:com.mcafee.oval:var:231454" version="1" />
    <external_variable comment="Should Others have EXECUTE access all the files in /var/spool/cron/crontabs directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231449" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access all the files in /var/spool/cron/crontabs directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231448" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access all the files in /var/spool/cron/crontabs directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231447" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access all the files in /var/spool/cron/crontabs directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access all the files in /var/spool/cron/crontabs directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231445" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access all the files in /var/spool/cron/crontabs directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231444" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access all the files in /var/spool/cron/crontabs directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231443" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access all the files in /var/spool/cron/crontabs directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231442" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to all the files in /var/spool/cron/crontabs directory?" datatype="boolean" id="oval:com.mcafee.oval:var:231441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for all files in /var/spool/cron/crontabs directory" datatype="int" id="oval:com.mcafee.oval:var:231438" version="1" />
    <external_variable comment="What is the required Group ID for all the files in /var/spool/cron/crontabs directory" datatype="int" id="oval:com.mcafee.oval:var:231436" version="1" />
    <external_variable comment="What is expected default CDE screensaver timeout value?" datatype="int" id="oval:com.mcafee.oval:var:231431" version="1" />
    <external_variable comment="What is expected default CDE screenlock timeout value?" datatype="int" id="oval:com.mcafee.oval:var:231427" version="1" />
    <external_variable comment="Should SSH RhostsRSAAuthentication be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231403" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should SSH RhostsAuthentication be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231399" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected SSH Protocol version?" datatype="string" id="oval:com.mcafee.oval:var:231395" version="1">
      <possible_value hint="Only v2 (recommended)">2</possible_value>
      <possible_value hint="Only v1">1</possible_value>
      <possible_value hint="Both v1 and v2">2,1</possible_value>
    </external_variable>
    <external_variable comment="Should SSH PermitRootLogin be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231391" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="what is the file path for sshd_config ?" datatype="string" id="oval:com.mcafee.oval:var:231390" version="1" />
    <external_variable comment="Should SSH PermitEmptyPasswords be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231387" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected ssh MaxAuthTriesLog value?" datatype="string" id="oval:com.mcafee.oval:var:231383" version="1" />
    <external_variable comment="What is the expected SSH MaxAuthTries value?" datatype="string" id="oval:com.mcafee.oval:var:231379" version="1" />
    <external_variable comment="Should SSH IgnoreRhosts be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231374" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should SSH X11Forwarding be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231366" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /etc/ftpusers?" datatype="int" id="oval:com.mcafee.oval:var:231361" version="1" />
    <external_variable comment="What is the required Group ID for /etc/ftpusers?" datatype="int" id="oval:com.mcafee.oval:var:231358" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /etc/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:231355" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /etc/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:231354" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /etc/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:231353" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /etc/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:231352" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /etc/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:231351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /etc/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:231350" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /etc/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:231349" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /etc/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:231348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /etc/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:231347" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="select one of the supported sequence number methods" datatype="int" id="oval:com.mcafee.oval:var:231329" version="1">
      <possible_value hint="0 : Old-fashioned sequential initial sequence number generation">0</possible_value>
      <possible_value hint="1 : Improved sequential generation, with random variance in increment">1</possible_value>
      <possible_value hint="2 : RFC 1948 sequence number generation, unique-per-connection-ID">2</possible_value>
    </external_variable>
    <external_variable comment="Should the NIS client service be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:231323" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="What is the expected security level for sadmind daemon service?" datatype="int" id="oval:com.mcafee.oval:var:231317" version="1">
      <possible_value hint="Set authentication type to NONE">0</possible_value>
      <possible_value hint="Set authentication type to WEAK">1</possible_value>
      <possible_value hint="Set authentication type to STRONG (Recommended)">2</possible_value>
    </external_variable>
    <external_variable comment="What is the expected banner text for FTP daemon? (This should be in regex format)" datatype="string" id="oval:com.mcafee.oval:var:231315" version="1" />
    <external_variable comment="What is the expected graphical greeter for local logins ?" datatype="string" id="oval:com.mcafee.oval:var:231306" version="1">
      <possible_value hint="/usr/bin/gdmlogin">\/usr\/bin\/gdmlogin</possible_value>
      <possible_value hint="/usr/bin/gdmgreeter">\/usr\/bin\/gdmgreeter</possible_value>
    </external_variable>
    <external_variable comment="What is the expected banner text in /etc/issue (This should be in regex format)?" datatype="string" id="oval:com.mcafee.oval:var:231305" version="1" />
    <external_variable comment="What is the expected personalized welcome message for CDE users (This should be in regex format)?" datatype="string" id="oval:com.mcafee.oval:var:231296" version="1" />
    <external_variable comment="Consistent Mime Handling: Internet Explorer Processes" datatype="string" id="oval:com.mcafee.oval:var:231249" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Restrict ActiveX Install: Internet Explorer Processes" datatype="string" id="oval:com.mcafee.oval:var:231248" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow binary and script behaviors" datatype="int" id="oval:com.mcafee.oval:var:231247" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Administrator approved">65536</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Logon options" datatype="int" id="oval:com.mcafee.oval:var:231246" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Anonymous logon">196608</possible_value>
      <possible_value hint="Enabled: Automatic logon only in Intranet zone">131072</possible_value>
      <possible_value hint="Enabled: Automatic logon with current username and password">0</possible_value>
      <possible_value hint="Enabled: Prompt for user name and password">65536</possible_value>
    </external_variable>
    <external_variable comment="Prohibit Access of the Windows Connect Now Wizards" datatype="string" id="oval:com.mcafee.oval:var:231243" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Wireless settings configuration" datatype="string" id="oval:com.mcafee.oval:var:231242" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Managing Phishing Filter" datatype="int" id="oval:com.mcafee.oval:var:231241" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Automatic">2</possible_value>
      <possible_value hint="Enabled: Manual">1</possible_value>
      <possible_value hint="Enabled: Off">0</possible_value>
    </external_variable>
    <external_variable comment="Disable Automatic Install of Internet Explorer Compoents" datatype="int" id="oval:com.mcafee.oval:var:231238" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Security Zones: Use Only Machine Settings" datatype="int" id="oval:com.mcafee.oval:var:231237" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Disable Changing Automatic Configuration Settings" datatype="int" id="oval:com.mcafee.oval:var:231236" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do Not Allow Resetting Internet Explorer Settings" datatype="int" id="oval:com.mcafee.oval:var:231235" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Crash Detection" datatype="int" id="oval:com.mcafee.oval:var:231234" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do Not Allow Users to enable or Disable Add-Ons" datatype="int" id="oval:com.mcafee.oval:var:231233" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Security Zones: Do Not Allow Users to Change Policies" datatype="int" id="oval:com.mcafee.oval:var:231232" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Security Zones: Do Not Allow Users to Add/Delete Sites" datatype="int" id="oval:com.mcafee.oval:var:231231" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Disable Periodic Check For Internet Explorer Software Updates" datatype="int" id="oval:com.mcafee.oval:var:231230" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Delete Browsing History: Turn off Delete Browsing History" datatype="string" id="oval:com.mcafee.oval:var:231229" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Mime Sniffing Safety Feature: Internet Explorer Processes" datatype="string" id="oval:com.mcafee.oval:var:231226" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Restrict File Download: Internet Explorer Processes" datatype="string" id="oval:com.mcafee.oval:var:231223" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Scripted Window Security Restrictions: Internet Explorer Processes" datatype="string" id="oval:com.mcafee.oval:var:231222" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Advanced Page: Check for Signature on Downloaded Programs" datatype="string" id="oval:com.mcafee.oval:var:231219" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent Ignoing Certificate Errors" datatype="string" id="oval:com.mcafee.oval:var:231218" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Advanced Page: Allow Active Content from CDs to Run" datatype="string" id="oval:com.mcafee.oval:var:231217" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="AJAX: Enable Native XMLHttp Support" datatype="string" id="oval:com.mcafee.oval:var:231216" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Control user sign in using a PIN ." datatype="string" id="oval:com.mcafee.oval:var:231214" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Control domain user sign in using a picture password." datatype="string" id="oval:com.mcafee.oval:var:231213" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Software Update Shell Notifications on Program Launch" datatype="int" id="oval:com.mcafee.oval:var:231209" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="What is the expected welcome message for GUI based login (This should be in regex format)?" datatype="string" id="oval:com.mcafee.oval:var:231177" version="1" />
    <external_variable comment="What is the expected banner text for GNOME Users (This should be in regex format)?" datatype="string" id="oval:com.mcafee.oval:var:231171" version="1" />
    <external_variable comment="Should the NFS client requests to privileged ports be enable or disable?" datatype="int" id="oval:com.mcafee.oval:var:231164" version="1">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Should the TCP Wrappers be enabeld or disabled?" datatype="string" id="oval:com.mcafee.oval:var:231156" version="1">
      <possible_value hint="Enable">YES</possible_value>
      <possible_value hint="Disable">NO</possible_value>
    </external_variable>
    <external_variable comment="What is the expected banner for telnet daemon (This should be in regex format)?" datatype="string" id="oval:com.mcafee.oval:var:231149" version="1" />
    <external_variable comment="What is the required Group ID for the root account?" datatype="int" id="oval:com.mcafee.oval:var:231047" version="1" />
    <external_variable comment="Should the cronlog be enable or disable?" datatype="string" id="oval:com.mcafee.oval:var:231002" version="1">
      <possible_value hint="Enable">YES</possible_value>
      <possible_value hint="Disable">NO</possible_value>
    </external_variable>
    <external_variable comment="should the nobody acess for secure RPC be enable or diable?" datatype="string" id="oval:com.mcafee.oval:var:230901" version="1">
      <possible_value hint="Enable">YES</possible_value>
      <possible_value hint="Disable">NO</possible_value>
    </external_variable>
    <external_variable comment="Should the Inetd tracing be enabeld or disabled??" datatype="string" id="oval:com.mcafee.oval:var:230897" version="1">
      <possible_value hint="Enable">YES</possible_value>
      <possible_value hint="Disable">NO</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /etc/ftpd/ftpusers?" datatype="int" id="oval:com.mcafee.oval:var:230887" version="1" />
    <external_variable comment="What is the required Group ID for /etc/ftpd/ftpusers?" datatype="int" id="oval:com.mcafee.oval:var:230884" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /etc/ftpd/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:230881" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /etc/ftpd/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:230880" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /etc/ftpd/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:230879" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /etc/ftpd/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:230878" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /etc/ftpd/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:230877" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /etc/ftpd/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:230876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /etc/ftpd/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:230875" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /etc/ftpd/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:230874" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /etc/ftpd/ftpusers ?" datatype="boolean" id="oval:com.mcafee.oval:var:230873" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /var/adm/loginlog?" datatype="int" id="oval:com.mcafee.oval:var:230868" version="1" />
    <external_variable comment="What is the required Group ID for /var/adm/loginlog?" datatype="int" id="oval:com.mcafee.oval:var:230865" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /etc/var/adm/loginlog ?" datatype="boolean" id="oval:com.mcafee.oval:var:230862" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /etc/var/adm/loginlog ?" datatype="boolean" id="oval:com.mcafee.oval:var:230861" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /etc/var/adm/loginlog ?" datatype="boolean" id="oval:com.mcafee.oval:var:230860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /etc/var/adm/loginlog ?" datatype="boolean" id="oval:com.mcafee.oval:var:230859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /etc/var/adm/loginlog ?" datatype="boolean" id="oval:com.mcafee.oval:var:230858" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /etc/var/adm/loginlog ?" datatype="boolean" id="oval:com.mcafee.oval:var:230857" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /etc/var/adm/loginlog ?" datatype="boolean" id="oval:com.mcafee.oval:var:230856" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /etc/var/adm/loginlog ?" datatype="boolean" id="oval:com.mcafee.oval:var:230855" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /etc/var/adm/loginlog ?" datatype="boolean" id="oval:com.mcafee.oval:var:230854" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID /var/cron/log?" datatype="int" id="oval:com.mcafee.oval:var:230849" version="1" />
    <external_variable comment="What is the required Group ID for /var/cron/log?" datatype="int" id="oval:com.mcafee.oval:var:230846" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /var/cron/log ?" datatype="boolean" id="oval:com.mcafee.oval:var:230843" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /var/cron/log ?" datatype="boolean" id="oval:com.mcafee.oval:var:230842" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /var/cron/log ?" datatype="boolean" id="oval:com.mcafee.oval:var:230841" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /var/cron/log ?" datatype="boolean" id="oval:com.mcafee.oval:var:230840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /var/cron/log ?" datatype="boolean" id="oval:com.mcafee.oval:var:230839" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /var/cron/log ?" datatype="boolean" id="oval:com.mcafee.oval:var:230838" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /var/cron/log ?" datatype="boolean" id="oval:com.mcafee.oval:var:230837" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /var/cron/log ?" datatype="boolean" id="oval:com.mcafee.oval:var:230836" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /var/cron/log ?" datatype="boolean" id="oval:com.mcafee.oval:var:230835" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required Group ID for /etc/shadow?" datatype="int" id="oval:com.mcafee.oval:var:230830" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /etc/shadow ?" datatype="boolean" id="oval:com.mcafee.oval:var:230827" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /etc/shadow ?" datatype="boolean" id="oval:com.mcafee.oval:var:230826" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /etc/shadow ?" datatype="boolean" id="oval:com.mcafee.oval:var:230825" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /etc/shadow ?" datatype="boolean" id="oval:com.mcafee.oval:var:230824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /etc/shadow ?" datatype="boolean" id="oval:com.mcafee.oval:var:230823" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /etc/shadow ?" datatype="boolean" id="oval:com.mcafee.oval:var:230822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /etc/shadow ?" datatype="boolean" id="oval:com.mcafee.oval:var:230821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /etc/shadow ?" datatype="boolean" id="oval:com.mcafee.oval:var:230820" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /etc/shadow ?" datatype="boolean" id="oval:com.mcafee.oval:var:230819" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /etc/shadow?" datatype="int" id="oval:com.mcafee.oval:var:230817" version="1" />
    <external_variable comment="What is the required User ID for /etc/passwd?" datatype="int" id="oval:com.mcafee.oval:var:230811" version="1" />
    <external_variable comment="What is the required Group ID for /etc/passwd?" datatype="int" id="oval:com.mcafee.oval:var:230808" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /etc/passwd ?" datatype="boolean" id="oval:com.mcafee.oval:var:230805" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /etc/passwd ?" datatype="boolean" id="oval:com.mcafee.oval:var:230804" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /etc/passwd ?" datatype="boolean" id="oval:com.mcafee.oval:var:230803" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /etc/passwd ?" datatype="boolean" id="oval:com.mcafee.oval:var:230802" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /etc/passwd ?" datatype="boolean" id="oval:com.mcafee.oval:var:230801" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /etc/passwd ?" datatype="boolean" id="oval:com.mcafee.oval:var:230800" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /etc/passwd ?" datatype="boolean" id="oval:com.mcafee.oval:var:230799" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /etc/passwd ?" datatype="boolean" id="oval:com.mcafee.oval:var:230798" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /etc/passwd ?" datatype="boolean" id="oval:com.mcafee.oval:var:230797" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the required User ID for /etc/group?" datatype="int" id="oval:com.mcafee.oval:var:230792" version="1" />
    <external_variable comment="What is the required Group ID for /etc/group?" datatype="int" id="oval:com.mcafee.oval:var:230789" version="1" />
    <external_variable comment="Should Others have EXECUTE access to /etc/group ?" datatype="boolean" id="oval:com.mcafee.oval:var:230786" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access to /etc/group ?" datatype="boolean" id="oval:com.mcafee.oval:var:230785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access to /etc/group ?" datatype="boolean" id="oval:com.mcafee.oval:var:230784" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access to /etc/group ?" datatype="boolean" id="oval:com.mcafee.oval:var:230783" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access to /etc/group ?" datatype="boolean" id="oval:com.mcafee.oval:var:230782" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access to /etc/group ?" datatype="boolean" id="oval:com.mcafee.oval:var:230781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access to /etc/group ?" datatype="boolean" id="oval:com.mcafee.oval:var:230780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access to /etc/group ?" datatype="boolean" id="oval:com.mcafee.oval:var:230779" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access to /etc/group ?" datatype="boolean" id="oval:com.mcafee.oval:var:230778" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the service Volume Manager smserver be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230702" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Solaris Volume Manager metainit be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230701" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Solaris Volume Manager mdmonitor be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230700" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Solaris Volume Manager GUI metamh be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230699" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Solaris Volume Manager GUI metamed be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230698" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Solaris Volume Manager GUI meta be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230697" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Solaris Volume Manager GUI mdcomm be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230696" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Samba be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230695" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service RPC Encryption Key be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230694" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service NIS Server daemon xfr be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230693" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service NIS Server daemon update be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230692" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service NIS Server daemon passwd be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230691" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service NIS Server be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230690" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Local Web Console be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230689" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Local WBEM be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230688" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Local sendmail be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230687" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Local RPC Port Mapping be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230686" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Local BSD Print Protocol Adapter be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230685" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service LDAP Cache Manager be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230684" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Kerberos TGT Expiration Warning be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230683" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Generic Security Services (GSS) be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230682" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service CDE login be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230681" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service CDE Calendar Manager be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230680" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service automount be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230679" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Apache be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230678" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service System Accounting be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230677" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service Volume Manager volfs be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:230676" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should SSH RhostsRSAAuthentication be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230374" version="2">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should SSH RhostsAuthentication be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230373" version="2">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected SSH Protocol version?" datatype="string" id="oval:com.mcafee.oval:var:230372" version="1">
      <possible_value hint="Only v2 (recommended)">2</possible_value>
      <possible_value hint="Only v1">1</possible_value>
      <possible_value hint="Both v1 and v2">2,1</possible_value>
    </external_variable>
    <external_variable comment="Should SSH PermitRootLogin be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230371" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should SSH PermitEmptyPasswords be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230370" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="What is the expected ssh MaxAuthTriesLog value?" datatype="string" id="oval:com.mcafee.oval:var:230369" version="1" />
    <external_variable comment="What is the expected SSH MaxAuthTries value?" datatype="int" id="oval:com.mcafee.oval:var:230368" version="2" />
    <external_variable comment="Should SSH IgnoreRhosts be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230367" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should SSH X11Forwarding be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230366" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Solaris Volume Manager service rpc.metamedd is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230325" version="1">
      <possible_value hint="Enabled">100242</possible_value>
      <possible_value hint="Disabled">#100242</possible_value>
    </external_variable>
    <external_variable comment="Solaris Volume Manager service rpc.metad is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230324" version="1">
      <possible_value hint="Enabled">100229</possible_value>
      <possible_value hint="Disabled">#100229</possible_value>
    </external_variable>
    <external_variable comment="tooltalk service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230323" version="1">
      <possible_value hint="Enabled">100083</possible_value>
      <possible_value hint="Disabled">#100083</possible_value>
    </external_variable>
    <external_variable comment="tftp service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230322" version="1">
      <possible_value hint="Enabled">tftp</possible_value>
      <possible_value hint="Disabled">#tftp</possible_value>
    </external_variable>
    <external_variable comment="telnet service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230321" version="1">
      <possible_value hint="Enabled">telnet</possible_value>
      <possible_value hint="Disabled">#telnet</possible_value>
    </external_variable>
    <external_variable comment="smserver service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230320" version="1">
      <possible_value hint="Enabled">100155</possible_value>
      <possible_value hint="Disabled">#100155</possible_value>
    </external_variable>
    <external_variable comment="rsh service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230319" version="1">
      <possible_value hint="Enabled">shell</possible_value>
      <possible_value hint="Disabled">#shell</possible_value>
    </external_variable>
    <external_variable comment="rquotad service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230318" version="1">
      <possible_value hint="Enabled">rquotad</possible_value>
      <possible_value hint="Disabled">#rquotad</possible_value>
    </external_variable>
    <external_variable comment="rlogin service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230317" version="1">
      <possible_value hint="Enabled">login</possible_value>
      <possible_value hint="Disabled">#login</possible_value>
    </external_variable>
    <external_variable comment="Printer service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230316" version="1">
      <possible_value hint="Enabled">printer</possible_value>
      <possible_value hint="Disabled">#printer</possible_value>
    </external_variable>
    <external_variable comment="ktkt_warnd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230315" version="1">
      <possible_value hint="Enabled">100134</possible_value>
      <possible_value hint="Disabled">#100134</possible_value>
    </external_variable>
    <external_variable comment="Generic Security Service service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230314" version="1">
      <possible_value hint="Enabled">100234</possible_value>
      <possible_value hint="Disabled">#100234</possible_value>
    </external_variable>
    <external_variable comment="FTP service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230313" version="1">
      <possible_value hint="Enabled">ftp</possible_value>
      <possible_value hint="Disabled">#ftp</possible_value>
    </external_variable>
    <external_variable comment="Solaris Volume Manager service rpc.metamhd is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:230312" version="1">
      <possible_value hint="Enabled">100230</possible_value>
      <possible_value hint="Disabled">#100230</possible_value>
    </external_variable>
    <external_variable comment="Block Microsoft Accounts" datatype="int" id="oval:com.mcafee.oval:var:230084" version="6">
      <possible_value hint="This policy is disabled">0</possible_value>
      <possible_value hint="Users cannot add Microsoft accounts">1</possible_value>
      <possible_value hint="Users cannot add or log on with Microsoft accounts">3</possible_value>
    </external_variable>
    <external_variable comment="Select update server" datatype="int" id="oval:com.mcafee.oval:var:230083" version="3">
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_value hint="Search Windows Update">0</possible_value>
      <possible_value hint="Search Managed Server">1</possible_value>
      <possible_value hint="Search Managed Server, then WU">2</possible_value>
    </external_variable>
    <external_variable comment="Specify passive polling" datatype="string" id="oval:com.mcafee.oval:var:230082" version="3">
      <possible_value hint="Enabled:Disable passive polling">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Hash version supported" datatype="int" id="oval:com.mcafee.oval:var:230081" version="3">
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_value hint="Support V1 as well as V2 hashes">3</possible_value>
      <possible_value hint="Supports V1 hash version only">1</possible_value>
      <possible_value hint="Supports V2 hash version only">2</possible_value>
    </external_variable>
    <external_variable comment="TPM authentication level" datatype="int" id="oval:com.mcafee.oval:var:230080" version="3">
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_value hint="Full">4</possible_value>
      <possible_value hint="Delegated">2</possible_value>
      <possible_value hint="None">0</possible_value>
    </external_variable>
    <external_variable comment="Number of invalid logon attempts" datatype="int" id="oval:com.mcafee.oval:var:230078" version="3" />
    <external_variable comment="Machine inactivity limit" datatype="int" id="oval:com.mcafee.oval:var:230077" version="2" />
    <external_variable comment="Attempt S4U2Self to obtain claim information" datatype="int" id="oval:com.mcafee.oval:var:230075" version="2">
      <possible_value hint="Default">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">2</possible_value>
    </external_variable>
    <external_variable comment="Age of files in BITS peercache" datatype="int" id="oval:com.mcafee.oval:var:230073" version="2">
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 120">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">120</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Enable Auto Hosted Cache Discovery by Service Connection Point." datatype="string" id="oval:com.mcafee.oval:var:230072" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Standard Individual User Lockout Threshold" datatype="int" id="oval:com.mcafee.oval:var:230071" version="2">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 100">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">100</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Standard User Lockout Duration" datatype="int" id="oval:com.mcafee.oval:var:230070" version="2">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 10000">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">10000</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Standard User Total lockout Threshold" datatype="int" id="oval:com.mcafee.oval:var:230069" version="2">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 100">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">100</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Detect Compatibility Issues" datatype="string" id="oval:com.mcafee.oval:var:230068" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Require use of fast startup" datatype="string" id="oval:com.mcafee.oval:var:230067" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Display instructions in the shutdown scripts as they run" datatype="string" id="oval:com.mcafee.oval:var:230066" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Display instructions in the startup scripts as they run" datatype="string" id="oval:com.mcafee.oval:var:230065" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Control the DC locator algorithm" datatype="string" id="oval:com.mcafee.oval:var:230064" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Use DNS name resolution instead of NETBIOS name resolution" datatype="string" id="oval:com.mcafee.oval:var:230063" version="3">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevents connected users from being enumerated on domain-joined computers." datatype="string" id="oval:com.mcafee.oval:var:230062" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allows local users from being enumerated on domain-joined computers." datatype="string" id="oval:com.mcafee.oval:var:230061" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent app notifications from appearing on lock screen." datatype="string" id="oval:com.mcafee.oval:var:230060" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Use the store service for finding an app to open a file with unhandled file type." datatype="string" id="oval:com.mcafee.oval:var:230057" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Interactive users cannot generate their RSOP data." datatype="string" id="oval:com.mcafee.oval:var:230056" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Workplace connectivity wait time" datatype="int" id="oval:com.mcafee.oval:var:230055" version="2">
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 600">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">600</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Turn off Group Policy Client Service AOAC optimization." datatype="string" id="oval:com.mcafee.oval:var:230054" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Redirect folders on primary computers only." datatype="string" id="oval:com.mcafee.oval:var:230053" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Activate Enhanced Storage device." datatype="string" id="oval:com.mcafee.oval:var:230052" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prioritize all digitally signed drivers equallyduring the driver ranking and the selection process." datatype="string" id="oval:com.mcafee.oval:var:230051" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="MXDW generates OpenXPS files by default in Windows 8." datatype="string" id="oval:com.mcafee.oval:var:230050" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Determine if v4 printer drivers are allowed to run printer extensions." datatype="string" id="oval:com.mcafee.oval:var:230049" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Determine if printer drivers are isolated from applications instead of normally loading them into applications." datatype="string" id="oval:com.mcafee.oval:var:230048" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Configure IP Stateless Autoconfiguration Limits." datatype="string" id="oval:com.mcafee.oval:var:230047" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Enable file synchronization on costed networks." datatype="string" id="oval:com.mcafee.oval:var:230045" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow NetBT queries for fully qualified domain names." datatype="string" id="oval:com.mcafee.oval:var:230042" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="IDN mapping." datatype="string" id="oval:com.mcafee.oval:var:230041" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prefer link local responses." datatype="string" id="oval:com.mcafee.oval:var:230040" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off IDN encoding." datatype="string" id="oval:com.mcafee.oval:var:230039" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off smart multi-homed name resolution." datatype="string" id="oval:com.mcafee.oval:var:230038" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off smart protocol reordering." datatype="string" id="oval:com.mcafee.oval:var:230037" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="BranchCache version" datatype="int" id="oval:com.mcafee.oval:var:230036" version="3">
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_value hint="Windows Vista with BITS 4.0 installed, Windows 7 or Windows Server 2008 R2">1</possible_value>
      <possible_value hint="Windows 8">2</possible_value>
    </external_variable>
    <external_variable comment="Age of segments in data cache" datatype="int" id="oval:com.mcafee.oval:var:230035" version="2">
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 0 to 9999">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">9999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="What is the expected banner text for FTP daemon? (This should be in regex format)" datatype="string" id="oval:com.mcafee.oval:var:229922" version="1" />
    <external_variable comment="should root user login remotely?" datatype="string" id="oval:com.mcafee.oval:var:229913" version="1">
      <possible_value hint="enable">true</possible_value>
      <possible_value hint="disable">false</possible_value>
    </external_variable>
    <external_variable comment="Should the LOG_FROM_REMOTE be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:229259" version="1">
      <possible_value hint="Enable">YES</possible_value>
      <possible_value hint="Disable">NO</possible_value>
    </external_variable>
    <external_variable comment="Specify the minimum required version of Apache Tomcat Server (eg - 6.0, 6.0.21, 7.0.25)" datatype="version" id="oval:com.mcafee.oval:var:227549" version="1" />
    <external_variable comment="Specify the required version of Apache HTTP Server (eg - 2.0, 2.0.64, 2.2)" datatype="version" id="oval:com.mcafee.oval:var:227505" version="1" />
    <external_variable comment="Specify the required version of IIS (ex - 5.0, 5.1, 6.0, 7.0, 7.5, 8.0)" datatype="version" id="oval:com.mcafee.oval:var:227380" version="2" />
    <external_variable comment="Desired value of tcp_tcpsecure?" datatype="int" id="oval:com.mcafee.oval:var:227273" version="1" />
    <external_variable comment="Desired value of ip_nfrag?" datatype="int" id="oval:com.mcafee.oval:var:227263" version="1" />
    <external_variable comment="Startup setting for service?" datatype="string" id="oval:com.mcafee.oval:var:227185" version="1">
      <possible_value hint="Enabled">dt_nogb</possible_value>
      <possible_value hint="Disabled">#dt_nogb</possible_value>
    </external_variable>
    <external_variable comment="Startup setting for service?" datatype="string" id="oval:com.mcafee.oval:var:227178" version="1">
      <possible_value hint="Enabled">xdm</possible_value>
      <possible_value hint="Disabled">#xdm</possible_value>
    </external_variable>
    <external_variable comment="Startup setting for service?" datatype="string" id="oval:com.mcafee.oval:var:227171" version="1">
      <possible_value hint="Enabled">writesrv</possible_value>
      <possible_value hint="Disabled">#writesrv</possible_value>
    </external_variable>
    <external_variable comment="Startup setting for service?" datatype="string" id="oval:com.mcafee.oval:var:227164" version="1">
      <possible_value hint="Enabled">uprintfd</possible_value>
      <possible_value hint="Disabled">#uprintfd</possible_value>
    </external_variable>
    <external_variable comment="Startup setting for service?" datatype="string" id="oval:com.mcafee.oval:var:227157" version="1">
      <possible_value hint="Enabled">nfs</possible_value>
      <possible_value hint="Disabled">#nfs</possible_value>
    </external_variable>
    <external_variable comment="Should the startup service be enabled or diabled ?" datatype="string" id="oval:com.mcafee.oval:var:227150" version="1">
      <possible_value hint="Enabled">lpd</possible_value>
      <possible_value hint="Disabled">#lpd</possible_value>
    </external_variable>
    <external_variable comment="Should the service be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:227137" version="3">
      <possible_value hint="Enable - id:5:initdefault:">enable</possible_value>
      <possible_value hint="Disable - id:3:initdefault:">disable</possible_value>
    </external_variable>
    <external_variable comment="Startup setting for service?" datatype="string" id="oval:com.mcafee.oval:var:226932" version="1">
      <possible_value hint="Enabled">start</possible_value>
      <possible_value hint="Disabled">#start</possible_value>
    </external_variable>
    <external_variable comment="How long before password expiration should users be warned? (in days)" datatype="int" id="oval:com.mcafee.oval:var:226927" version="2">
      <possible_restriction hint="Must be either 0 for disabled or a number of days greater than or equal to 1">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="What is the minimum number of non-alphabetic characters required?" datatype="int" id="oval:com.mcafee.oval:var:226926" version="1">
      <possible_restriction hint="Must be between 0 and PW_PASSLEN">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="What is the minimum password length?" datatype="int" id="oval:com.mcafee.oval:var:226925" version="1">
      <possible_restriction hint="Must be between 0 and PW_PASSLEN">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="How many characters must be changed between the old and new passwords?" datatype="int" id="oval:com.mcafee.oval:var:226924" version="1">
      <possible_restriction hint="Must be between 0 and PW_PASSLEN">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="How many alpha character must a password contain?" datatype="int" id="oval:com.mcafee.oval:var:226923" version="1">
      <possible_restriction hint="Must be between 0 and PW_PASSLEN">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="How long must a user keep their pasword? (in weeks)" datatype="int" id="oval:com.mcafee.oval:var:226922" version="1">
      <possible_restriction hint="Must be between 0 and 52 weeks">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">52</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="How many times can a character repeat in a password?" datatype="int" id="oval:com.mcafee.oval:var:226921" version="2">
      <possible_restriction hint="Must be between 0 and the currently configured password length">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="How long after expiration can a password be changed? (in weeks)" datatype="int" id="oval:com.mcafee.oval:var:226920" version="1">
      <possible_restriction hint="Must be -1 for unlimited or between 1 and 52 weeks">
        <restriction operation="equals">-1</restriction>
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">52</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="How long can a password be valid? (in weeks)" datatype="int" id="oval:com.mcafee.oval:var:226919" version="1">
      <possible_restriction hint="Must be 0 for unlimited or between 1 and 52 weeks">
        <restriction operation="equals">0</restriction>
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">52</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Desired password history to be remembered?" datatype="int" id="oval:com.mcafee.oval:var:226909" version="1">
      <possible_restriction hint="Must be between 0 and 50 passwords">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">50</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Desired password history length? (in weeks)" datatype="int" id="oval:com.mcafee.oval:var:226877" version="1">
      <possible_restriction hint="Must be between 0 and 260 weeks">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">260</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="time service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226857" version="1">
      <possible_value hint="Enabled">time</possible_value>
      <possible_value hint="Disabled">#time</possible_value>
    </external_variable>
    <external_variable comment="talk service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226849" version="1">
      <possible_value hint="Enabled">talk</possible_value>
      <possible_value hint="Disabled">#talk</possible_value>
    </external_variable>
    <external_variable comment="systat service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226841" version="1">
      <possible_value hint="Enabled">systat</possible_value>
      <possible_value hint="Disabled">#systat</possible_value>
    </external_variable>
    <external_variable comment="rstatd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226825" version="1">
      <possible_value hint="Enabled">rstatd</possible_value>
      <possible_value hint="Disabled">#rstatd</possible_value>
    </external_variable>
    <external_variable comment="comsat service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226817" version="1">
      <possible_value hint="Enabled">comsat</possible_value>
      <possible_value hint="Disabled">#comsat</possible_value>
    </external_variable>
    <external_variable comment="apmd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226809" version="1">
      <possible_value hint="Enabled">apmd</possible_value>
      <possible_value hint="Disabled">#apmd</possible_value>
    </external_variable>
    <external_variable comment="rpc.sprayd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226799" version="1">
      <possible_value hint="Enabled">sprayd</possible_value>
      <possible_value hint="Disabled">#sprayd</possible_value>
    </external_variable>
    <external_variable comment="rwalld service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226791" version="1">
      <possible_value hint="Enabled">rwalld</possible_value>
      <possible_value hint="Disabled">#rwalld</possible_value>
    </external_variable>
    <external_variable comment="rusersd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226784" version="1">
      <possible_value hint="Enabled">rusersd</possible_value>
      <possible_value hint="Disabled">#rusersd</possible_value>
    </external_variable>
    <external_variable comment="rexd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226772" version="1">
      <possible_value hint="Enabled">rexd</possible_value>
      <possible_value hint="Disabled">#rexd</possible_value>
    </external_variable>
    <external_variable comment="rpc.pcnfsd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226764" version="1">
      <possible_value hint="Enabled">pcnfsd</possible_value>
      <possible_value hint="Disabled">#pcnfsd</possible_value>
    </external_variable>
    <external_variable comment="security attributes" datatype="string" id="oval:com.mcafee.oval:var:226761" version="1">
      <possible_value hint="Security attributes">.*none.*</possible_value>
    </external_variable>
    <external_variable comment="Password flags attribute for all users" datatype="string" id="oval:com.mcafee.oval:var:226628" version="1">
      <possible_value hint="flags attribute">.*NOCHECK.*</possible_value>
    </external_variable>
    <external_variable comment="nntpd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:226584" version="1">
      <possible_value hint="Enabled">nntp</possible_value>
      <possible_value hint="Disabled">#nntp</possible_value>
    </external_variable>
    <external_variable comment="No of invalid login attempts allowed before a user can retry ?" datatype="int" id="oval:com.mcafee.oval:var:226453" version="1">
      <possible_restriction hint="A zero to disable this feature">
        <restriction operation="greater than or equal">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="should the configuration be enable or disable ?" datatype="string" id="oval:com.mcafee.oval:var:226447" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="What should be the number of 'files' value? (eg : 2 )" datatype="int" id="oval:com.mcafee.oval:var:226441" version="1" />
    <external_variable comment="What should be the size ( Minimum 10k) for log rotation? (eg:2000k ,1m )" datatype="string" id="oval:com.mcafee.oval:var:226440" version="1" />
    <external_variable comment="What should be duration of log rotation ?" datatype="string" id="oval:com.mcafee.oval:var:226437" version="1">
      <possible_restriction hint="Expected format: 1 hour = 1h, 1 day = 1d, 1 week = 1w, 1 month = 1m, 1 year=1y">
        <restriction operation="greater than or equal">1</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="The number of numeric characters (dcredit) required by the policy" datatype="int" id="oval:com.mcafee.oval:var:223145" version="2" />
    <external_variable comment="Trend Micro Titanium Internet Security DAT file age in seconds" datatype="int" id="oval:com.mcafee.oval:var:216688" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="This is the minimum version of Trend Micro Titanium Internet Security that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:216683" version="1" />
    <external_variable comment="Allow access to fixed data drives from earlier versions of Windows" datatype="string" id="oval:com.mcafee.oval:var:216458" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled - Install Reader (box not checked)">EnabledInstalled</possible_value>
      <possible_value hint="Enabled - Do not install Reader (box checked)">EnabledNotInstalled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Configure use of smart cards on fixed data drives" datatype="string" id="oval:com.mcafee.oval:var:216457" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled - Not required (box not checked)">EnabledNotRequired</possible_value>
      <possible_value hint="Enabled - Required (box checked)">EnabledRequired</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Other Account Logon Events audit subcategory." datatype="string" id="oval:com.mcafee.oval:var:216456" version="1">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="IP Helper Service (iphlpsvc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:216447" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Peer Networking Identity Manager Service (p2pimsvc) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:216446" version="1">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Limit users to a single remote session" datatype="string" id="oval:com.mcafee.oval:var:216445" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not delete temp folder upon exit" datatype="string" id="oval:com.mcafee.oval:var:216444" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not use temp folders per session" datatype="string" id="oval:com.mcafee.oval:var:216443" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Configuring History" datatype="int" id="oval:com.mcafee.oval:var:216435" version="2">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 0 to 999">
        <restriction operation="greater than or equal">0</restriction>
        <restriction operation="less than or equal">999</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Protection From Zone Elevation: Internet Explorer Processes" datatype="string" id="oval:com.mcafee.oval:var:216434" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="MK Protocol Security Restriction: Internet Explorer Processes" datatype="string" id="oval:com.mcafee.oval:var:216433" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Override the More Gadgets link" datatype="int" id="oval:com.mcafee.oval:var:216432" version="2">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="User management of sharing information with metro-styled apps" datatype="int" id="oval:com.mcafee.oval:var:216405" version="2">
      <possible_value hint="Always on">1</possible_value>
      <possible_value hint="Always off">2</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Download roaming profiles on primary computers only" datatype="string" id="oval:com.mcafee.oval:var:216404" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable detection of slow network connections" datatype="string" id="oval:com.mcafee.oval:var:216403" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow deployment operations in special profiles" datatype="string" id="oval:com.mcafee.oval:var:216401" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow all trusted apps to install" datatype="string" id="oval:com.mcafee.oval:var:216400" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Inventory Collector" datatype="int" id="oval:com.mcafee.oval:var:216399" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Specify timeout for fast user switching events" datatype="int" id="oval:com.mcafee.oval:var:216397" version="2">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled - Timeout in seconds">
        <restriction operation="greater than or equal">5</restriction>
        <restriction operation="less than or equal">60</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Choose drive encryption method and cipher strength" datatype="int" id="oval:com.mcafee.oval:var:216395" version="2">
      <possible_value hint="Enabled - AES 128-bit (default)">3</possible_value>
      <possible_value hint="Enabled - AES 256-bit">4</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Choose drive encryption method and cipher strength" datatype="int" id="oval:com.mcafee.oval:var:216394" version="2">
      <possible_value hint="Enabled - AES 128-bit with Diffuser">1</possible_value>
      <possible_value hint="Enabled - AES 256-bit with Diffuser">2</possible_value>
      <possible_value hint="Enabled - AES 128-bit">3</possible_value>
      <possible_value hint="Enabled - AES 256-bit">4</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Enforce drive encryption type on fixed data drives" datatype="int" id="oval:com.mcafee.oval:var:216393" version="2">
      <possible_value hint="Enabled - Allow user to choose (default)">0</possible_value>
      <possible_value hint="Enabled - Full encryption">1</possible_value>
      <possible_value hint="Enabled - Use Space Only encryption">2</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Reset platform validation data after BitLocker recovery" datatype="string" id="oval:com.mcafee.oval:var:216392" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Enforce drive encryption type on operating system drives" datatype="int" id="oval:com.mcafee.oval:var:216391" version="2">
      <possible_value hint="Enabled - Allow user to choose (default)">0</possible_value>
      <possible_value hint="Enabled - Full encryption">1</possible_value>
      <possible_value hint="Enabled - Use Space Only encryption">2</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Enable use of BitLocker authentication" datatype="string" id="oval:com.mcafee.oval:var:216390" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disallow standard users from changing the PIN or password" datatype="string" id="oval:com.mcafee.oval:var:216389" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Secured Boot for integrity validation" datatype="string" id="oval:com.mcafee.oval:var:216388" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow network unlock at startup" datatype="string" id="oval:com.mcafee.oval:var:216387" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Enforce drive encryption type on removable data drives" datatype="int" id="oval:com.mcafee.oval:var:216386" version="2">
      <possible_value hint="Enabled - Allow user to choose (default)">0</possible_value>
      <possible_value hint="Enabled - Full encryption">1</possible_value>
      <possible_value hint="Enabled - Use Space Only encryption">2</possible_value>
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
    </external_variable>
    <external_variable comment="Do not display the password reveal button" datatype="string" id="oval:com.mcafee.oval:var:216385" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Use solid color for Start background" datatype="string" id="oval:com.mcafee.oval:var:216384" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off File History" datatype="string" id="oval:com.mcafee.oval:var:216383" version="2">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="ASP .NET State Service (aspnet_state) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:216316" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Microsoft .NET Service (clr_optimization_v2.0.50727_32) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:216315" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Power Users group to have access to ReinstallBackups?" datatype="string" id="oval:com.mcafee.oval:var:216265" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the ReinstallBackups folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:216264" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to spool\printers?" datatype="string" id="oval:com.mcafee.oval:var:216261" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the spool\printers folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:216260" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Should the service be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:215647" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service be enabeld or disabled?" datatype="int" id="oval:com.mcafee.oval:var:215573" version="1">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="What is the path for usr/bin subdirectory of the ftp account home directory ?" datatype="string" id="oval:com.mcafee.oval:var:215548" version="1" />
    <external_variable comment="What is the path for usr/lib subdirectory of the ftp account home directory ?" datatype="string" id="oval:com.mcafee.oval:var:215540" version="1" />
    <external_variable comment="What is the expected banner text ?" datatype="string" id="oval:com.mcafee.oval:var:215528" version="1" />
    <external_variable comment="Should the sticky bit be set ?" datatype="boolean" id="oval:com.mcafee.oval:var:215507" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the SGID be set ?" datatype="boolean" id="oval:com.mcafee.oval:var:215506" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the SUID be set ?" datatype="boolean" id="oval:com.mcafee.oval:var:215505" version="2">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="What is the path for incoming data directory of the ftp account home directory ?" datatype="string" id="oval:com.mcafee.oval:var:215492" version="1" />
    <external_variable comment="What is the path for pub subdirectory of the ftp account home directory ?" datatype="string" id="oval:com.mcafee.oval:var:215487" version="1" />
    <external_variable comment="What is the path for etc subdirectory of the ftp account home directory ?" datatype="string" id="oval:com.mcafee.oval:var:215486" version="1" />
    <external_variable comment="What is the path for lib subdirectory of the ftp account home directory ?" datatype="string" id="oval:com.mcafee.oval:var:215477" version="1" />
    <external_variable comment="What is the path for bin subdirectory of the ftp account home directory ?" datatype="string" id="oval:com.mcafee.oval:var:215472" version="1" />
    <external_variable comment="What is the FTP account home directory path ?" datatype="string" id="oval:com.mcafee.oval:var:215467" version="1" />
    <external_variable comment="What is the value (YES|NO) ?" datatype="string" id="oval:com.mcafee.oval:var:215454" version="1" />
    <external_variable comment="What is the value for SYSLOG_FAILED_LOGINS (0 or 1)?" datatype="int" id="oval:com.mcafee.oval:var:215397" version="1" />
    <external_variable comment="What is the value for SYSLOG (YES or NO)?" datatype="string" id="oval:com.mcafee.oval:var:215392" version="1" />
    <external_variable comment="Should the kernal stack protection log be Enabled or Disabled ?" datatype="int" id="oval:com.mcafee.oval:var:215339" version="2">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="What is the MINNONALPHA value?" datatype="int" id="oval:com.mcafee.oval:var:215331" version="2" />
    <external_variable comment="What is the MINALPHA value ?" datatype="int" id="oval:com.mcafee.oval:var:215298" version="1" />
    <external_variable comment="What is the value for passwords reuse - HISTORY ?" datatype="int" id="oval:com.mcafee.oval:var:215297" version="1" />
    <external_variable comment="What is the PASSREQ value (YES|NO) ?" datatype="string" id="oval:com.mcafee.oval:var:215296" version="1" />
    <external_variable comment="What is the umask value ?" datatype="string" id="oval:com.mcafee.oval:var:215295" version="1" />
    <external_variable comment="What's the TIMEOUT value to check?" datatype="int" id="oval:com.mcafee.oval:var:215294" version="2" />
    <external_variable comment="What is the DISABLETIME value (in seconds)?" datatype="int" id="oval:com.mcafee.oval:var:215282" version="1" />
    <external_variable comment="What is the account lockout threshold value - RETRIES ?" datatype="int" id="oval:com.mcafee.oval:var:215281" version="1" />
    <external_variable comment="What is the minimum password age (in weeks)?" datatype="int" id="oval:com.mcafee.oval:var:215280" version="2" />
    <external_variable comment="What is the maximum password age (in weeks)?" datatype="int" id="oval:com.mcafee.oval:var:215278" version="2" />
    <external_variable comment="This is the minimum version of McAfee SiteAdvisor Enterprise (Plus) software that should be on the system." datatype="version" id="oval:com.mcafee.oval:var:215162" version="2" />
    <external_variable comment="Do you expect the Users group to have access to Registration?" datatype="string" id="oval:com.mcafee.oval:var:214432" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Registration folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214431" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the NTMSData folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214429" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the ias folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214427" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the INTERACTIVE group to have access to systemdrive?" datatype="string" id="oval:com.mcafee.oval:var:214425" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to GroupPolicy?" datatype="string" id="oval:com.mcafee.oval:var:214424" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the CSC folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214423" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the $NtServicePackUninstall$ folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214421" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Resource Pro Kit folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214419" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Resource Kit folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214417" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to setup?" datatype="string" id="oval:com.mcafee.oval:var:214415" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the setup folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214414" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to DTCLog?" datatype="string" id="oval:com.mcafee.oval:var:214412" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the DTCLog folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214411" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to appmgmt?" datatype="string" id="oval:com.mcafee.oval:var:214409" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the appmgmt folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214408" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to debug?" datatype="string" id="oval:com.mcafee.oval:var:214406" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the debug folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214405" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to Program Files?" datatype="string" id="oval:com.mcafee.oval:var:214401" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Program Files folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214400" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to temp?" datatype="string" id="oval:com.mcafee.oval:var:214398" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the temp folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214397" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to temp?" datatype="string" id="oval:com.mcafee.oval:var:214395" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the temp folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214394" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Administrator folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214392" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to Default User?" datatype="string" id="oval:com.mcafee.oval:var:214390" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Default User folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214389" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to All Users?" datatype="string" id="oval:com.mcafee.oval:var:214387" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the All Users folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214386" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to Documents and Settings?" datatype="string" id="oval:com.mcafee.oval:var:214384" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Documents and Settings folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214383" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the ntbootdd.sys file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214381" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the msdos.sys file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214380" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the io.sys file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214379" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to ntldr?" datatype="string" id="oval:com.mcafee.oval:var:214378" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to ntldr?" datatype="string" id="oval:com.mcafee.oval:var:214377" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to ntldr?" datatype="string" id="oval:com.mcafee.oval:var:214376" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to ntdetect.com?" datatype="string" id="oval:com.mcafee.oval:var:214375" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to ntdetect.com?" datatype="string" id="oval:com.mcafee.oval:var:214374" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to ntdetect.com?" datatype="string" id="oval:com.mcafee.oval:var:214373" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to boot.ini?" datatype="string" id="oval:com.mcafee.oval:var:214372" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to boot.ini?" datatype="string" id="oval:com.mcafee.oval:var:214371" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to boot.ini?" datatype="string" id="oval:com.mcafee.oval:var:214370" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to config.sys?" datatype="string" id="oval:com.mcafee.oval:var:214369" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to config.sys?" datatype="string" id="oval:com.mcafee.oval:var:214368" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to config.sys?" datatype="string" id="oval:com.mcafee.oval:var:214367" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the config.sys file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214366" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to autoexec.bat?" datatype="string" id="oval:com.mcafee.oval:var:214365" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to autoexec.bat?" datatype="string" id="oval:com.mcafee.oval:var:214364" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to autoexec.bat?" datatype="string" id="oval:com.mcafee.oval:var:214363" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the autoexec.bat file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214362" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the dnsevent.evt file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214361" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the secevent.evt file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214360" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the ntldr file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214359" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the ntdetect.com file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214358" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the boot.ini file to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214357" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the dllcache folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214356" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the security folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214354" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the repair folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214352" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to config?" datatype="string" id="oval:com.mcafee.oval:var:214351" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to config?" datatype="string" id="oval:com.mcafee.oval:var:214350" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to config?" datatype="string" id="oval:com.mcafee.oval:var:214349" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the config folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214348" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to systemdrive?" datatype="string" id="oval:com.mcafee.oval:var:214346" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to systemdrive?" datatype="string" id="oval:com.mcafee.oval:var:214345" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to systemdrive?" datatype="string" id="oval:com.mcafee.oval:var:214344" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the systemdrive folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214343" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to drivers?" datatype="string" id="oval:com.mcafee.oval:var:214342" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to drivers?" datatype="string" id="oval:com.mcafee.oval:var:214341" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to drivers?" datatype="string" id="oval:com.mcafee.oval:var:214340" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the syswow64\drivers folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214339" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Authenticated Users group to have access to syswow64?" datatype="string" id="oval:com.mcafee.oval:var:214337" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Users group to have access to syswow64?" datatype="string" id="oval:com.mcafee.oval:var:214336" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the Everyone group to have access to syswow64?" datatype="string" id="oval:com.mcafee.oval:var:214335" version="2">
      <possible_value hint="Yes (This will return a fail result if the group does not have access.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the group does not have access.)">No</possible_value>
    </external_variable>
    <external_variable comment="Do you expect the syswow64 folder to exist on the machine?" datatype="string" id="oval:com.mcafee.oval:var:214334" version="2">
      <possible_value hint="Yes (This will return a fail result if the file does not exist.)">Yes</possible_value>
      <possible_value hint="No (This will return a pass result if the file does not exist.)">No</possible_value>
    </external_variable>
    <external_variable comment="Pipe delimited list of shares: (ex: share1|share2|share3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:213416" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Pipe delimited list of registry paths: (ex: path1|path2|path3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:213414" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Pipe delimited list of registry paths and subpaths: (ex: path1|path2|path3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:213404" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Ashampoo Anti-Malware minimum version" datatype="version" id="oval:com.mcafee.oval:var:213397" version="1" />
    <external_variable comment="Ashampoo Anti-Malware Dat Age" datatype="int" id="oval:com.mcafee.oval:var:213391" version="2">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:213262" version="0">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services" datatype="boolean" id="oval:com.mcafee.oval:var:213090" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network" datatype="boolean" id="oval:com.mcafee.oval:var:213089" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally" datatype="boolean" id="oval:com.mcafee.oval:var:213088" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job" datatype="boolean" id="oval:com.mcafee.oval:var:213087" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services" datatype="boolean" id="oval:com.mcafee.oval:var:212696" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network" datatype="boolean" id="oval:com.mcafee.oval:var:212695" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally" datatype="boolean" id="oval:com.mcafee.oval:var:212694" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job" datatype="boolean" id="oval:com.mcafee.oval:var:212693" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:211471" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:211470" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:211469" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:211468" version="0">
      <possible_value hint="Prompt for credentials">1</possible_value>
      <possible_value hint="Automatically deny elevation requests">0</possible_value>
    </external_variable>
    <external_variable comment="DHCP Client Service (Dhcp) Startup Type" datatype="int" id="oval:com.mcafee.oval:var:211155" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:210905" version="0">
      <possible_value hint="All drives">255</possible_value>
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
      <possible_value hint="CD-ROM and removable media drives">181</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Peer-to-Peer Networking Services" datatype="int" id="oval:com.mcafee.oval:var:210904" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled / Not Configured">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:210903" version="1">
      <possible_value hint="No membership">0</possible_value>
      <possible_value hint="Basic">1</possible_value>
      <possible_value hint="Advanced">2</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="int" id="oval:com.mcafee.oval:var:210902" version="3">
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">4294967295</possible_value>
    </external_variable>
    <external_variable comment="A boolean value that signifies whether passwords must be stored using reversible encryption" datatype="boolean" id="oval:com.mcafee.oval:var:210836" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Specifies, in seconds, the maximum allowable password age. A value of -1 indicates that the password never expires. The minimum valid value for this element is 86400 seconds (one day)." datatype="int" id="oval:com.mcafee.oval:var:210835" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Specifies the minimum number of seconds that can elapse between the time a password changes and when it can be changed again. A value of zero indicates that no delay is required between password updates." datatype="int" id="oval:com.mcafee.oval:var:210834" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Specifies the minimum allowable password length. Valid values for this element are zero through 14" datatype="int" id="oval:com.mcafee.oval:var:210833" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Specifies the number of passwords maintained in the password history. A new password cannot match any of the previous passwords in the password history. Valid values for this element are zero through 24." datatype="int" id="oval:com.mcafee.oval:var:210832" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="A boolean value that signifies whether passwords must meet the complexity requirements put forth by the operating system." datatype="boolean" id="oval:com.mcafee.oval:var:210831" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Administrator account status" datatype="boolean" id="oval:com.mcafee.oval:var:208487" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check can be example-a0" datatype="string" id="oval:com.mcafee.oval:var:208486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Should Others have EXECUTE access?" datatype="boolean" id="oval:com.mcafee.oval:var:207384" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access?" datatype="boolean" id="oval:com.mcafee.oval:var:207383" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access?" datatype="boolean" id="oval:com.mcafee.oval:var:207382" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access?" datatype="boolean" id="oval:com.mcafee.oval:var:207381" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access?" datatype="boolean" id="oval:com.mcafee.oval:var:207380" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have READ access?" datatype="boolean" id="oval:com.mcafee.oval:var:207379" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access?" datatype="boolean" id="oval:com.mcafee.oval:var:207378" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have WRITE access?" datatype="boolean" id="oval:com.mcafee.oval:var:207377" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have READ access?" datatype="boolean" id="oval:com.mcafee.oval:var:207376" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Set the appropirate retention time value for secure.log. Recommended value: 30" datatype="string" id="oval:com.mcafee.oval:var:207375" version="1" />
    <external_variable comment="Set the appropriate retention time value for system.log. Recommended value: 30" datatype="string" id="oval:com.mcafee.oval:var:207374" version="1" />
    <external_variable comment="Set the appropriate hostname/ IP of the time server to be verified." datatype="string" id="oval:com.mcafee.oval:var:207341" version="1" />
    <external_variable comment="Should the time synchronization be enable or disable?" datatype="string" id="oval:com.mcafee.oval:var:207340" version="1">
      <possible_value hint="Enable">YES</possible_value>
      <possible_value hint="Disable">NO</possible_value>
    </external_variable>
    <external_variable comment="Set the appropriate value for TraceEnabled. Recommended: Off" datatype="string" id="oval:com.mcafee.oval:var:207332" version="2">
      <possible_value hint="Enable">[Oo]n</possible_value>
      <possible_value hint="Disable">[Oo]ff</possible_value>
    </external_variable>
    <external_variable comment="Set the UserDir to 'Disabled' to stop the 'Sites' folders from being shared on the Web." datatype="string" id="oval:com.mcafee.oval:var:207331" version="1" />
    <external_variable comment="Set the ServerSignature as appropriate. Recommended value: Off" datatype="string" id="oval:com.mcafee.oval:var:207330" version="1">
      <possible_value hint="Enable">On</possible_value>
      <possible_value hint="Disable">Off</possible_value>
      <possible_value hint="To also include a mailto: link to the ServerAdmin">Email</possible_value>
    </external_variable>
    <external_variable comment="Set the ServerTokens as appropriate. Recommended Value: Prod" datatype="string" id="oval:com.mcafee.oval:var:207329" version="1">
      <possible_value hint="To limit info displayed to Server name">Prod</possible_value>
      <possible_value hint="To limit info displayed to Server name and Version">Min</possible_value>
      <possible_value hint="To limit info displayed to Server name, Version and OS">OS</possible_value>
      <possible_value hint="To display complete info">Full</possible_value>
    </external_variable>
    <external_variable comment="Set the appropriate value to client ntlmv2 authorization." datatype="string" id="oval:com.mcafee.oval:var:207315" version="1">
      <possible_value hint="Default: To allow an NTLM response">no</possible_value>
      <possible_value hint="Recommended: To allow only an NTLMv2 and LMv2 response">yes</possible_value>
    </external_variable>
    <external_variable comment="Set the appropirate to guest access." datatype="string" id="oval:com.mcafee.oval:var:207314" version="1">
      <possible_value hint="Default and Recommended: Do not allow guest access">no</possible_value>
      <possible_value hint="No password is required to connect to the service">yes</possible_value>
    </external_variable>
    <external_variable comment="Set the appropriate value to restrict anonymous connections" datatype="string" id="oval:com.mcafee.oval:var:207313" version="1">
      <possible_value hint="Default: Anyone can retrieve user and group list information">0</possible_value>
      <possible_value hint="Only an authenicated user can retrieve user and group list information">1</possible_value>
      <possible_value hint="Recommended: No anonymous connections are allowed at all">2</possible_value>
    </external_variable>
    <external_variable comment="Audit credential validation." datatype="string" id="oval:com.mcafee.oval:var:207302" version="2" />
    <external_variable comment="Audit kerberos ticket events." datatype="string" id="oval:com.mcafee.oval:var:207301" version="2" />
    <external_variable comment="Audit other account logon events." datatype="string" id="oval:com.mcafee.oval:var:207300" version="2" />
    <external_variable comment="Audit application group management." datatype="string" id="oval:com.mcafee.oval:var:207299" version="2" />
    <external_variable comment="Audit computer account management." datatype="string" id="oval:com.mcafee.oval:var:207298" version="2" />
    <external_variable comment="Audit distribution group management." datatype="string" id="oval:com.mcafee.oval:var:207297" version="2" />
    <external_variable comment="Audit other account management events." datatype="string" id="oval:com.mcafee.oval:var:207296" version="2" />
    <external_variable comment="Audit security group management." datatype="string" id="oval:com.mcafee.oval:var:207295" version="2" />
    <external_variable comment="Audit user account management." datatype="string" id="oval:com.mcafee.oval:var:207294" version="2" />
    <external_variable comment="Audit dpapi activity." datatype="string" id="oval:com.mcafee.oval:var:207293" version="2" />
    <external_variable comment="Audit process creation." datatype="string" id="oval:com.mcafee.oval:var:207292" version="2" />
    <external_variable comment="Audit process termination." datatype="string" id="oval:com.mcafee.oval:var:207291" version="2" />
    <external_variable comment="Audit RPC events." datatype="string" id="oval:com.mcafee.oval:var:207290" version="2" />
    <external_variable comment="Audit directory service access." datatype="string" id="oval:com.mcafee.oval:var:207289" version="2" />
    <external_variable comment="Audit directory service changes." datatype="string" id="oval:com.mcafee.oval:var:207288" version="2" />
    <external_variable comment="Audit directory service replication." datatype="string" id="oval:com.mcafee.oval:var:207287" version="2" />
    <external_variable comment="Audit detailed directory service replication." datatype="string" id="oval:com.mcafee.oval:var:207286" version="2" />
    <external_variable comment="Audit account lockout." datatype="string" id="oval:com.mcafee.oval:var:207285" version="2" />
    <external_variable comment="Audit ipsec extended mode." datatype="string" id="oval:com.mcafee.oval:var:207284" version="2" />
    <external_variable comment="Audit ipsec main mode." datatype="string" id="oval:com.mcafee.oval:var:207283" version="2" />
    <external_variable comment="Audit ipsec quick mode." datatype="string" id="oval:com.mcafee.oval:var:207282" version="2" />
    <external_variable comment="Audit logoff." datatype="string" id="oval:com.mcafee.oval:var:207281" version="2" />
    <external_variable comment="Audit logon." datatype="string" id="oval:com.mcafee.oval:var:207280" version="2" />
    <external_variable comment="Audit other logon and logoff events." datatype="string" id="oval:com.mcafee.oval:var:207279" version="2" />
    <external_variable comment="Audit special logons." datatype="string" id="oval:com.mcafee.oval:var:207278" version="2" />
    <external_variable comment="Audit application generated events." datatype="string" id="oval:com.mcafee.oval:var:207277" version="2" />
    <external_variable comment="Audit certification services." datatype="string" id="oval:com.mcafee.oval:var:207276" version="2" />
    <external_variable comment="Audit file share." datatype="string" id="oval:com.mcafee.oval:var:207275" version="2" />
    <external_variable comment="Audit file system." datatype="string" id="oval:com.mcafee.oval:var:207274" version="2" />
    <external_variable comment="Audit filtering platform connections." datatype="string" id="oval:com.mcafee.oval:var:207273" version="2" />
    <external_variable comment="Audit filtering platform packet drops." datatype="string" id="oval:com.mcafee.oval:var:207272" version="2" />
    <external_variable comment="Audit handle manipulation events." datatype="string" id="oval:com.mcafee.oval:var:207271" version="2" />
    <external_variable comment="Audit kernel object events." datatype="string" id="oval:com.mcafee.oval:var:207270" version="2" />
    <external_variable comment="Audit other object access events." datatype="string" id="oval:com.mcafee.oval:var:207269" version="2" />
    <external_variable comment="Audit registry events." datatype="string" id="oval:com.mcafee.oval:var:207268" version="2" />
    <external_variable comment="Audit SAM events." datatype="string" id="oval:com.mcafee.oval:var:207267" version="2" />
    <external_variable comment="Audit 'audit policy' changes." datatype="string" id="oval:com.mcafee.oval:var:207266" version="2" />
    <external_variable comment="Audit authentication policy changes." datatype="string" id="oval:com.mcafee.oval:var:207265" version="2" />
    <external_variable comment="Audit authorization policy changes." datatype="string" id="oval:com.mcafee.oval:var:207264" version="2" />
    <external_variable comment="Audit filtering platform policy changes." datatype="string" id="oval:com.mcafee.oval:var:207263" version="2" />
    <external_variable comment="Audit mpssvc rule level policy changes." datatype="string" id="oval:com.mcafee.oval:var:207262" version="2" />
    <external_variable comment="Audit other policy change events." datatype="string" id="oval:com.mcafee.oval:var:207261" version="2" />
    <external_variable comment="Audit non-sensitive privilege uses." datatype="string" id="oval:com.mcafee.oval:var:207260" version="2" />
    <external_variable comment="Audit other privilege use events." datatype="string" id="oval:com.mcafee.oval:var:207259" version="2" />
    <external_variable comment="Audit sensitive privilege uses." datatype="string" id="oval:com.mcafee.oval:var:207258" version="2" />
    <external_variable comment="Audit ipsec driver events." datatype="string" id="oval:com.mcafee.oval:var:207257" version="2" />
    <external_variable comment="Audit other system events." datatype="string" id="oval:com.mcafee.oval:var:207256" version="2" />
    <external_variable comment="Audit security state changes." datatype="string" id="oval:com.mcafee.oval:var:207255" version="2" />
    <external_variable comment="Audit security system extensions." datatype="string" id="oval:com.mcafee.oval:var:207254" version="2" />
    <external_variable comment="Audit system integrity events." datatype="string" id="oval:com.mcafee.oval:var:207253" version="2" />
    <external_variable comment="Should the Group have READ access?" datatype="boolean" id="oval:com.mcafee.oval:var:206882" version="1">
      <possible_value hint="Allowed">1</possible_value>
      <possible_value hint="Dis-allowed">0</possible_value>
    </external_variable>
    <external_variable comment="McAfee Site Advisor for Mac Minimum required product version" datatype="version" id="oval:com.mcafee.oval:var:206662" version="1" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check" datatype="int" id="oval:com.mcafee.oval:var:206656" version="0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do Not Allow Users to enable or Disable Add-Ons is disabled" datatype="string" id="oval:com.mcafee.oval:var:206630" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">Yes</possible_value>
      <possible_value hint="Disabled">No</possible_value>
    </external_variable>
    <external_variable comment="Do Not Allow Users to enable or Disable Add-Ons is disabled" datatype="string" id="oval:com.mcafee.oval:var:206624" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">Yes</possible_value>
      <possible_value hint="Disabled">No</possible_value>
    </external_variable>
    <external_variable comment="McAfee Internet Security for Mac Anti-malware Maximum DAT age in seconds" datatype="int" id="oval:com.mcafee.oval:var:206620" version="1">
      <possible_value hint="1 day (86400 seconds)">86400</possible_value>
      <possible_value hint="3 days (259200 seconds)">259200</possible_value>
      <possible_value hint="5 days (432000 seconds)">432000</possible_value>
      <possible_value hint="7 days (604800 seconds)">604800</possible_value>
      <possible_value hint="14 days (1209600 seconds)">1209600</possible_value>
      <possible_value hint="21 days (1814400 seconds)">1814400</possible_value>
      <possible_value hint="30 days (2592000 seconds)">2592000</possible_value>
      <possible_restriction hint="Custom: Enter a custom age in seconds">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="McAfee Internet Security for Mac Minimum required product version" datatype="version" id="oval:com.mcafee.oval:var:206612" version="1" />
    <external_variable comment="Do Not Allow Users to enable or Disable Add-Ons is disabled" datatype="int" id="oval:com.mcafee.oval:var:206605" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Should syslog-ng accept log messages from the network?" datatype="string" id="oval:com.mcafee.oval:var:206555" version="1">
      <possible_value hint="Enabled">udp</possible_value>
      <possible_value hint="Disabled">#udp</possible_value>
    </external_variable>
    <external_variable comment="Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DCOMMachineLaunchRestriction" datatype="int" id="oval:com.mcafee.oval:var:206064" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DCOMMachineAccessRestriction" datatype="int" id="oval:com.mcafee.oval:var:206059" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do Not Allow Users to enable or Disable Add-Ons is disabled" datatype="int" id="oval:com.mcafee.oval:var:206026" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Check for Server Certificate Revocation" datatype="int" id="oval:com.mcafee.oval:var:206021" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry policy processing" datatype="string" id="oval:com.mcafee.oval:var:206015" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Set the required number of lower case characters" datatype="int" id="oval:com.mcafee.oval:var:205984" version="1" />
    <external_variable comment="set the minimum number of digits required" datatype="int" id="oval:com.mcafee.oval:var:205983" version="1" />
    <external_variable comment="set the required number of days" datatype="int" id="oval:com.mcafee.oval:var:205982" version="1" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205966" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205965" version="3" />
    <external_variable comment="Registry Value Data: The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205964" version="2" />
    <external_variable comment="Registry Value Data: The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205963" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205962" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205961" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data: The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205960" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:205959" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:205958" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:205957" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:205956" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205955" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205954" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.oval:var:205953" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a token object The privilege to create an access token by calling NtCreateToken() or other token-creating APIs (SeCreateTokenPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205952" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Debug programs The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components (SeDebugPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205951" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:205950" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:205949" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205948" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205947" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205946" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205945" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Add workstations to domain The right to add a computer account to a specific domain (SeMachineAccountPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205944" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:205943" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205942" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205941" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205940" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:205939" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205938" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Synchronize directory service data The right to read all objects and properties in the directory, regardless of the protection on the objects and properties (SeSyncAgentPrivilege). It is required in order to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services." datatype="boolean" id="oval:com.mcafee.oval:var:205937" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205936" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205935" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205934" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205933" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Act as part of the operating system This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege. (SeTcbPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205932" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205931" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.oval:var:205930" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205929" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205928" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205927" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205926" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205925" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205924" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205923" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a Service Explicitly denies the right to log on using the service logon type (SeDenyServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205922" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:205921" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:205920" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:205919" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:205918" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205917" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205916" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.oval:var:205915" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a token object The privilege to create an access token by calling NtCreateToken() or other token-creating APIs (SeCreateTokenPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205914" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Debug programs The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components (SeDebugPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205913" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:205912" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:205911" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205910" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205909" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205908" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205907" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Add workstations to domain The right to add a computer account to a specific domain (SeMachineAccountPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205906" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:205905" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205904" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205903" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205902" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:205901" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205900" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Synchronize directory service data The right to read all objects and properties in the directory, regardless of the protection on the objects and properties (SeSyncAgentPrivilege). It is required in order to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services." datatype="boolean" id="oval:com.mcafee.oval:var:205899" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205898" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205897" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205896" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205895" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Act as part of the operating system This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege. (SeTcbPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205894" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205893" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.oval:var:205892" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205891" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205890" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205889" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205888" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205887" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205886" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205885" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a Service Explicitly denies the right to log on using the service logon type (SeDenyServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205884" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:205883" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:205882" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:205881" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:205880" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205879" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205878" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.oval:var:205877" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a token object The privilege to create an access token by calling NtCreateToken() or other token-creating APIs (SeCreateTokenPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205876" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Debug programs The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components (SeDebugPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205875" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:205874" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:205873" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205872" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205871" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205870" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205869" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Add workstations to domain The right to add a computer account to a specific domain (SeMachineAccountPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205868" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:205867" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205866" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205865" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205864" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:205863" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205862" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Synchronize directory service data The right to read all objects and properties in the directory, regardless of the protection on the objects and properties (SeSyncAgentPrivilege). It is required in order to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services." datatype="boolean" id="oval:com.mcafee.oval:var:205861" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205860" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205859" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205858" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205857" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Act as part of the operating system This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege. (SeTcbPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205856" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205855" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.oval:var:205854" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205853" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205852" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205851" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205850" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205849" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205848" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205847" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a Service Explicitly denies the right to log on using the service logon type (SeDenyServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205846" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:205845" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:205844" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:205843" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:205842" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205841" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205840" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.oval:var:205839" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a token object The privilege to create an access token by calling NtCreateToken() or other token-creating APIs (SeCreateTokenPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205838" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Debug programs The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components (SeDebugPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205837" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:205836" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:205835" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205834" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205833" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205832" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205831" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Add workstations to domain The right to add a computer account to a specific domain (SeMachineAccountPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205830" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:205829" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205828" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205827" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205826" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:205825" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205824" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Synchronize directory service data The right to read all objects and properties in the directory, regardless of the protection on the objects and properties (SeSyncAgentPrivilege). It is required in order to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services." datatype="boolean" id="oval:com.mcafee.oval:var:205823" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205822" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205821" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205820" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205819" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Act as part of the operating system This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege. (SeTcbPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205818" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205817" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The right to read unsolicited data from a terminal device (SeUnsolicitedInputPrivilege). This user right is not exposed in the Windows Local Security Policy or Group Policy MMC snap-ins. As such, there is no mapping to a UI setting." datatype="boolean" id="oval:com.mcafee.oval:var:205816" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.oval:var:205815" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205814" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205813" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205812" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205811" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205810" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205809" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205808" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a Service Explicitly denies the right to log on using the service logon type (SeDenyServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205807" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:205806" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:205805" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:205804" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:205803" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205802" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205801" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.oval:var:205800" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a token object The privilege to create an access token by calling NtCreateToken() or other token-creating APIs (SeCreateTokenPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205799" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Debug programs The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components (SeDebugPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205798" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:205797" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:205796" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205795" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205794" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205793" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205792" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Add workstations to domain The right to add a computer account to a specific domain (SeMachineAccountPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205791" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:205790" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205789" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205788" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205787" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:205786" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205785" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Synchronize directory service data The right to read all objects and properties in the directory, regardless of the protection on the objects and properties (SeSyncAgentPrivilege). It is required in order to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services." datatype="boolean" id="oval:com.mcafee.oval:var:205784" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205783" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205782" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205781" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205780" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Act as part of the operating system This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege. (SeTcbPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205779" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205778" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.oval:var:205777" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205776" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network: The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205775" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205774" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205773" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205772" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205771" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205770" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a Service Explicitly denies the right to log on using the service logon type (SeDenyServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205769" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:205768" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:205767" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:205766" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:205765" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205764" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205763" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.oval:var:205762" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a token object The privilege to create an access token by calling NtCreateToken() or other token-creating APIs (SeCreateTokenPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205761" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Debug programs The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components (SeDebugPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205760" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:205759" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:205758" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205757" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205756" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205755" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205754" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Add workstations to domain The right to add a computer account to a specific domain (SeMachineAccountPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205753" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:205752" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205751" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205750" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205749" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:205748" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205747" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Synchronize directory service data The right to read all objects and properties in the directory, regardless of the protection on the objects and properties (SeSyncAgentPrivilege). It is required in order to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services." datatype="boolean" id="oval:com.mcafee.oval:var:205746" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205745" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205744" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205743" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205742" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Act as part of the operating system This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege. (SeTcbPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205741" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205740" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.oval:var:205739" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205738" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205737" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205736" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205735" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205734" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205733" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205732" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a Service Explicitly denies the right to log on using the service logon type (SeDenyServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205731" version="5">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:205730" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits: The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:205729" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directorie The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:205728" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:205727" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects: The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205726" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile: The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205725" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects: The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.oval:var:205724" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a token object: The privilege to create an access token by calling NtCreateToken() or other token-creating APIs (SeCreateTokenPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205723" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Debug programs: The privilege to attach a debugger to any process. It provides access to sensitive and critical operating system components (SeDebugPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205722" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation: The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:205721" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication: The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:205720" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205719" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205718" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205717" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205716" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Add workstations to domain The right to add a computer account to a specific domain (SeMachineAccountPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205715" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:205714" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205713" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205712" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205711" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:205710" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system: The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205709" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Synchronize directory service data: The right to read all objects and properties in the directory, regardless of the protection on the objects and properties (SeSyncAgentPrivilege). It is required in order to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services." datatype="boolean" id="oval:com.mcafee.oval:var:205708" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values: The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205707" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance: The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205706" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time: The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205705" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects: The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205704" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Act as part of the operating system: This privilege identifies its holder as part of the trusted computer base. Some trusted protected subsystems are granted this privilege. (SeTcbPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205703" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:205702" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.oval:var:205701" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally: The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205700" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205699" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205698" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a batch job Explicitly denies the right to log on using the batch logon type (SeDenyBatchLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205697" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon locally Explicitly denies the right to log on using the interactive logon type (SeDenyInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205696" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205695" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205694" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon as a Service Explicitly denies the right to log on using the service logon type (SeDenyServiceLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:205693" version="6">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205692" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205691" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205690" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205689" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205688" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205687" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205686" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205685" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205684" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205683" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205682" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205681" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205680" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205679" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:205678" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Network access: Allow anonymous SID-Name translation" datatype="string" id="oval:com.mcafee.oval:var:205677" version="1" />
    <external_variable comment="Audit system integrity events." datatype="string" id="oval:com.mcafee.oval:var:204019" version="3" />
    <external_variable comment="Audit security system extensions." datatype="string" id="oval:com.mcafee.oval:var:204018" version="3" />
    <external_variable comment="Audit dpapi activity." datatype="string" id="oval:com.mcafee.oval:var:204017" version="3" />
    <external_variable comment="Write access to NFS shares should be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:203979" version="1">
      <possible_value hint="Enabled">(ro|rw)</possible_value>
      <possible_value hint="Disabled">ro</possible_value>
    </external_variable>
    <external_variable comment="Audit credential validation." datatype="string" id="oval:com.mcafee.oval:var:203966" version="2" />
    <external_variable comment="Audit kerberos ticket events." datatype="string" id="oval:com.mcafee.oval:var:203965" version="2" />
    <external_variable comment="Audit other account logon events." datatype="string" id="oval:com.mcafee.oval:var:203964" version="2" />
    <external_variable comment="Audit application group management." datatype="string" id="oval:com.mcafee.oval:var:203963" version="2" />
    <external_variable comment="Audit distribution group management." datatype="string" id="oval:com.mcafee.oval:var:203962" version="2" />
    <external_variable comment="Audit other account management events." datatype="string" id="oval:com.mcafee.oval:var:203961" version="2" />
    <external_variable comment="Audit security group management." datatype="string" id="oval:com.mcafee.oval:var:203960" version="2" />
    <external_variable comment="Audit user account management." datatype="string" id="oval:com.mcafee.oval:var:203959" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203958" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Audit process creation." datatype="string" id="oval:com.mcafee.oval:var:203957" version="2" />
    <external_variable comment="Audit process termination." datatype="string" id="oval:com.mcafee.oval:var:203956" version="2" />
    <external_variable comment="Audit RPC events." datatype="string" id="oval:com.mcafee.oval:var:203955" version="2" />
    <external_variable comment="Audit directory service access." datatype="string" id="oval:com.mcafee.oval:var:203954" version="2" />
    <external_variable comment="Audit directory service changes." datatype="string" id="oval:com.mcafee.oval:var:203953" version="2" />
    <external_variable comment="Audit directory service replication." datatype="string" id="oval:com.mcafee.oval:var:203952" version="2" />
    <external_variable comment="Audit detailed directory service replication." datatype="string" id="oval:com.mcafee.oval:var:203951" version="2" />
    <external_variable comment="Audit account lockout." datatype="string" id="oval:com.mcafee.oval:var:203950" version="2" />
    <external_variable comment="Audit ipsec extended mode." datatype="string" id="oval:com.mcafee.oval:var:203949" version="2" />
    <external_variable comment="Audit ipsec main mode." datatype="string" id="oval:com.mcafee.oval:var:203948" version="2" />
    <external_variable comment="Audit ipsec quick mode." datatype="string" id="oval:com.mcafee.oval:var:203947" version="2" />
    <external_variable comment="Audit logoff." datatype="string" id="oval:com.mcafee.oval:var:203946" version="2" />
    <external_variable comment="Audit logon." datatype="string" id="oval:com.mcafee.oval:var:203945" version="2" />
    <external_variable comment="Audit other logon and logoff events." datatype="string" id="oval:com.mcafee.oval:var:203944" version="2" />
    <external_variable comment="Audit special logons." datatype="string" id="oval:com.mcafee.oval:var:203943" version="2" />
    <external_variable comment="Audit application generated events." datatype="string" id="oval:com.mcafee.oval:var:203942" version="2" />
    <external_variable comment="Audit certification services." datatype="string" id="oval:com.mcafee.oval:var:203941" version="2" />
    <external_variable comment="Audit file share." datatype="string" id="oval:com.mcafee.oval:var:203940" version="2" />
    <external_variable comment="Audit file system." datatype="string" id="oval:com.mcafee.oval:var:203939" version="2" />
    <external_variable comment="Audit filtering platform connections." datatype="string" id="oval:com.mcafee.oval:var:203938" version="2" />
    <external_variable comment="Audit filtering platform packet drops." datatype="string" id="oval:com.mcafee.oval:var:203937" version="2" />
    <external_variable comment="Audit handle manipulation events." datatype="string" id="oval:com.mcafee.oval:var:203936" version="2" />
    <external_variable comment="Audit kernel object events." datatype="string" id="oval:com.mcafee.oval:var:203935" version="2" />
    <external_variable comment="Audit other object access events." datatype="string" id="oval:com.mcafee.oval:var:203934" version="2" />
    <external_variable comment="Audit registry events." datatype="string" id="oval:com.mcafee.oval:var:203933" version="2" />
    <external_variable comment="Audit SAM events." datatype="string" id="oval:com.mcafee.oval:var:203932" version="2" />
    <external_variable comment="Audit 'audit policy' changes." datatype="string" id="oval:com.mcafee.oval:var:203931" version="2" />
    <external_variable comment="Audit authentication policy changes." datatype="string" id="oval:com.mcafee.oval:var:203930" version="2" />
    <external_variable comment="Audit authorization policy changes." datatype="string" id="oval:com.mcafee.oval:var:203929" version="2" />
    <external_variable comment="Audit filtering platform policy changes." datatype="string" id="oval:com.mcafee.oval:var:203928" version="2" />
    <external_variable comment="Audit mpssvc rule level policy changes." datatype="string" id="oval:com.mcafee.oval:var:203927" version="2" />
    <external_variable comment="Audit other policy change events." datatype="string" id="oval:com.mcafee.oval:var:203926" version="2" />
    <external_variable comment="Audit non-sensitive privilege uses." datatype="string" id="oval:com.mcafee.oval:var:203925" version="2" />
    <external_variable comment="Audit other privilege use events." datatype="string" id="oval:com.mcafee.oval:var:203924" version="2" />
    <external_variable comment="Audit sensitive privilege uses." datatype="string" id="oval:com.mcafee.oval:var:203923" version="2" />
    <external_variable comment="Audit ipsec driver events." datatype="string" id="oval:com.mcafee.oval:var:203922" version="2" />
    <external_variable comment="Audit other system events." datatype="string" id="oval:com.mcafee.oval:var:203921" version="2" />
    <external_variable comment="Audit security state changes." datatype="string" id="oval:com.mcafee.oval:var:203920" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203919" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203918" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203917" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203916" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203915" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203914" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203913" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203912" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203911" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203910" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203909" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203908" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203907" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203906" version="2">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203905" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203904" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203903" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203902" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203901" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203900" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203899" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203898" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203897" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203896" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203895" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203894" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203893" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203892" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203891" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203890" version="3" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203889" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203888" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203887" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203886" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203885" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203884" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203883" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203882" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203881" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203880" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203879" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203878" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203877" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203876" version="2" />
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203875" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203874" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203873" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203872" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203871" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203870" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203869" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Registry Value Data The expected registry value's data for the registry key(s) specified in the check." datatype="string" id="oval:com.mcafee.oval:var:203868" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201620" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201619" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201618" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201617" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201616" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Log on as a batch job: The right to log on using the batch logon type (SeBatchLogonRight )." datatype="boolean" id="oval:com.mcafee.oval:var:201615" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201614" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201613" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201609" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201608" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201607" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201606" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:201605" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201604" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201603" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201602" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:201601" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201600" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201599" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201598" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201597" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:201596" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:201595" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201594" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:201593" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:201592" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:201591" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token- The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:201590" version="4">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Replace a process-level token The right to replace the access token that is associated with a child process. (SeAssignPrimaryTokenPrivilege)" datatype="boolean" id="oval:com.mcafee.oval:var:201543" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Generate security audits The right to generate audit records in the security log (SeAuditPrivilege). The security log can be used to trace unauthorized system access." datatype="boolean" id="oval:com.mcafee.oval:var:201542" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Back up files and directories The right to circumvent file and directory permissions to back up the system (SeBackupPrivilege). The privilege is selected only when an application attempts access by using the NTFS backup application programming interface (API). Otherwise, normal file and directory permissions apply." datatype="boolean" id="oval:com.mcafee.oval:var:201541" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Bypass traverse checking The right to pass through folders to which the user otherwise has no access (Bypass Traverse Checking) while navigating an object path in the NTFS file system or in the registry (SeChangeNotifyPrivilege). This privilege does not allow the user to list the contents of a folder, it allows the user only to traverse its directories." datatype="boolean" id="oval:com.mcafee.oval:var:201540" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create global objects The right to create named file mapping objects in the global namespace during Terminal Services sessions (SeCreateGlobalPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201539" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create a pagefile The right to create and change the size of a pagefile (SeCreatePagefilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201538" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Create permanent shared objects The privilege to create a directory object in the object manager (SeCreatePermanentPrivilege). It is useful to kernel-mode components that extend the object namespace. Components that are running in kernel mode have this privilege inherently." datatype="boolean" id="oval:com.mcafee.oval:var:201537" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Enable computer and user accounts to be trusted for delegation The privilege to change the Trusted for Delegation setting on a user or computer object in Active Directory (SeEnableDelegationPrivilege). The user or computer that is granted this privilege must also have write access to the account control flags on the object." datatype="boolean" id="oval:com.mcafee.oval:var:201536" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Impersonate a client after authentication The privilege to impersonate a client after authentication (SeImpersonatePrivilege). This value is supported starting with Windows Server 2003, Windows XP SP2, and Windows 2000 SP4." datatype="boolean" id="oval:com.mcafee.oval:var:201535" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Increase scheduling priority The right to increase the base priority class of a process (SeIncreaseBasePriorityPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201534" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Adjust memory quotas for a process The right to increase the processor quota assigned to a process (SeIncreaseQuotaPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201533" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Load and unload device drivers The right to install and remove drivers for Plug and Play devices (SeLoadDriverPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201532" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Lock pages in memory The right to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk (SeLockMemoryPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201531" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage the files on a volume The right to manage volumes or disks (SeManageVolumePrivileges)." datatype="boolean" id="oval:com.mcafee.oval:var:201530" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile single process The right to sample the performance of an application process (SeProfileSingleProcessPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201529" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Force shutdown from a remote system The right to shut down a computer from a remote location on the network (SeRemoteShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201528" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Restore files and directories The right to circumvent file and directory permissions when restoring backed-up files and directories and to set any valid user or group as the owner of an object (SeRestorePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201527" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Manage auditing and security log The right to specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys (SeSecurityPrivilege). A user who has this privilege can also view and clear the security log from Event Viewer." datatype="boolean" id="oval:com.mcafee.oval:var:201526" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Shut down the system The right to shut down the local computer (SeShutdownPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201525" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Modify firmware environment values The right to modify system environment variables either by a process through an API or by a user through System Properties (SeSystemEnvironmentPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201524" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Profile system performance The right to sample the performance of system processes (SeSystemProfilePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201523" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Change the system time The right to adjust the time on the computer's internal clock. It is not required to change the time zone or other display characteristics of the system time (SeSystemtimePrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201522" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Take ownership of files or other objects The right to take ownership of an object without being granted discretionary access, including Active Directory objects, NTFS files and folders, printers, registry keys, services, processes, and threads (SeTakeOwnershipPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201521" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Remove computer from docking station The right to undock a portable computer by clicking Eject PC on the Start menu.(SeUndockPrivilege)." datatype="boolean" id="oval:com.mcafee.oval:var:201520" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Log on locally The right to log on using the interactive logon type (SeInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201519" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Access this computer from the network The right to log on using the network logon type (SeNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201518" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Allow logon through Terminal Services The right to log on to the computer by using a Remote Desktop connection (SeRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201517" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny access to this computer from the network Explicitly denies the right to log on using the network logon type (SeDenyNetworkLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201516" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Deny logon through Terminal Services Explicitly denies the right to log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)." datatype="boolean" id="oval:com.mcafee.oval:var:201515" version="3">
      <possible_value hint="true">true</possible_value>
      <possible_value hint="false">false</possible_value>
    </external_variable>
    <external_variable comment="Audit account logon events This security setting determines whether to audit each instance of a user logging on to or logging off from another computer in which this computer is used to validate the account." datatype="string" id="oval:com.mcafee.oval:var:201486" version="5" />
    <external_variable comment="Audit account management This security setting determines whether to audit each event of account management on a computer. Examples of account management events include: A user account or group is created, changed, or deleted. A user account is renamed, disabled, or enabled. A password is set or changed." datatype="string" id="oval:com.mcafee.oval:var:201485" version="5" />
    <external_variable comment="Audit process tracking This security setting determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access." datatype="string" id="oval:com.mcafee.oval:var:201484" version="5" />
    <external_variable comment="Should Empty Passwords be allowed?" datatype="string" id="oval:com.mcafee.oval:var:200804010680" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should Root Login be allowed?" datatype="string" id="oval:com.mcafee.oval:var:200804010677" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should RHosts RSA Authentication be enabled?" datatype="string" id="oval:com.mcafee.oval:var:200804010674" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should RHosts Authentication be enabled?" datatype="string" id="oval:com.mcafee.oval:var:200804010671" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should Ignore Rhosts be enabled?" datatype="string" id="oval:com.mcafee.oval:var:200804010668" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Should X11 Forwarding be enabled?" datatype="string" id="oval:com.mcafee.oval:var:200804010665" version="1">
      <possible_value hint="Enable">yes</possible_value>
      <possible_value hint="Disable">no</possible_value>
    </external_variable>
    <external_variable comment="Maximum allowed content length" datatype="string" id="oval:com.mcafee.oval:var:1423361" version="1" />
    <external_variable comment="Enter the file path for web.config for required site" datatype="string" id="oval:com.mcafee.oval:var:1416716" version="1" />
    <external_variable comment="Allow high-bit characters" datatype="string" id="oval:com.mcafee.oval:var:1416715" version="1">
      <possible_value hint="Enabled">true</possible_value>
      <possible_value hint="Disabled">false</possible_value>
    </external_variable>
    <external_variable comment="Enter the file path for web.config for required site" datatype="string" id="oval:com.mcafee.oval:var:1416702" version="1" />
    <external_variable comment="Maximum query string" datatype="string" id="oval:com.mcafee.oval:var:1416701" version="1" />
    <external_variable comment="Enter the file path for web.config for required site" datatype="string" id="oval:com.mcafee.oval:var:1416690" version="1" />
    <external_variable comment="Maximum URL length" datatype="string" id="oval:com.mcafee.oval:var:1416689" version="1" />
    <external_variable comment="Enter the file path for web.config for required site" datatype="string" id="oval:com.mcafee.oval:var:1416677" version="1" />
    <external_variable comment="Maximum allowed content length" datatype="string" id="oval:com.mcafee.oval:var:1416666" version="1" />
    <external_variable comment="What is the path for any user defined directory ?" datatype="string" id="oval:com.mcafee.oval:var:1416414" version="1" />
    <external_variable comment="Enter the version of the package to be verified (ex: 1.4.21)" datatype="string" id="oval:com.mcafee.oval:var:1416248" version="1" />
    <external_variable comment="Enter the name of the package to be verified (ex: iptables)" datatype="string" id="oval:com.mcafee.oval:var:1416247" version="1" />
    <external_variable comment="Rusersd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:1416246" version="1">
      <possible_value hint="Enabled">rusersd</possible_value>
      <possible_value hint="Disabled">#rusersd</possible_value>
    </external_variable>
    <external_variable comment="Rstatd service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:1416245" version="1">
      <possible_value hint="Enabled">rstatd</possible_value>
      <possible_value hint="Disabled">#rstatd</possible_value>
    </external_variable>
    <external_variable comment="Enter the desired snmp version." datatype="version" id="oval:com.mcafee.oval:var:1416243" version="1" />
    <external_variable comment="Squid3 GUID should be set to which group?" datatype="string" id="oval:com.mcafee.oval:var:1416242" version="1" />
    <external_variable comment="squid3 EUID should be set to which user?" datatype="string" id="oval:com.mcafee.oval:var:1416241" version="1" />
    <external_variable comment="Expected OS release? It should be in regex format. ^3\.16\.0\-4\-686\-pae$" datatype="string" id="oval:com.mcafee.oval:var:1416240" version="1" />
    <external_variable comment="Enter the name of the RPM packages to be verified." datatype="string" id="oval:com.mcafee.oval:var:1416220" version="1" />
    <external_variable comment="Enter authorized user name for schedule jobs via cron:" datatype="string" id="oval:com.mcafee.oval:var:1416213" version="1" />
    <external_variable comment="Enter authorized user name for schedule jobs via at:" datatype="string" id="oval:com.mcafee.oval:var:1416212" version="1" />
    <external_variable comment="Enter NFS export secure option?" datatype="string" id="oval:com.mcafee.oval:var:1416211" version="1">
      <possible_value hint="UNIX authentication">sys</possible_value>
      <possible_value hint="DES authentication">dh</possible_value>
      <possible_value hint="Use the anonymous ID if it has a value other than -1">none</possible_value>
      <possible_value hint="Kerberos. Authentication only">krb5</possible_value>
      <possible_value hint="Kerberos. Authentication and integrity">krb5i</possible_value>
      <possible_value hint="Authentication, integrity, and privacy">krb5p</possible_value>
    </external_variable>
    <external_variable comment="SSH LogLevel should be?" datatype="string" id="oval:com.mcafee.oval:var:1416210" version="1" />
    <external_variable comment="imap2 service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:1416195" version="1">
      <possible_value hint="Enabled">imap2</possible_value>
      <possible_value hint="Disabled">#imap2</possible_value>
    </external_variable>
    <external_variable comment="How many special character must a password contain?" datatype="int" id="oval:com.mcafee.oval:var:1416193" version="1">
      <possible_restriction hint="Must be between 0 and PW_PASSLEN">
        <restriction operation="greater than or equal">1</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="How many digit must a password contain?" datatype="int" id="oval:com.mcafee.oval:var:1416192" version="1">
      <possible_restriction hint="Must be between 0 and PW_PASSLEN">
        <restriction operation="greater than or equal">1</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="How many upper case alpha character must a password contain?" datatype="int" id="oval:com.mcafee.oval:var:1416191" version="1">
      <possible_restriction hint="Must be between 0 and PW_PASSLEN">
        <restriction operation="greater than or equal">1</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="How many lower case alpha character must a password contain?" datatype="int" id="oval:com.mcafee.oval:var:1416190" version="1">
      <possible_restriction hint="Must be between 0 and PW_PASSLEN">
        <restriction operation="greater than or equal">1</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Should the service Login on Serial Ports be enabled or disabled ?" datatype="string" id="oval:com.mcafee.oval:var:1416175" version="1">
      <possible_value hint="Enable">ONLINE</possible_value>
      <possible_value hint="Disable">DISABLED</possible_value>
    </external_variable>
    <external_variable comment="Should the service be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:1416166" version="1">
      <possible_value hint="Enable">enable</possible_value>
      <possible_value hint="Disable">disable</possible_value>
    </external_variable>
    <external_variable comment="Block launching Windows Store apps with Windows Runtime API access from hosted content" datatype="int" id="oval:com.mcafee.oval:var:1415870" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow a Windows app to share application data between users" datatype="int" id="oval:com.mcafee.oval:var:1415862" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Enable Windows NTP Server" datatype="int" id="oval:com.mcafee.oval:var:1415854" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Enable Windows NTP Client" datatype="int" id="oval:com.mcafee.oval:var:1415840" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Untrusted Font Blocking" datatype="int" id="oval:com.mcafee.oval:var:1415832" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Block untrusted fonts and log events">1000000000000</possible_value>
      <possible_value hint="Do not block untrusted fonts">2000000000000</possible_value>
      <possible_value hint="Log events without blocking untrusted fonts">3000000000000</possible_value>
    </external_variable>
    <external_variable comment="Prevent installation of devices that match any of these device ID" datatype="int" id="oval:com.mcafee.oval:var:1415824" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Support device authentication using certificate" datatype="int" id="oval:com.mcafee.oval:var:1415802" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Automatic">0</possible_value>
      <possible_value hint="Force">1</possible_value>
    </external_variable>
    <external_variable comment="Also apply to matching devices that are already installed" datatype="int" id="oval:com.mcafee.oval:var:1415794" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
    </external_variable>
    <external_variable comment="Prevent installation of devices that match any of these device IDs" datatype="int" id="oval:com.mcafee.oval:var:1415786" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow Windows to automatically connect to suggested open hotspots" datatype="int" id="oval:com.mcafee.oval:var:1415778" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Password Age" datatype="int" id="oval:com.mcafee.oval:var:1415769" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 365">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">365</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Password Length" datatype="int" id="oval:com.mcafee.oval:var:1415761" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 8 to 64">
        <restriction operation="greater than or equal">8</restriction>
        <restriction operation="less than or equal">64</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Password Complexity" datatype="int" id="oval:com.mcafee.oval:var:1415752" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Large letters + small letters + numbers + special characters">4</possible_value>
      <possible_value hint="Large letters + small letters + numbers">3</possible_value>
      <possible_value hint="Large letters + small letters">2</possible_value>
      <possible_value hint="Large letters">1</possible_value>
    </external_variable>
    <external_variable comment="Enable Local Admin Password Management" datatype="int" id="oval:com.mcafee.oval:var:1415744" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Do not allow password expiration time longer than required by policy" datatype="int" id="oval:com.mcafee.oval:var:1415736" version="1">
      <possible_value hint="Not Configured/Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="LAPS tool installed" datatype="string" id="oval:com.mcafee.oval:var:1415726" version="1">
      <possible_value hint="LAPS Installed">Installed</possible_value>
      <possible_value hint=" LAPS Not Installed">Not Installed</possible_value>
    </external_variable>
    <external_variable comment="Allow Input Personalization" datatype="int" id="oval:com.mcafee.oval:var:1415722" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prevent changing screen saver" datatype="int" id="oval:com.mcafee.oval:var:1414147" version="2">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Automatic Download of updates" datatype="string" id="oval:com.mcafee.oval:var:1414137" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Allow the use of biometrics" datatype="int" id="oval:com.mcafee.oval:var:1413934" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Do not display the password reveal button" datatype="int" id="oval:com.mcafee.oval:var:1413924" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Access Credential Manager as a trusted caller (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:1413886" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Removable Data Drives: Require use of smart cards on removable data drives" datatype="string" id="oval:com.mcafee.oval:var:1413868" version="1">
      <possible_value hint="True">Enabled</possible_value>
      <possible_value hint="False">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Removable Data Drives: Configure use of smart cards on removable data drives" datatype="string" id="oval:com.mcafee.oval:var:1413862" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Validate smart card certificate usage rule compliance" datatype="string" id="oval:com.mcafee.oval:var:1413161" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enter the object identifier (OID)">
        <restriction operation="greater than">" "</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Do not allow write access to devices configured in another organization" datatype="int" id="oval:com.mcafee.oval:var:1413154" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Deny write access to removable drives not protected by BitLocker" datatype="int" id="oval:com.mcafee.oval:var:1413144" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Require use of smart cards on removable data drives" datatype="int" id="oval:com.mcafee.oval:var:1413134" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Configure use of smart cards on removable data drives" datatype="int" id="oval:com.mcafee.oval:var:1413123" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Disallow standard users from changing the PIN or password" datatype="int" id="oval:com.mcafee.oval:var:1413113" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Use enhanced Boot Configuration Data validation profile" datatype="int" id="oval:com.mcafee.oval:var:1413103" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Power Management (On Battery) - Turn Off the Display (seconds)" datatype="int" id="oval:com.mcafee.oval:var:1413092" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Value should be greater than 0">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Power Management (Plugged In) - Turn Off the Display (seconds)" datatype="int" id="oval:com.mcafee.oval:var:1413083" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Value should be greater than 0">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Configure Screen saver timeout" datatype="int" id="oval:com.mcafee.oval:var:1413035" version="1">
      <possible_value hint="Not Configured / Disabled">0</possible_value>
      <possible_restriction hint="Enabled: Range is 1 to 86400">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">86400</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Remove the Security tab from File Explorer" datatype="int" id="oval:com.mcafee.oval:var:1413021" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Remove CD Burning features" datatype="int" id="oval:com.mcafee.oval:var:1413013" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prevent Codec Download" datatype="int" id="oval:com.mcafee.oval:var:1413005" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="User Configuration: Disable regedit from running silently" datatype="int" id="oval:com.mcafee.oval:var:1412995" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Yes">2</possible_value>
      <possible_value hint="No">1</possible_value>
    </external_variable>
    <external_variable comment="Windows Components: Turn off Windows Location Provider" datatype="int" id="oval:com.mcafee.oval:var:1412986" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Windows Components: Turn off the Store application" datatype="int" id="oval:com.mcafee.oval:var:1412975" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="BitLocker Drive Encryption: Provide the unique identifiers for your organization" datatype="int" id="oval:com.mcafee.oval:var:1412966" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Choose default folder for recovery password" datatype="string" id="oval:com.mcafee.oval:var:1412954" version="1">
      <possible_value hint="Not Configured / Disabled">Disabled</possible_value>
      <possible_restriction hint="Enabled: Specify default folder path (non-null path)">
        <restriction operation="greater than">" "</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="BitLocker Drive Encryption: Prevent memory overwrite on restart" datatype="int" id="oval:com.mcafee.oval:var:1412948" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Removable Data Drives: Control use of BitLocker on removable drives" datatype="int" id="oval:com.mcafee.oval:var:1412937" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Operating System Drives: Configure TPM platform validation profile for native UEFI firmware configurations" datatype="int" id="oval:com.mcafee.oval:var:1412927" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Operating System Drives: Configure TPM platform validation profile for BIOS-based firmware configurations" datatype="int" id="oval:com.mcafee.oval:var:1412916" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Prevent installation of devices using drivers that match these device setup classes" datatype="int" id="oval:com.mcafee.oval:var:1411872" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Boot-Start Driver Initialization Policy" datatype="int" id="oval:com.mcafee.oval:var:1411864" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Good only">8</possible_value>
      <possible_value hint="Good and unknown">1</possible_value>
      <possible_value hint="Good, unknown and bad but critical">3</possible_value>
      <possible_value hint="All">7</possible_value>
    </external_variable>
    <external_variable comment="Restrict Unauthenticated RPC clients" datatype="int" id="oval:com.mcafee.oval:var:1411856" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="None">0</possible_value>
      <possible_value hint="Authenticated">1</possible_value>
      <possible_value hint="Authenticated without exceptions">2</possible_value>
    </external_variable>
    <external_variable comment="Point and Print Restrictions" datatype="int" id="oval:com.mcafee.oval:var:1411848" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Prohibit connection to non-domain networks when connected to domain authenticated network" datatype="int" id="oval:com.mcafee.oval:var:1411840" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Minimize the number of simultaneous connections to the Internet or a Windows Domain" datatype="int" id="oval:com.mcafee.oval:var:1411831" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Enable the computer to stop generating 8.3 style filenames" datatype="int" id="oval:com.mcafee.oval:var:1411823" version="1">
      <possible_value hint="Enable 8Dot3 Creation on all Volumes">0</possible_value>
      <possible_value hint="Disable 8Dot3 Creation on all Volumes">1</possible_value>
      <possible_value hint="Set 8Dot3 name creation per volume using FSUTIL">2</possible_value>
      <possible_value hint="Disable 8Dot3 name creation on all volumes except system volume">3</possible_value>
    </external_variable>
    <external_variable comment="administrative shares - AutoShareWks" datatype="int" id="oval:com.mcafee.oval:var:1411814" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Specify startup minutes" datatype="int" id="oval:com.mcafee.oval:var:1411803" version="1">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Value should be greater than 0">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="FTP Logon Attempt Restrictions" datatype="string" id="oval:com.mcafee.oval:var:1411668" version="1">
      <possible_value hint="Enable">true</possible_value>
      <possible_value hint="Disable">false</possible_value>
    </external_variable>
    <external_variable comment="Allow connect_from_port_20?" datatype="string" id="oval:com.mcafee.oval:var:1385106" version="2">
      <possible_value hint="Allow">YES</possible_value>
      <possible_value hint="Disallow">NO</possible_value>
    </external_variable>
    <external_variable comment="What is the path for root subdirectory of the ftp account home directory ?" datatype="string" id="oval:com.mcafee.oval:var:1385091" version="1" />
    <external_variable comment="Enter SNMP v3 read only community string in regex form. for eg ^p\@ssw0rd$" datatype="string" id="oval:com.mcafee.oval:var:1378458" version="2" />
    <external_variable comment="Enter SNMP v3 read write community string in regex form. for eg ^p\@ssw0rd$" datatype="string" id="oval:com.mcafee.oval:var:1378450" version="2" />
    <external_variable comment="Enter SNMP v2 read write community string in regex form. for eg ^p\@ssw0rd$" datatype="string" id="oval:com.mcafee.oval:var:1378442" version="2" />
    <external_variable comment="Enter SNMP v2 read-only community string in regex form. for eg ^p\@ssw0rd$" datatype="string" id="oval:com.mcafee.oval:var:1378434" version="2" />
    <external_variable comment="Enter the desired net-snmp version." datatype="version" id="oval:com.mcafee.oval:var:1326824" version="1" />
    <external_variable comment="TCP connections from remote hosts should be disallowed or not?" datatype="string" id="oval:com.mcafee.oval:var:1326818" version="2">
      <possible_value hint="Disallowed">true</possible_value>
      <possible_value hint="Allowed">false</possible_value>
    </external_variable>
    <external_variable comment="Allowed to add workstations to domain (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:1326797" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Denied access from the network (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:1301557" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Pipe Delimited List of Registry Paths: (ex: path1|path2|path3)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:1301543" version="1" />
    <external_variable comment="Denied Log on through Terminal Service (Ex: user1|user2|user3)(None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:1295223" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Denied logon locally (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:1295194" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Denied Logon as a batch job (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:1295187" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Denied logon as a service (Ex: user1|user2|user3) (None = |)" datatype="string" deprecated="false" id="oval:com.mcafee.oval:var:1295180" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Number of days to prompt user to change password before expiration" datatype="int" id="oval:com.mcafee.oval:var:1295174" version="1">
      <possible_restriction hint="Range is between 5 and 14 days">
        <restriction operation="greater than or equal">5</restriction>
        <restriction operation="less than or equal">14</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Screen Saver Grace Period (in seconds)" datatype="int" id="oval:com.mcafee.oval:var:1289209" version="1" />
    <external_variable comment="Logfile path and name (public) in the form %SYSTEMROOT%\System32\logfiles\firewall\publicfw.log" datatype="string" id="oval:com.mcafee.oval:var:1289199" version="1" />
    <external_variable comment="Logfile path and name (private) in the form %SYSTEMROOT%\System32\logfiles\firewall\privatefw.log" datatype="string" id="oval:com.mcafee.oval:var:1289195" version="1" />
    <external_variable comment="Logfile path and name (domain) in the form %SYSTEMROOT%\System32\logfiles\firewall\domainfw.log" datatype="string" id="oval:com.mcafee.oval:var:1288113" version="2" />
    <external_variable comment="Message for users attempting to log on (This should be a regex format)" datatype="string" id="oval:com.mcafee.oval:var:1282155" version="1" />
    <external_variable comment="What should be the umask value?" datatype="int" id="oval:com.mcafee.oval:var:1185682" version="1" />
    <external_variable comment="Windows Update: Configure Automatic Updates: Scheduled install day" datatype="string" id="oval:com.mcafee.oval:var:1177354" version="1">
      <possible_value hint="Not Configured/ Disabled">Disabled</possible_value>
      <possible_value hint="Every day">0</possible_value>
      <possible_value hint="Every Sunday">1</possible_value>
      <possible_value hint="Every Monday">2</possible_value>
      <possible_value hint="Every Tuesday">3</possible_value>
      <possible_value hint="Every Wednesday">4</possible_value>
      <possible_value hint="Every Thursday">5</possible_value>
      <possible_value hint="Every Friday">6</possible_value>
      <possible_value hint="Every Saturday">7</possible_value>
    </external_variable>
    <external_variable comment="Configure Automatic Updates" datatype="int" id="oval:com.mcafee.oval:var:1177336" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">1</possible_value>
      <possible_value hint="Enabled">0</possible_value>
    </external_variable>
    <external_variable comment="Start Menu and Taskbar- Notifications: Turn off toast notifications on the lock screen" datatype="int" id="oval:com.mcafee.oval:var:1177333" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Fixed Data Drives: Require use of smart cards on fixed data drives" datatype="string" id="oval:com.mcafee.oval:var:1177324" version="1">
      <possible_value hint="True">Enabled</possible_value>
      <possible_value hint="False">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Fixed Data Drives: Configure use of smart cards on fixed data drives" datatype="string" id="oval:com.mcafee.oval:var:1177315" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="SCM: Pass the Hash Mitigations: Apply UAC restrictions to local accounts on network logons" datatype="int" id="oval:com.mcafee.oval:var:1175634" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Specify encryption algorithms" datatype="string" id="oval:com.mcafee.oval:var:1166265" version="1">
      <possible_value hint="Not Configured / Disabled">Disabled</possible_value>
      <possible_restriction hint="Enabled. Type encryption algorithms to be used">
        <restriction operation="greater than">" "</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Restrict encryption algorithms and cipher suites" datatype="int" id="oval:com.mcafee.oval:var:1166108" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="True">1</possible_value>
    </external_variable>
    <external_variable comment="Use BitLocker software-based encryption" datatype="int" id="oval:com.mcafee.oval:var:1165970" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="True">1</possible_value>
    </external_variable>
    <external_variable comment="Configure use of hardware-based encription" datatype="int" id="oval:com.mcafee.oval:var:1165944" version="1">
      <possible_value hint="Not Configured">99999</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="What is the name of script file ?" datatype="string" id="oval:com.mcafee.oval:var:1163129" version="1" />
    <external_variable comment="What is the path for script file ?" datatype="string" id="oval:com.mcafee.oval:var:1163128" version="1" />
    <external_variable comment="System SEHOP" datatype="int" id="oval:com.mcafee.oval:var:1158939" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="System SEHOP Enabled with SEHOP Application Opt-Out">2</possible_value>
      <possible_value hint="System SEHOP Enabled with SEHOP Application Opt-In">3</possible_value>
    </external_variable>
    <external_variable comment="System DEP" datatype="int" id="oval:com.mcafee.oval:var:1158456" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="System DEP Enabled with DEP Always On">1</possible_value>
      <possible_value hint="System DEP Enabled with DEP Application Opt-Out">2</possible_value>
      <possible_value hint="System DEP Enabled with DEP Application Opt-In">3</possible_value>
      <possible_value hint="System DEP Enabled with DEP Setting Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="System ASLR" datatype="int" id="oval:com.mcafee.oval:var:1157593" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="System ASLR Enabled with ASLR Setting Disabled">4</possible_value>
      <possible_value hint="System ASLR Enabled with ASLR Application Opt-In">3</possible_value>
    </external_variable>
    <external_variable comment="SCM: Pass the Hash Mitigations: Set WDigest Authentication" datatype="int" id="oval:com.mcafee.oval:var:1154379" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Default Protections for Recommended Software" datatype="int" id="oval:com.mcafee.oval:var:1154364" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Default Protections for Popular Software" datatype="int" id="oval:com.mcafee.oval:var:1154356" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Operating System Drives: Configure use of passwords for operating system drives" datatype="int" id="oval:com.mcafee.oval:var:1137150" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Operating System Drives: Restrict crypto algorithms or cipher suites" datatype="string" id="oval:com.mcafee.oval:var:1137136" version="1">
      <possible_value hint="Not Configured/ Disabled">Disabled</possible_value>
      <possible_restriction hint="Enter object identifiers (OID) for Encryption algorithms">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Operating System Drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption" datatype="int" id="oval:com.mcafee.oval:var:1137131" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Operating System Drives: Use BitLocker software-based encryption when hardware encryption is not available" datatype="int" id="oval:com.mcafee.oval:var:1137121" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Operating System Drives: Configure use of hardware-based encryption for operating system drives" datatype="int" id="oval:com.mcafee.oval:var:1137111" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Fixed Data Drives: Configure use of passwords for fixed data drives" datatype="int" id="oval:com.mcafee.oval:var:1137101" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Fixed Data Drives: Restrict crypto algorithms or cipher suites" datatype="string" id="oval:com.mcafee.oval:var:1137090" version="1">
      <possible_value hint="Not Configured/ Disabled">Disabled</possible_value>
      <possible_restriction hint="Enter object identifiers (OID) for Encryption algorithms">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Fixed Data Drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption" datatype="int" id="oval:com.mcafee.oval:var:1137083" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Fixed Data Drives: Use BitLocker software-based encryption when hardware encryption is not available" datatype="int" id="oval:com.mcafee.oval:var:1137070" version="1">
      <possible_value hint="True">1</possible_value>
      <possible_value hint="False">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Fixed Data Drives: Configure use of hardware-based encryption for fixed data drives" datatype="int" id="oval:com.mcafee.oval:var:1137063" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Also apply to matching devices that are already installed" datatype="string" id="oval:com.mcafee.oval:var:1137048" version="1">
      <possible_value hint="True">Enabled</possible_value>
      <possible_value hint="False">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent installation of devices using drivers for these device setup" datatype="string" id="oval:com.mcafee.oval:var:1137033" version="1">
      <possible_value hint="Not Configured">Not Configured</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_restriction hint="Enter the setup class GUID for device driver that is prevented from installing">
        <restriction operation="greater than">0</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Prevent installation of devices using drivers that match these device setup classes" datatype="string" id="oval:com.mcafee.oval:var:1137027" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Default Protections for Internet Explorer" datatype="int" id="oval:com.mcafee.oval:var:1126594" version="1">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="What is the root account home directory path ?" datatype="string" id="oval:com.mcafee.oval:var:1126575" version="1" />
    <external_variable comment="Should the service be enabled or disabled?" datatype="int" id="oval:com.mcafee.oval:var:101062" version="1">
      <possible_value hint="Enable">1</possible_value>
      <possible_value hint="Disable">0</possible_value>
    </external_variable>
    <external_variable comment="Enter the user name for which account the auditing should be enabled or disabled. For ex - root" datatype="int" id="oval:com.mcafee.oval:var:101061" version="1" />
    <external_variable comment="tooltalk service is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:101056" version="1">
      <possible_value hint="Enabled">[^ttdbserverd]</possible_value>
      <possible_value hint="Disabled">ttdbserverd</possible_value>
    </external_variable>
    <external_variable comment="What is the home directory of superuser account?" datatype="string" id="oval:com.mcafee.oval:var:101017" version="1" />
    <external_variable comment="Adding current directory is to the environmental variable PATH by local initialization files is enabled or not?" datatype="string" id="oval:com.mcafee.oval:var:101016" version="1">
      <possible_value hint="Enabled">^(.*\..*)$</possible_value>
      <possible_value hint="Disabled">[^ \.]</possible_value>
    </external_variable>
    <external_variable comment="Adding current directory is to the environmental variable PATH by global initialization files is enabled or not?" datatype="string" id="oval:com.mcafee.oval:var:101015" version="1">
      <possible_value hint="Enabled">^(.*\..*)$</possible_value>
      <possible_value hint="Disabled">[^ \.]</possible_value>
    </external_variable>
    <external_variable comment="Current directory as first or last entry in environmental variable PATH should be enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:101014" version="1">
      <possible_value hint="Enabled">^(\.:.*|.*:\.)$</possible_value>
      <possible_value hint="Current directory as first entry Disabled">^(/|\w)</possible_value>
      <possible_value hint="Current directory as last entry Disabled">(/|\w)$</possible_value>
    </external_variable>
    <external_variable comment="What is the local initialization file for the shell?" datatype="string" id="oval:com.mcafee.oval:var:101013" version="1">
      <possible_value hint="/etc/csh.login - for C shell">.cshrc</possible_value>
      <possible_value hint="/et/profile - for POSIX / Korn / Bourne shell">.profile</possible_value>
    </external_variable>
    <external_variable comment="What is the Global initialization file for the shell?" datatype="string" id="oval:com.mcafee.oval:var:101012" version="1">
      <possible_value hint="/etc/csh.login - for C shell">csh.login</possible_value>
      <possible_value hint="/et/profile - for POSIX / Korn / Bourne shell">profile</possible_value>
    </external_variable>
    <external_variable comment="What is the home directory of superuser account?" datatype="string" id="oval:com.mcafee.oval:var:101011" version="1" />
    <external_variable comment="nosgid option is enabled or disabled for all NFS mounts?" datatype="string" id="oval:com.mcafee.oval:var:100100" version="1">
      <possible_value hint="Enabled">nosgid</possible_value>
      <possible_value hint="Disabled">[^ nosgid]</possible_value>
    </external_variable>
    <external_variable comment="nosuid option is enabled or disabled for all NFS mounts?" datatype="string" id="oval:com.mcafee.oval:var:100099" version="1">
      <possible_value hint="Enabled">nosuid</possible_value>
      <possible_value hint="Disabled">[^ nosuid]</possible_value>
    </external_variable>
    <external_variable comment="The read-only (ro) option should be enabled or disabled as appropriate for all NFS exports?" datatype="string" id="oval:com.mcafee.oval:var:100098" version="1">
      <possible_value hint="read-only (ro) option Enabled">ro</possible_value>
      <possible_value hint="read-only (ro) option Disabled">rw</possible_value>
    </external_variable>
    <external_variable comment="What is the expected authentication mode for NFS configuration?" datatype="string" id="oval:com.mcafee.oval:var:100097" version="1">
      <possible_value hint="sys mode">1</possible_value>
      <possible_value hint="dh mode">3</possible_value>
      <possible_value hint="krb5 mode">390003</possible_value>
      <possible_value hint="krb5i mode">390004</possible_value>
      <possible_value hint="krb5p mode">390005</possible_value>
      <possible_value hint="none mode">0</possible_value>
    </external_variable>
    <external_variable comment="Enter the path of the superuser home directory. For Example : / or /home" datatype="string" id="oval:com.mcafee.oval:var:100062" version="1" />
    <external_variable comment="Should Others have EXECUTE access?" datatype="boolean" id="oval:com.mcafee.oval:var:100055" version="1">
      <possible_value hint="Allowed">1</possible_value>
      <possible_value hint="Dis-allowed">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have WRITE access?" datatype="boolean" id="oval:com.mcafee.oval:var:100054" version="1">
      <possible_value hint="Allowed">1</possible_value>
      <possible_value hint="Dis-allowed">0</possible_value>
    </external_variable>
    <external_variable comment="Should Others have READ access?" datatype="boolean" id="oval:com.mcafee.oval:var:100053" version="1">
      <possible_value hint="Allowed">1</possible_value>
      <possible_value hint="Dis-allowed">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have EXECUTE access?" datatype="boolean" id="oval:com.mcafee.oval:var:100052" version="1">
      <possible_value hint="Allowed">1</possible_value>
      <possible_value hint="Dis-allowed">0</possible_value>
    </external_variable>
    <external_variable comment="Should the Group have WRITE access?" datatype="boolean" id="oval:com.mcafee.oval:var:100051" version="1">
      <possible_value hint="Allowed">1</possible_value>
      <possible_value hint="Dis-allowed">0</possible_value>
    </external_variable>
    <external_variable comment="Should the User have EXECUTE access?" datatype="boolean" id="oval:com.mcafee.oval:var:100049" version="1">
      <possible_value hint="Allowed">1</possible_value>
      <possible_value hint="Dis-allowed">0</possible_value>
    </external_variable>
    <external_variable comment="Enter the ip addres or or domain ip or domain name or host-name authorised to access NIS+ server" datatype="string" id="oval:com.mcafee.oval:var:100048" version="1" />
    <external_variable comment="Enter the ip addres or or domain ip or domain name or host-name authorised to access NIS+ server" datatype="string" id="oval:com.mcafee.oval:var:100047" version="1" />
    <external_variable comment="Enter the home directory of the user whose .forward file is to ber verified?" datatype="string" id="oval:com.mcafee.oval:var:100046" version="1" />
    <external_variable comment="Decode sendmail alias is enabled or disabled?" datatype="string" id="oval:com.mcafee.oval:var:100045" version="1">
      <possible_value hint="Enabled">decode</possible_value>
      <possible_value hint="Disabled">[^ decode]</possible_value>
    </external_variable>
    <external_variable comment="What is the expected version string reported by the bind service?" datatype="string" id="oval:com.mcafee.oval:var:100044" version="1" />
    <external_variable comment="X-Windows should write .Xauthority files to users home directories?" datatype="string" id="oval:com.mcafee.oval:var:100043" version="3">
      <possible_value hint="Enabled">=[:space:]*.Xauthority</possible_value>
      <possible_value hint="Disabled">=[:space:]*</possible_value>
    </external_variable>
    <external_variable comment='Allow local port exceptions - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51131' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit unicast response to multicast or broadcast requests - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51111' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit notification - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51091' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow UPnP framework exception - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51081' version='1' />
    <external_variable comment='Allow Remote Desktop exception - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51071' version='1' />
    <external_variable comment='Allow file and print sharing exception - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51051' version='1' />
    <external_variable comment='Allow remote administration exceptions - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51041' version='1' />
    <external_variable comment='Allow local program exceptions - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51031' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not allow exceptions - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51011' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Protect all Network Connections - Standard Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:51001' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Log File Path - Domain Profile (full path and name)' datatype='string' id='oval:com.mcafee.oval.xpfirewall:var:50171' version='2' />
    <external_variable comment='Allow Logging: Log File Size (in Kb) - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50161' version='2' />
    <external_variable comment='Allow Logging: Log Successful Connections - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50151' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow Logging: Log Dropped Packets - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50141' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow local port exceptions - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50131' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit unicast response to multicast or broadcast requests - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50111' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit notification - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50091' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow UPnP framework exception - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50081' version='1' />
    <external_variable comment='Allow Remote Desktop exception - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50071' version='1' />
    <external_variable comment='Allow file and print sharing exception - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50051' version='1' />
    <external_variable comment='Allow remote administration exceptions - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50041' version='1' />
    <external_variable comment='Allow local program exceptions - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50031' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Protect all Network Connections - Domain Profile' datatype='int' id='oval:com.mcafee.oval.xpfirewall:var:50001' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Percentage threshold for the security event log at which the system will generate a warning' datatype='int' id='oval:com.mcafee.oval.xp:var:91' version='1' />
    <external_variable comment='Maximum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.xp:var:90' version='2' />
    <external_variable comment='Digitally sign communications (always)' datatype='int' id='oval:com.mcafee.oval.xp:var:8411' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='maximum size (in bytes) of system log' datatype='int' id='oval:com.mcafee.oval.xp:var:84' version='1' />
    <external_variable comment='maximum size (in bytes) of security log' datatype='int' id='oval:com.mcafee.oval.xp:var:81' version='1' />
    <external_variable comment='WWWPublishingServicesService' datatype='int' id='oval:com.mcafee.oval.xp:var:7795' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='WebClientService' datatype='int' id='oval:com.mcafee.oval.xp:var:7792' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='UniversalPlugAndPlayDeviceHostService' datatype='int' id='oval:com.mcafee.oval.xp:var:7791' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='TelnetService' datatype='int' id='oval:com.mcafee.oval.xp:var:7789' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='TaskSchedulerService' datatype='int' id='oval:com.mcafee.oval.xp:var:7787' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='SSDPService' datatype='int' id='oval:com.mcafee.oval.xp:var:7786' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='RoutingAndRemoteAccessService' datatype='int' id='oval:com.mcafee.oval.xp:var:7785' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='RasManService' datatype='int' id='oval:com.mcafee.oval.xp:var:7784' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='NetworkDDEdsdmService' datatype='int' id='oval:com.mcafee.oval.xp:var:7783' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='NetworkDDEService' datatype='int' id='oval:com.mcafee.oval.xp:var:7782' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='NetMeetingRemoteDesktopSharingService' datatype='int' id='oval:com.mcafee.oval.xp:var:7781' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='MessengerService' datatype='int' id='oval:com.mcafee.oval.xp:var:7780' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='IndexingService' datatype='int' id='oval:com.mcafee.oval.xp:var:7779' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='FTPPublishingService' datatype='int' id='oval:com.mcafee.oval.xp:var:7778' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='FaxService' datatype='int' id='oval:com.mcafee.oval.xp:var:7777' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='FastUserSwitchingCompatibilityService' datatype='int' id='oval:com.mcafee.oval.xp:var:7776' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='ErrorReportingService' datatype='int' id='oval:com.mcafee.oval.xp:var:7775' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='ComputerBrowserService' datatype='int' id='oval:com.mcafee.oval.xp:var:7774' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='ClipBookService' datatype='int' id='oval:com.mcafee.oval.xp:var:7773' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='AlerterService' datatype='int' id='oval:com.mcafee.oval.xp:var:7771' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Disable 8.3 Name Creation' datatype='int' id='oval:com.mcafee.oval.xp:var:711' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Set a time limit (in milliseconds) for disconnected sessions' datatype='int' id='oval:com.mcafee.oval.xp:var:6726' version='2' />
    <external_variable comment='Set a time limit (in seconds) for active but idle Terminal Services sessions' datatype='int' id='oval:com.mcafee.oval.xp:var:6725' version='2' />
    <external_variable comment='WMI Performance Adapter' datatype='int' id='oval:com.mcafee.oval.xp:var:6719' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Prompt for password on resume from hibernate / suspend' datatype='string' id='oval:com.mcafee.oval.xp:var:6714' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not Configured</possible_value>
    </external_variable>
    <external_variable comment='Screen Saver timeout (in seconds)' datatype='string' id='oval:com.mcafee.oval.xp:var:6708' version='2' />
    <external_variable comment='Password protect the screen saver' datatype='string' id='oval:com.mcafee.oval.xp:var:6707' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Windows Movie Maker Saving to Online Video Hosting Provider' datatype='string' id='oval:com.mcafee.oval.xp:var:6697' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Windows Movies Maker Automatic Codec Downloads' datatype='string' id='oval:com.mcafee.oval.xp:var:6696' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Don’t Display the Getting Started Welcome Screen at Logon' datatype='string' id='oval:com.mcafee.oval.xp:var:6687' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Always Use Classic Logon' datatype='string' id='oval:com.mcafee.oval.xp:var:6686' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Windows Movie Maker Online Web Links' datatype='string' id='oval:com.mcafee.oval.xp:var:6684' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Error Reporting' datatype='string' id='oval:com.mcafee.oval.xp:var:6683' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off the Order Prints Picture Task' datatype='string' id='oval:com.mcafee.oval.xp:var:6682' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Registration if URL Connection is Referring to Microsoft.com' datatype='string' id='oval:com.mcafee.oval.xp:var:6681' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Internet File Association Service' datatype='string' id='oval:com.mcafee.oval.xp:var:6680' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com' datatype='string' id='oval:com.mcafee.oval.xp:var:6679' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Event Views Events.asp Links' datatype='string' id='oval:com.mcafee.oval.xp:var:6675' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Automatic Root Certificates Update' datatype='string' id='oval:com.mcafee.oval.xp:var:6674' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Registry Policy Processing - Variable' datatype='int' id='oval:com.mcafee.oval.xp:var:6672' version='1' />
    <external_variable comment='Turn Off Microsoft Peer-to-Peer Networking Services - Variable' datatype='boolean' id='oval:com.mcafee.oval.xp:var:6662' version='1' />
    <external_variable comment='Do not allow Windows Messenger to be run' datatype='string' id='oval:com.mcafee.oval.xp:var:6601' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Set client connection encryption level' datatype='int' id='oval:com.mcafee.oval.xp:var:6600' version='1' />
    <external_variable comment='Do not allow passwords to be saved' datatype='string' id='oval:com.mcafee.oval.xp:var:6596' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Disable remote Desktop Sharing' datatype='string' id='oval:com.mcafee.oval.xp:var:6595' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Update device driver searching' datatype='string' id='oval:com.mcafee.oval.xp:var:6573' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off downloading of print drivers over HTTP' datatype='string' id='oval:com.mcafee.oval.xp:var:6572' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off printing over HTTP' datatype='string' id='oval:com.mcafee.oval.xp:var:6571' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Search Companion content file updates' datatype='string' id='oval:com.mcafee.oval.xp:var:6570' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off the Windows Messenger Customer Experience Improvement Program' datatype='string' id='oval:com.mcafee.oval.xp:var:6569' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Internet download for Web publishing and online ordering wizards' datatype='string' id='oval:com.mcafee.oval.xp:var:6568' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off the Publish to Web task for files and folders' datatype='string' id='oval:com.mcafee.oval.xp:var:6567' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='RPC Endpoint Mapper Client Authentication' datatype='string' id='oval:com.mcafee.oval.xp:var:6566' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Restrictions for Unauthenticated RPC clients' datatype='int' id='oval:com.mcafee.oval.xp:var:6565' version='1' />
    <external_variable comment='Solicited Remote Assistance' datatype='string' id='oval:com.mcafee.oval.xp:var:6564' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Offer Remote Assistance' datatype='string' id='oval:com.mcafee.oval.xp:var:6563' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not process the run once list' datatype='string' id='oval:com.mcafee.oval.xp:var:6561' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Notify antivirus programs when opening attachments' datatype='string' id='oval:com.mcafee.oval.xp:var:6504' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Hide mechanisms to remove zone information' datatype='string' id='oval:com.mcafee.oval.xp:var:6503' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not preserve zone information in file attachments' datatype='string' id='oval:com.mcafee.oval.xp:var:6502' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Background Intelligent Transfer Service' datatype='int' id='oval:com.mcafee.oval.xp:var:613221' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Do not automatically start Windows Messenger initially' datatype='int' id='oval:com.mcafee.oval.xp:var:612261224' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prevent Desktop Shortcut Creation' datatype='string' id='oval:com.mcafee.oval.xp:var:612261223' version='1' />
    <external_variable comment='Prevent Automatic Updates' datatype='int' id='oval:com.mcafee.oval.xp:var:612261222' version='1' />
    <external_variable comment='Do Not Show First Use Dialog Boxes' datatype='int' id='oval:com.mcafee.oval.xp:var:612261221' version='1' />
    <external_variable comment='Prohibit non-administrators from applying vendor signed updates' datatype='int' id='oval:com.mcafee.oval.xp:var:61221' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Enable user control over installs' datatype='int' id='oval:com.mcafee.oval.xp:var:61211' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable IE security prompt for Windows Installer scripts' datatype='int' id='oval:com.mcafee.oval.xp:var:61201' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off shell protocol protected mode' datatype='int' id='oval:com.mcafee.oval.xp:var:61191' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally encrypt or sign secure channel data (always)' datatype='int' id='oval:com.mcafee.oval.xp:var:6111' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off downloading of enclosures' datatype='int' id='oval:com.mcafee.oval.xp:var:61101' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prevent IIS Installation' datatype='int' id='oval:com.mcafee.oval.xp:var:61071' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Shut down system immediately if unable to log security audits' datatype='int' id='oval:com.mcafee.oval.xp:var:60271' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='status of auditing the use of the backup and restore privilege' datatype='boolean' id='oval:com.mcafee.oval.xp:var:53' version='1' />
    <external_variable comment='status of limiting the use of blank passwords' datatype='boolean' id='oval:com.mcafee.oval.xp:var:52' version='1' />
    <external_variable comment='status of built-in Guest account' datatype='boolean' id='oval:com.mcafee.oval.xp:var:51' version='1' />
    <external_variable comment='How often keep-alive packets are sent in milliseconds' datatype='int' id='oval:com.mcafee.oval.xp:var:5' version='1' />
    <external_variable comment='Audit process tracking' datatype='string' id='oval:com.mcafee.oval.xp:var:42' version='1'>
      <possible_value hint='Does not audit events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Enable PMTU Discovery' datatype='int' id='oval:com.mcafee.oval.xp:var:407' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit system events' datatype='string' id='oval:com.mcafee.oval.xp:var:38' version='1'>
      <possible_value hint='Does not audit attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit privilege use' datatype='string' id='oval:com.mcafee.oval.xp:var:37' version='1'>
      <possible_value hint='Does not audit attempts by a user in exercising a user right.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts by a user in exercising a user right.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts by a user in exercising a user right.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts by a user in exercising a user right.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit policy change' datatype='string' id='oval:com.mcafee.oval.xp:var:36' version='1'>
      <possible_value hint='Does not audit attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit object access' datatype='string' id='oval:com.mcafee.oval.xp:var:35' version='1'>
      <possible_value hint='Does not audit attempts of a user accessing an object that has its own SACL specified.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Display Error Notification' datatype='int' id='oval:com.mcafee.oval.xp:var:3366994' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit use of Internet Connection Sharing on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.xp:var:3366993' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit use of Internet Connection Firewall on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.xp:var:3366992' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit installation and configuration of Network Bridge on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.xp:var:3366991' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit logon events' datatype='string' id='oval:com.mcafee.oval.xp:var:33' version='1'>
      <possible_value hint='Does not audit attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit directory service access' datatype='string' id='oval:com.mcafee.oval.xp:var:32' version='1'>
      <possible_value hint='Does not audit attempts to access directory services.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to access directory services.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to access directory services.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to access directory services.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit account management' datatype='string' id='oval:com.mcafee.oval.xp:var:31' version='1'>
      <possible_value hint='Does not audit attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Maximum machine account password age (in days)' datatype='int' id='oval:com.mcafee.oval.xp:var:30' version='2' />
    <external_variable comment='Automatic Logon Disabled' datatype='int' id='oval:com.mcafee.oval.xp:var:293' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Automatic Detection Of Dead Gateways' datatype='int' id='oval:com.mcafee.oval.xp:var:292' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Ignore NetBIOS name release requests' datatype='int' id='oval:com.mcafee.oval.xp:var:291' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow ICMP Redirects Disabled' datatype='int' id='oval:com.mcafee.oval.xp:var:290' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit account logon events' datatype='string' id='oval:com.mcafee.oval.xp:var:29' version='1'>
      <possible_value hint='Does not audit log ons and log offs of a remote computer from this workstation.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed log ons and log offs of a remote computer from this workstation.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='IP source routing protection level' datatype='int' id='oval:com.mcafee.oval.xp:var:289' version='1' />
    <external_variable comment='Wireless Zero Configuration' datatype='int' id='oval:com.mcafee.oval.xp:var:28812' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='SynAttackProtectionLevel' datatype='int' id='oval:com.mcafee.oval.xp:var:288' version='1' />
    <external_variable comment='Specifies how the system responds when a user tries to install device driver files that are not digitally signed.' datatype='int' id='oval:com.mcafee.oval.xp:var:287' version='1'>
      <possible_value hint='ignore'>0</possible_value>
      <possible_value hint='warn'>1</possible_value>
      <possible_value hint='block'>2</possible_value>
    </external_variable>
    <external_variable comment='should router discovery be performed on this interface' datatype='boolean' id='oval:com.mcafee.oval.xp:var:286' version='1'>
      <possible_value hint='Disables router discovery'>0</possible_value>
      <possible_value hint='Enables router discovery'>1</possible_value>
    </external_variable>
    <external_variable comment='Minimum session security for NTLM SSP based (including secure RPC) servers' datatype='int' id='oval:com.mcafee.oval.xp:var:285' version='1' />
    <external_variable comment='minimum session security for NTLM SSP based (including secure RPC) clients' datatype='int' id='oval:com.mcafee.oval.xp:var:284' version='1' />
    <external_variable comment='desired behavior when smart card is removed' datatype='int' id='oval:com.mcafee.oval.xp:var:283' version='1'>
      <possible_value hint='no action'>0</possible_value>
      <possible_value hint='lock workstation'>1</possible_value>
      <possible_value hint='force logoff'>2</possible_value>
    </external_variable>
    <external_variable comment='restrict access to floppy drive to locally logged-on users' datatype='boolean' id='oval:com.mcafee.oval.xp:var:282' version='1'>
      <possible_value hint='Only locally logged on users are allowed to access the floppy drive.'>1</possible_value>
      <possible_value hint='Access to the floppy drive is not restricted to locally logged on users.'>0</possible_value>
    </external_variable>
    <external_variable comment='restrict access to CDROM drive to locally logged-on users' datatype='boolean' id='oval:com.mcafee.oval.xp:var:281' version='1'>
      <possible_value hint='Only locally logged on users are allowed to access the CDROM drive.'>1</possible_value>
      <possible_value hint='Access to the CDROM drive is not restricted to locally logged on users.'>0</possible_value>
    </external_variable>
    <external_variable comment='Microsoft network client: Digitally sign communications (always)' datatype='boolean' id='oval:com.mcafee.oval.xp:var:280' version='1'>
      <possible_value hint='The client policy is set to not always sign packets.'>0</possible_value>
      <possible_value hint='The client policy is set to always sign packets.'>1</possible_value>
    </external_variable>
    <external_variable comment='Require Domain Controller authentication to unlock workstation' datatype='boolean' id='oval:com.mcafee.oval.xp:var:279' version='1'>
      <possible_value hint='Domain controller authentication is not required to unlock the workstation'>0</possible_value>
      <possible_value hint='Domain controller authentication is required to unlock the workstation'>1</possible_value>
    </external_variable>
    <external_variable comment='Require strong (Windows 2000 or later) session key' datatype='int' id='oval:com.mcafee.oval.xp:var:278' version='1'>
      <possible_value hint='Requires strong (Windows 2000 or later) session key'>1</possible_value>
      <possible_value hint='Does not require strong (Windows 2000 or later) session key'>0</possible_value>
    </external_variable>
    <external_variable comment='Prevent users from installing printer drivers' datatype='boolean' id='oval:com.mcafee.oval.xp:var:277' version='1'>
      <possible_value hint='Only Administrators are allowed to add and to delete printer drivers on the local system.'>1</possible_value>
      <possible_value hint='Users are allowed to add and to delete printer drivers on the local system.'>0</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the system log' datatype='int' id='oval:com.mcafee.oval.xp:var:261' version='1'>
      <possible_value hint='events in the system log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the system log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the system log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the security log' datatype='int' id='oval:com.mcafee.oval.xp:var:260' version='1'>
      <possible_value hint='events in the security log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the security log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the security log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the application log' datatype='int' id='oval:com.mcafee.oval.xp:var:259' version='1'>
      <possible_value hint='events in the application log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the application log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the application log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='number of passwords remembered' datatype='int' id='oval:com.mcafee.oval.xp:var:24' version='1' />
    <external_variable comment='Terminal Services Service' datatype='int' id='oval:com.mcafee.oval.xp:var:22611' version='3'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Specifies whether the server should force a client to disconnect once the client&#39;s logon time has expired' datatype='int' id='oval:com.mcafee.oval.xp:var:216' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Amount of idle time (in minutes) required before susending session' datatype='int' id='oval:com.mcafee.oval.xp:var:215' version='2' />
    <external_variable comment='Specifies whether system can send unencrypted password to third-party SMB servers' datatype='boolean' id='oval:com.mcafee.oval.xp:var:214' version='1' />
    <external_variable comment='maximum size (in bytes) of application log' datatype='int' id='oval:com.mcafee.oval.xp:var:16' version='1' />
    <external_variable comment='Account lockout duration (in seconds)' datatype='int' id='oval:com.mcafee.oval.xp:var:15' version='2' />
    <external_variable comment='Number of days to prompt user to change password before expiration' datatype='int' id='oval:com.mcafee.oval.xp:var:14' version='1' />
    <external_variable comment='are passwords stored using reversible encrption' datatype='boolean' id='oval:com.mcafee.oval.xp:var:13' version='1' />
    <external_variable comment='is the local guests group prevented from accessing the system log' datatype='boolean' id='oval:com.mcafee.oval.xp:var:122' version='1' />
    <external_variable comment='is the local guests group prevented from accessing the sycurity log' datatype='boolean' id='oval:com.mcafee.oval.xp:var:121' version='1' />
    <external_variable comment='is the local guests group prevented from accessing the application log' datatype='boolean' id='oval:com.mcafee.oval.xp:var:120' version='1' />
    <external_variable comment='minimum password length' datatype='int' id='oval:com.mcafee.oval.xp:var:12' version='1' />
    <external_variable comment='Reset account lockout counter after ( x ) seconds' datatype='int' id='oval:com.mcafee.oval.xp:var:115' version='2' />
    <external_variable comment='is password complexity enforced' datatype='boolean' id='oval:com.mcafee.oval.xp:var:11' version='1' />
    <external_variable comment='Allow system to be shut down without having to log on' datatype='int' id='oval:com.mcafee.oval.xp:var:10311' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='How many times unacknowledged data is retransmitted' datatype='int' id='oval:com.mcafee.oval.xp:var:103' version='1' />
    <external_variable comment='Number of previous logons to cache' datatype='string' id='oval:com.mcafee.oval.xp:var:102' version='1' />
    <external_variable comment='Minimum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.xp:var:101' version='2' />
    <external_variable comment='Account lockout threshold (number of bad attempts)' datatype='int' id='oval:com.mcafee.oval.xp:var:10' version='2' />
    <external_variable comment="Threshold percentage" datatype="int" id="oval:com.mcafee.oval.windows:var:91" version="4">
      <possible_value hint="50%">50</possible_value>
      <possible_value hint="60%">60</possible_value>
      <possible_value hint="70%">70</possible_value>
      <possible_value hint="80%">80</possible_value>
      <possible_value hint="90%">90</possible_value>
    </external_variable>
    <external_variable comment="Max pwd age in seconds (86400=1 day)" datatype="int" id="oval:com.mcafee.oval.windows:var:90" version="30" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Digitally sign communications (always)" datatype="int" id="oval:com.mcafee.oval.windows:var:8411" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="System Log size (in bytes)" datatype="int" id="oval:com.mcafee.oval.windows:var:84" version="3" />
    <external_variable comment="Security Log size (in bytes)" datatype="int" id="oval:com.mcafee.oval.windows:var:81" version="3" />
    <external_variable comment="Registry audit subcategory." datatype="string" id="oval:com.mcafee.oval.windows:var:8032" version="2">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Windows Error Reporting: Report operating system errors" datatype="string" id="oval:com.mcafee.oval.windows:var:794564" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="World Wide Web Publishing Service (W3SVC) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7795" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="WebClientService" datatype="int" id="oval:com.mcafee.oval.windows:var:7792" version="1">
      <possible_value hint="2 - Automatic">2</possible_value>
      <possible_value hint="3 - Manual">3</possible_value>
      <possible_value hint="4 - Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Universal Plug and Play Device Host Service (upnphost) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7791" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Telnet Service (TlntSvr) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7789" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Task Scheduler Service (Schedule) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7787" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="SSDP Discovery Service (SSDPSRV) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7786" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Routing and Remote Access Service (RemoteAccess) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7785" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Access Connection Manager Service (RasMan) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7784" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Network DDE DSDM Service (NetDDEdsdm) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7783" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Network DDE Service (NetDDE) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7782" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="NetMeeting Remote Desktop Sharing Service (mnmsrvc) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7781" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Messenger Service (Messenger) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7780" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Indexing Service (CISVC) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7779" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="FTP Publishing Service (MSFTPSVC) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7778" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Fax Service (Fax) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7777" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Fast User Switching Compatibility Service (FastUserSwitchingCompatibility) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7776" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Error Reporting Service (ERSvc) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7775" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Computer Browser Service (Browser) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7774" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="ClipBook Service (ClipSrv) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7773" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Alerter Service (Alerter) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:7771" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Enable the computer to stop generating 8.3 style filenames" datatype="int" id="oval:com.mcafee.oval.windows:var:711" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="End a disconnected session" datatype="int" id="oval:com.mcafee.oval.windows:var:6726" version="3">
      <possible_value hint="Never">0</possible_value>
      <possible_value hint="1 minute">60000</possible_value>
      <possible_value hint="5 minutes">300000</possible_value>
      <possible_value hint="10 minutes">600000</possible_value>
      <possible_value hint="15 minutes">900000</possible_value>
      <possible_value hint="30 minutes">1800000</possible_value>
      <possible_value hint="1 hour">3600000</possible_value>
      <possible_value hint="2 hours">7200000</possible_value>
      <possible_value hint="3 hours">10800000</possible_value>
      <possible_value hint="1 day">86400000</possible_value>
      <possible_value hint="2 days">172800000</possible_value>
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Idle session limit" datatype="int" id="oval:com.mcafee.oval.windows:var:6725" version="3">
      <possible_value hint="Never">0</possible_value>
      <possible_value hint="1 minute">60000</possible_value>
      <possible_value hint="5 minutes">300000</possible_value>
      <possible_value hint="10 minutes">600000</possible_value>
      <possible_value hint="15 minutes">900000</possible_value>
      <possible_value hint="30 minutes">1800000</possible_value>
      <possible_value hint="1 hour">3600000</possible_value>
      <possible_value hint="2 hours">7200000</possible_value>
      <possible_value hint="3 hours">10800000</possible_value>
      <possible_value hint="1 day">86400000</possible_value>
      <possible_value hint="2 days">172800000</possible_value>
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Simple TCP/IP Services Service (simptcp) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:672021" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="WMI Performance Adapter Service (wmiApSrv) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:6719" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remove Security tab" datatype="string" id="oval:com.mcafee.oval.windows:var:6717" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Remove CD Burning features" datatype="string" id="oval:com.mcafee.oval.windows:var:6716" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Prompt for password on resume from hibernate / suspend" datatype="string" id="oval:com.mcafee.oval.windows:var:6714" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Online" datatype="string" id="oval:com.mcafee.oval.windows:var:6713" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off the 'Publish to Web' task for files and folders" datatype="string" id="oval:com.mcafee.oval.windows:var:6712" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Help Ratings" datatype="string" id="oval:com.mcafee.oval.windows:var:6711" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Help Experience Improvement Program" datatype="string" id="oval:com.mcafee.oval.windows:var:6710" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Remove Default Programs Link from the Start Menu" datatype="string" id="oval:com.mcafee.oval.windows:var:6709" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Screen Saver timeout (in seconds)" datatype="string" id="oval:com.mcafee.oval.windows:var:6708" version="1" />
    <external_variable comment="Password protect the screen saver" datatype="string" id="oval:com.mcafee.oval.windows:var:6707" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Windows Movie Maker Saving to Online Video Hosting Provider" datatype="string" id="oval:com.mcafee.oval.windows:var:6697" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Windows Movies Maker Automatic Codec Downloads" datatype="string" id="oval:com.mcafee.oval.windows:var:6696" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on bandwidth optimization" datatype="string" id="oval:com.mcafee.oval.windows:var:6693" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Customization Warning Messages" datatype="string" id="oval:com.mcafee.oval.windows:var:6692" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Allow only Vista or later connections" datatype="string" id="oval:com.mcafee.oval.windows:var:6691" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Don’t Display the Getting Started Welcome Screen at Logon" datatype="string" id="oval:com.mcafee.oval.windows:var:6687" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Always Use Classic Logon" datatype="string" id="oval:com.mcafee.oval.windows:var:6686" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Restrict Internet Communication" datatype="string" id="oval:com.mcafee.oval.windows:var:6685" version="1" />
    <external_variable comment="Turn Off Windows Movie Maker Online Web Links" datatype="string" id="oval:com.mcafee.oval.windows:var:6684" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Error Reporting" datatype="string" id="oval:com.mcafee.oval.windows:var:6683" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off the Order Prints Picture Task" datatype="string" id="oval:com.mcafee.oval.windows:var:6682" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Registration if URL Connection is Referring to Microsoft.com" datatype="string" id="oval:com.mcafee.oval.windows:var:6681" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Internet File Association Service" datatype="string" id="oval:com.mcafee.oval.windows:var:6680" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com" datatype="string" id="oval:com.mcafee.oval.windows:var:6679" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Help and Support Center Microsoft Knowledge Base Search" datatype="string" id="oval:com.mcafee.oval.windows:var:6678" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Help and Support Center Did You Know? Content" datatype="string" id="oval:com.mcafee.oval.windows:var:6677" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Event Views Events.asp Links" datatype="string" id="oval:com.mcafee.oval.windows:var:6675" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Automatic Root Certificates Update" datatype="string" id="oval:com.mcafee.oval.windows:var:6674" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Access to All Windows Update Feature" datatype="string" id="oval:com.mcafee.oval.windows:var:6673" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Registry Policy Processing - Variable" datatype="int" id="oval:com.mcafee.oval.windows:var:6672" version="1" />
    <external_variable comment="Device Installation: Prevent creation of a system restore point" datatype="string" id="oval:com.mcafee.oval.windows:var:6668" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow remote access to the Plug and Play interface" datatype="string" id="oval:com.mcafee.oval.windows:var:6667" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Peer-to-Peer Networking Services" datatype="int" id="oval:com.mcafee.oval.windows:var:6662" version="4">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Turn on Responder (RSPNDR) driver" datatype="string" id="oval:com.mcafee.oval.windows:var:6661" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn on Mapper I/O (LLTDIO) driver" datatype="string" id="oval:com.mcafee.oval.windows:var:6660" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Reschedule Automatic Updates scheduled installations" datatype="string" id="oval:com.mcafee.oval.windows:var:6606" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="No auto-restart for scheduled Automatic Updates installations" datatype="string" id="oval:com.mcafee.oval.windows:var:6605" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Configure Automatic Updates" datatype="string" id="oval:com.mcafee.oval.windows:var:6604" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Do not adjust default option to ‘Install Updates and Shut Down’ in Shut Down Windows Dialog box" datatype="string" id="oval:com.mcafee.oval.windows:var:6603" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Do not display 'Install Updates and Shut Down' option in the Shut Down Windows dialog box" datatype="string" id="oval:com.mcafee.oval.windows:var:6602" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow Windows Messenger to be run" datatype="string" id="oval:com.mcafee.oval.windows:var:6601" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Set client connection encryption level" datatype="int" id="oval:com.mcafee.oval.windows:var:6600" version="3">
      <possible_value hint="Client Compatible">2</possible_value>
      <possible_value hint="High Level">3</possible_value>
      <possible_value hint="Low Level">1</possible_value>
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Allow users to connect remotely using Terminal Services" datatype="string" id="oval:com.mcafee.oval.windows:var:6597" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow passwords to be saved" datatype="string" id="oval:com.mcafee.oval.windows:var:6596" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Disable remote Desktop Sharing" datatype="string" id="oval:com.mcafee.oval.windows:var:6595" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Deny all add-ons unless specifically allowed in the Add-on List" datatype="string" id="oval:com.mcafee.oval.windows:var:6594" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Restrict File Download)" datatype="string" id="oval:com.mcafee.oval.windows:var:6593" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Restrict ActiveX Install)" datatype="string" id="oval:com.mcafee.oval.windows:var:6592" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Zone Elevation Protection)" datatype="string" id="oval:com.mcafee.oval.windows:var:6591" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Scripted Window Security Restrictions)" datatype="string" id="oval:com.mcafee.oval.windows:var:6590" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (MIME Sniffing)" datatype="string" id="oval:com.mcafee.oval.windows:var:6589" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (Consistent MIME Handling)" datatype="string" id="oval:com.mcafee.oval.windows:var:6588" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Explorer Processes (MK Protocol)" datatype="string" id="oval:com.mcafee.oval.windows:var:6587" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Allow software to run or install even if the signature is invalid" datatype="string" id="oval:com.mcafee.oval.windows:var:6586" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Crash Detection" datatype="string" id="oval:com.mcafee.oval.windows:var:6585" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Security Zones: Use only machine settings" datatype="string" id="oval:com.mcafee.oval.windows:var:6584" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Security Zones: Do not allow users to change policies" datatype="string" id="oval:com.mcafee.oval.windows:var:6583" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Security Zones: Do not allow users to add/delete sites" datatype="string" id="oval:com.mcafee.oval.windows:var:6582" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Make proxy settings per-machine (rather than per-user)" datatype="string" id="oval:com.mcafee.oval.windows:var:6581" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Do not allow users to enable or disable add-ons" datatype="string" id="oval:com.mcafee.oval.windows:var:6580" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Disable software update shell notifications on program launch" datatype="string" id="oval:com.mcafee.oval.windows:var:6579" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Periodic Check for Internet Explorer software updates" datatype="string" id="oval:com.mcafee.oval.windows:var:6578" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Disable Automatic Install of Internet Explorer components" datatype="string" id="oval:com.mcafee.oval.windows:var:6577" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Require trusted path for credential entry" datatype="string" id="oval:com.mcafee.oval.windows:var:6576" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Update device driver searching" datatype="string" id="oval:com.mcafee.oval.windows:var:6573" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off downloading of print drivers over HTTP" datatype="string" id="oval:com.mcafee.oval.windows:var:6572" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off printing over HTTP" datatype="string" id="oval:com.mcafee.oval.windows:var:6571" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Search Companion content file updates" datatype="string" id="oval:com.mcafee.oval.windows:var:6570" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off the Windows Messenger Customer Experience Improvement Program" datatype="string" id="oval:com.mcafee.oval.windows:var:6569" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Internet download for Web publishing and online ordering wizards" datatype="string" id="oval:com.mcafee.oval.windows:var:6568" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off the Publish to Web task for files and folders" datatype="string" id="oval:com.mcafee.oval.windows:var:6567" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="RPC Endpoint Mapper Client Authentication" datatype="string" id="oval:com.mcafee.oval.windows:var:6566" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Restrictions for Unauthenticated RPC clients" datatype="int" id="oval:com.mcafee.oval.windows:var:6565" version="3">
      <possible_value hint="Authenticated">1</possible_value>
      <possible_value hint="Authenticated without exceptions">2</possible_value>
      <possible_value hint="None">0</possible_value>
      <possible_value hint="Disabled / Not Configured">99999</possible_value>
    </external_variable>
    <external_variable comment="Solicited Remote Assistance" datatype="string" id="oval:com.mcafee.oval.windows:var:6564" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Offer Remote Assistance" datatype="string" id="oval:com.mcafee.oval.windows:var:6563" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Registry policy processing" datatype="string" id="oval:com.mcafee.oval.windows:var:6562" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Do not process the run once list" datatype="string" id="oval:com.mcafee.oval.windows:var:6561" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Do not process the legacy run list" datatype="string" id="oval:com.mcafee.oval.windows:var:6560" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Restrict guest access to Security Log" datatype="int" id="oval:com.mcafee.oval.windows:var:6511" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restrict guest access to System Log" datatype="int" id="oval:com.mcafee.oval.windows:var:6510" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restrict guest access to Application Log" datatype="int" id="oval:com.mcafee.oval.windows:var:6509" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Configure Outlook Express" datatype="string" id="oval:com.mcafee.oval.windows:var:6505" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Notify antivirus programs when opening attachments" datatype="string" id="oval:com.mcafee.oval.windows:var:6504" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Hide mechanisms to remove zone information" datatype="string" id="oval:com.mcafee.oval.windows:var:6503" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Do not preserve zone information in file attachments" datatype="string" id="oval:com.mcafee.oval.windows:var:6502" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Prompt for password on resume from hibernate/suspend" datatype="string" id="oval:com.mcafee.oval.windows:var:6501" version="1">
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent access to registry editing tools" datatype="string" id="oval:com.mcafee.oval.windows:var:6500" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Search Service (WSearch) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:614821" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="SNMP Trap Service (SNMPTRAP) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:614321" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="SNMP Service (SNMP) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:614221" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Infrared Monitoring Service (Irmon) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:613921" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Indexing Service" datatype="int" id="oval:com.mcafee.oval.windows:var:613821" version="1">
      <possible_value hint="2 - Automatic">2</possible_value>
      <possible_value hint="3 - Manual">3</possible_value>
      <possible_value hint="4 - Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="IIS Admin Service (IISADMIN) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:613721" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="FTP Publishing Service" datatype="int" id="oval:com.mcafee.oval.windows:var:613621" version="1">
      <possible_value hint="2 - Automatic">2</possible_value>
      <possible_value hint="3 - Manual">3</possible_value>
      <possible_value hint="4 - Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Fax Service" datatype="int" id="oval:com.mcafee.oval.windows:var:613521" version="1">
      <possible_value hint="2 - Automatic">2</possible_value>
      <possible_value hint="3 - Manual">3</possible_value>
      <possible_value hint="4 - Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="DNS Client Service (Dnscache) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:61342" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Background Intelligent Transfer Service (BITS) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:613221" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Turn on Windows Meeting Space audting" datatype="string" id="oval:com.mcafee.oval.windows:var:61281" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not automatically start Windows Messenger initially" datatype="string" id="oval:com.mcafee.oval.windows:var:612261224" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Media Player: Prevent Desktop Shortcut Creation" datatype="string" id="oval:com.mcafee.oval.windows:var:612261223" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Media Player: Prevent Automatic Updates" datatype="string" id="oval:com.mcafee.oval.windows:var:612261222" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Media Player: Do Not Show First Use Dialog Boxes" datatype="string" id="oval:com.mcafee.oval.windows:var:612261221" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prohibit non-administrators from applying vendor signed updates" datatype="string" id="oval:com.mcafee.oval.windows:var:61221" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Installer: Enable user control over installs" datatype="string" id="oval:com.mcafee.oval.windows:var:61211" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Disable IE security prompt for Windows Installer scripts" datatype="string" id="oval:com.mcafee.oval.windows:var:61201" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Explorer: Turn off shell protocol protected mode" datatype="string" id="oval:com.mcafee.oval.windows:var:61191" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Explorer: Turn off Heap termination on corruption" datatype="string" id="oval:com.mcafee.oval.windows:var:61181" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Error Reporting: Display Error Notification" datatype="string" id="oval:com.mcafee.oval.windows:var:61161" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Error Reporting: Disable Windows Error Reporting" datatype="string" id="oval:com.mcafee.oval.windows:var:61151" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Windows Defender: Turn off Windows Defender" datatype="string" id="oval:com.mcafee.oval.windows:var:61131" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Corporate redirection of Customer Experience Improvement uploads" datatype="int" id="oval:com.mcafee.oval.windows:var:61121" version="6">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Calendar" datatype="string" id="oval:com.mcafee.oval.windows:var:61111" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Digitally encrypt or sign secure channel data (always)" datatype="int" id="oval:com.mcafee.oval.windows:var:6111" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn off downloading of enclosures" datatype="string" id="oval:com.mcafee.oval.windows:var:61101" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent IIS Installation" datatype="string" id="oval:com.mcafee.oval.windows:var:61071" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Strengthen default permissions" datatype="int" id="oval:com.mcafee.oval.windows:var:610511" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Require case insensitivity" datatype="int" id="oval:com.mcafee.oval.windows:var:610411" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Use FIPS compliant algorithms" datatype="int" id="oval:com.mcafee.oval.windows:var:610211" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow Automatic Administrative Logon" datatype="int" id="oval:com.mcafee.oval.windows:var:609811" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="LDAP client signing requirements" datatype="int" id="oval:com.mcafee.oval.windows:var:609511" version="3">
      <possible_value hint="None">0</possible_value>
      <possible_value hint="Negotiate signing">1</possible_value>
      <possible_value hint="Require signing">2</possible_value>
    </external_variable>
    <external_variable comment="LAN Manager Authentication Level" datatype="int" id="oval:com.mcafee.oval.windows:var:609411" version="1" />
    <external_variable comment="Require Smart card" datatype="int" id="oval:com.mcafee.oval.windows:var:60821" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Force logoff when logon hours expire" datatype="string" id="oval:com.mcafee.oval.windows:var:6081" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
    </external_variable>
    <external_variable comment="Do not store LAN Manager hash value (Enabled or Disabled)" datatype="string" id="oval:com.mcafee.oval.windows:var:6080" version="1" />
    <external_variable comment="Sharing and security model for local accounts" datatype="int" id="oval:com.mcafee.oval.windows:var:6079" version="3">
      <possible_value hint="Classic - local users authenticate as themselves">0</possible_value>
      <possible_value hint="Guest only - local users authenticate as Guest">1</possible_value>
    </external_variable>
    <external_variable comment="Restrict anonymous access to Named Pipes and Shares" datatype="int" id="oval:com.mcafee.oval.windows:var:6077" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Let Everyone permissions apply to anonymous users" datatype="int" id="oval:com.mcafee.oval.windows:var:60731" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not allow storage of credentials or .NET Passports for network authentication" datatype="int" id="oval:com.mcafee.oval.windows:var:60721" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not allow anonymous enumeration of SAM accounts and shares" datatype="int" id="oval:com.mcafee.oval.windows:var:60711" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not allow anonymous enumeration of SAM accounts" datatype="int" id="oval:com.mcafee.oval.windows:var:60701" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Maximum number of response retransmissions" datatype="int" id="oval:com.mcafee.oval.windows:var:60671" version="3">
      <possible_value hint="No retransmission, half-open connections dropped after 3 seconds">0</possible_value>
      <possible_value hint="3 seconds, half-open connections dropped after 9 seconds">1</possible_value>
      <possible_value hint="3 and 6 seconds, half-open connections dropped after 21 seconds">2</possible_value>
      <possible_value hint="3, 6 and 9 seconds, half-open connections dropped after 45 seconds">3</possible_value>
    </external_variable>
    <external_variable comment="Screen Saver grace period (in seconds)" datatype="int" id="oval:com.mcafee.oval.windows:var:60651" version="3" />
    <external_variable comment="Enable Safe DLL search mode" datatype="int" id="oval:com.mcafee.oval.windows:var:60641" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Perform router discovery" datatype="int" id="oval:com.mcafee.oval.windows:var:60631" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Hide Computer From the Browse List" datatype="int" id="oval:com.mcafee.oval.windows:var:60581" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prevent the dial-up password from being saved" datatype="int" id="oval:com.mcafee.oval.windows:var:605511" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Sign communications (if client agrees)" datatype="int" id="oval:com.mcafee.oval.windows:var:60521" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Server sign communications (always)" datatype="int" id="oval:com.mcafee.oval.windows:var:60511" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Send unencrypted passwords" datatype="int" id="oval:com.mcafee.oval.windows:var:60491" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Sign communications (if server agrees)" datatype="int" id="oval:com.mcafee.oval.windows:var:60481" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Client sign communications (always)" datatype="int" id="oval:com.mcafee.oval.windows:var:60471" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Smart card removal behavior" datatype="string" id="oval:com.mcafee.oval.windows:var:60461" version="3">
      <possible_value hint="No Action">0</possible_value>
      <possible_value hint="Lock Workstation">1</possible_value>
      <possible_value hint="Force Logoff">2</possible_value>
      <possible_value hint="Disconnect if a remote Terminal Service session">3</possible_value>
    </external_variable>
    <external_variable comment="Domain Controller required to unlock" datatype="int" id="oval:com.mcafee.oval.windows:var:60451" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Message title for users attempting to log on" datatype="string" id="oval:com.mcafee.oval.windows:var:60421" version="2" />
    <external_variable comment="Message text for users attempting to log on" datatype="string" id="oval:com.mcafee.oval.windows:var:60411" version="2" />
    <external_variable comment="Do not require CTRL+ALT+DEL" datatype="int" id="oval:com.mcafee.oval.windows:var:60401" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Do not display last user name" datatype="int" id="oval:com.mcafee.oval.windows:var:60391" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Disable machine account password changes" datatype="int" id="oval:com.mcafee.oval.windows:var:60361" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Digitally sign secure channel data" datatype="int" id="oval:com.mcafee.oval.windows:var:60351" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Digitally encrypt secure channel data" datatype="int" id="oval:com.mcafee.oval.windows:var:60331" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restrict Floppy access (0 or 1)" datatype="string" id="oval:com.mcafee.oval.windows:var:60321" version="1" />
    <external_variable comment="Restrict CD-ROM access (0 or 1)" datatype="string" id="oval:com.mcafee.oval.windows:var:60311" version="1" />
    <external_variable comment="Prevent users from installing printer drivers" datatype="int" id="oval:com.mcafee.oval.windows:var:60301" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allowed to format and eject removable media" datatype="string" id="oval:com.mcafee.oval.windows:var:60291" version="3">
      <possible_value hint="Administrators">0</possible_value>
      <possible_value hint="Administrators and Power Users">1</possible_value>
      <possible_value hint="Administrators and Interactive Users">2</possible_value>
    </external_variable>
    <external_variable comment="Allow undock without having to log on" datatype="int" id="oval:com.mcafee.oval.windows:var:60281" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Shut down system immediately if unable to log security audits" datatype="int" id="oval:com.mcafee.oval.windows:var:60271" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prohibit Network Bridge" datatype="string" id="oval:com.mcafee.oval.windows:var:6026" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Audit the use of Backup and Restore privilege" datatype="binary" id="oval:com.mcafee.oval.windows:var:60251" version="2">
      <possible_value hint="Enabled">01</possible_value>
      <possible_value hint="Disabled">00</possible_value>
    </external_variable>
    <external_variable comment="Prohibit Internet Connection Firewall" datatype="string" id="oval:com.mcafee.oval.windows:var:6025" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Audit the access of global system objects" datatype="int" id="oval:com.mcafee.oval.windows:var:60241" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prohibit Internet Connection Sharing" datatype="string" id="oval:com.mcafee.oval.windows:var:6024" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Limit blank passwords" datatype="int" id="oval:com.mcafee.oval.windows:var:60211" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Guest account status" datatype="boolean" id="oval:com.mcafee.oval.windows:var:60201" version="2" />
    <external_variable comment="Administrator account status" datatype="boolean" id="oval:com.mcafee.oval.windows:var:60191" version="2" />
    <external_variable comment="Audit Privilege Use" datatype="string" id="oval:com.mcafee.oval.windows:var:60161" version="1">
      <possible_value hint="Failure only">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success only">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="None">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Audit Level: Audit Policy Change" datatype="string" id="oval:com.mcafee.oval.windows:var:60151" version="1">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit Object Access" datatype="string" id="oval:com.mcafee.oval.windows:var:60141" version="1">
      <possible_value hint="Failure only">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success only">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Success and Failure">AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint="None">AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment="Audit Level: Audit Logon Events" datatype="string" id="oval:com.mcafee.oval.windows:var:60131" version="1">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit Level: Audit Account Management" datatype="string" id="oval:com.mcafee.oval.windows:var:60111" version="1">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit Level: Audit Account Login" datatype="string" id="oval:com.mcafee.oval.windows:var:60101" version="1">
      <possible_value hint="Logs failures only.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Does not log anything.">AUDIT_NONE</possible_value>
      <possible_value hint="Logs successes only.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Logs both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Account lockout counter reset (in seconds)" datatype="int" id="oval:com.mcafee.oval.windows:var:60091" version="4" />
    <external_variable comment="Reversible Password Encryption" datatype="boolean" id="oval:com.mcafee.oval.windows:var:60051" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Password meets complexity requirements" datatype="boolean" id="oval:com.mcafee.oval.windows:var:60041" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Password history (between 0 and 24)" datatype="int" id="oval:com.mcafee.oval.windows:var:60011" version="3" />
    <external_variable comment="LDAP Server Signing Requirements" datatype="int" id="oval:com.mcafee.oval.windows:var:5501" version="3">
      <possible_value hint="None">1</possible_value>
      <possible_value hint="Require signing">2</possible_value>
    </external_variable>
    <external_variable comment="Allow Server Operators To Schedule Tasks" datatype="int" id="oval:com.mcafee.oval.windows:var:5500" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Direct Draw" datatype="int" id="oval:com.mcafee.oval.windows:var:54603" version="2">
      <possible_value hint="Enabled">0</possible_value>
      <possible_value hint="Disabled">1</possible_value>
    </external_variable>
    <external_variable comment="Clear Pagefile at Shutdown" datatype="int" id="oval:com.mcafee.oval.windows:var:54602" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Unsigned non-driver installation behavior" datatype="binary" id="oval:com.mcafee.oval.windows:var:54601" version="4">
      <possible_value hint="Silently succeed (Ignore)">00</possible_value>
      <possible_value hint="Warn but allow installation (Warn)">01</possible_value>
      <possible_value hint="Do not allow installation (Block)">02</possible_value>
    </external_variable>
    <external_variable comment="Screen Saver timeout in seconds. (900 = 15 minutes)" datatype="string" deprecated="false" id="oval:com.mcafee.oval.windows:var:54598" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Enable the Screen Saver." datatype="string" id="oval:com.mcafee.oval.windows:var:54597" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Password protect the screen saver." datatype="string" id="oval:com.mcafee.oval.windows:var:54596" version="1">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not configured</possible_value>
    </external_variable>
    <external_variable comment="Minimum number of free connections" datatype="int" deprecated="false" id="oval:com.mcafee.oval.windows:var:54595" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Max number of quasi-free connections" datatype="int" id="oval:com.mcafee.oval.windows:var:54594" version="3">
      <possible_value hint="10000">10000</possible_value>
      <possible_value hint="15000">15000</possible_value>
      <possible_value hint="20000 (recommended)">20000</possible_value>
      <possible_value hint="40000">40000</possible_value>
      <possible_value hint="80000">80000</possible_value>
      <possible_value hint="160000">160000</possible_value>
    </external_variable>
    <external_variable comment="Enable Dynamic Backlog" datatype="int" id="oval:com.mcafee.oval.windows:var:54593" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Number of connections (10 recommended)" datatype="int" deprecated="false" id="oval:com.mcafee.oval.windows:var:54592" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" />
    <external_variable comment="Client Service for NetWare Service (NWCWorkstation) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54591" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Trivial FTP Daemon Service (TFTPD) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54589" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Telephony Service (TapiSrv) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54588" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Server Service (LanmanServer) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54587" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Storage Notification Service (Remote_Storage_User_Link) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54586" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Server Manager Service (appmgr) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54585" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Registry Service (RemoteRegistry) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54584" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Procedure Call (RPC) Locator Service (RpcLocator) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54583" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Administration Service (srvcsurg) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54582" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Access Auto Connection Manager Service (RasAuto) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54581" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Print Spooler Service (Spooler) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54580" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Print Server for Macintosh Service (MacPrint) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54579" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Network News Transfer Protocol (NNTP) Service (NntpSvc) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54578" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Microsoft POP3 Service (Pop3Svc) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54577" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="License Logging Service (LicenseService) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54576" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Internet Connection Sharing (ICS) Service (SharedAccess) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54575" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="File Server for Macintosh Service (MacFile) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54574" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="File Replication Service (NtFrs) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54573" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="HTTP SSL Service (HTTPFilter) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54572" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Help and Support Service (helpsvc) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54571" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="DHCP Client Service (Dhcp) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:54570" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Status of auditing the use of the backup and restore privilege" datatype="int" id="oval:com.mcafee.oval.windows:var:53" version="1">
      <possible_value hint="Enabled">01</possible_value>
      <possible_value hint="Disabled">00</possible_value>
    </external_variable>
    <external_variable comment="Disable Autoplay" datatype="int" id="oval:com.mcafee.oval.windows:var:51133" version="1">
      <possible_value hint="0 - Autoplay not disabled (or not configured)">0</possible_value>
      <possible_value hint="4 - Autoplay disabled on removable Drives">0</possible_value>
      <possible_value hint="32 - Autoplay disabled on CD-ROM Drives">0</possible_value>
      <possible_value hint="181 - Autoplay disabled on CD-ROM and removable media drives">181</possible_value>
      <possible_value hint="255 - Autoplay Disabled on All Drives">255</possible_value>
      <possible_restriction hint="Other -- enter an integer value of 255 or less">
        <restriction operation="less than or equal">255</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="status of built-in Guest account" datatype="boolean" id="oval:com.mcafee.oval.windows:var:51" version="1" />
    <external_variable comment="Saved Password" datatype="int" id="oval:com.mcafee.oval.windows:var:5020" version="1">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Workstation Administrative Shares" datatype="int" id="oval:com.mcafee.oval.windows:var:5019" version="4">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Automatic restart" datatype="int" id="oval:com.mcafee.oval.windows:var:5018" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Use Certificate Rules" datatype="int" id="oval:com.mcafee.oval.windows:var:5017" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="FIPS" datatype="int" id="oval:com.mcafee.oval.windows:var:5015" version="1">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Force Key Protection" datatype="int" id="oval:com.mcafee.oval.windows:var:5014" version="3">
      <possible_value hint="User input is not required when new keys are stored and used">0</possible_value>
      <possible_value hint="User is prompted when the key is first used">1</possible_value>
      <possible_value hint="User must enter a password each time they use a key">2</possible_value>
    </external_variable>
    <external_variable comment="Recovery console Full Access" datatype="int" id="oval:com.mcafee.oval.windows:var:5013" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Server Always Sign Communications" datatype="boolean" id="oval:com.mcafee.oval.windows:var:5004" version="1">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Display user information" datatype="int" id="oval:com.mcafee.oval.windows:var:5002" version="3">
      <possible_value hint="User display name, domain, and user names">1</possible_value>
      <possible_value hint="User display name only">2</possible_value>
      <possible_value hint="Do not display user information">3</possible_value>
    </external_variable>
    <external_variable comment="Shut down immediately" datatype="boolean" id="oval:com.mcafee.oval.windows:var:5000" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="status of built-in Administrator account" datatype="boolean" id="oval:com.mcafee.oval.windows:var:50" version="1" />
    <external_variable comment="How often keep-alive packets are sent in milliseconds" datatype="int" id="oval:com.mcafee.oval.windows:var:5" version="3">
      <possible_value hint="150000 or 2.5 minutes">150000</possible_value>
      <possible_value hint="300000 or 5 minutes (recommended)">300000</possible_value>
      <possible_value hint="600000 or 10 minutes">600000</possible_value>
      <possible_value hint="1200000 or 20 minutes">1200000</possible_value>
      <possible_value hint="2400000 or 40 minutes">2400000</possible_value>
      <possible_value hint="3600000 or 1 hour">3600000</possible_value>
      <possible_value hint="7200000 or 2 hours (default value)">7200000</possible_value>
    </external_variable>
    <external_variable comment="Audit process tracking" datatype="string" id="oval:com.mcafee.oval.windows:var:42" version="3">
      <possible_value hint="Does not audit.">AUDIT_NONE</possible_value>
      <possible_value hint="Audits only successes.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Audits only failures.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Audits both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Enable PMTU Discovery" datatype="int" id="oval:com.mcafee.oval.windows:var:407" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="TCPMaxPortsExhausted - Number of connections refused" datatype="int" id="oval:com.mcafee.oval.windows:var:406" version="2" />
    <external_variable comment="TcpMaxHalfOpenRetried - Number of connections permitted" datatype="int" id="oval:com.mcafee.oval.windows:var:405" version="2" />
    <external_variable comment="TcpMaxHalfOpen - Number of connections permitted" datatype="int" id="oval:com.mcafee.oval.windows:var:404" version="2" />
    <external_variable comment="PerformRouterDiscovery" datatype="int" id="oval:com.mcafee.oval.windows:var:403" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="CD/DVD Autorun" datatype="int" id="oval:com.mcafee.oval.windows:var:402" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Dr. Watson status" datatype="int" id="oval:com.mcafee.oval.windows:var:401" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Create a memory crash dump file" datatype="int" id="oval:com.mcafee.oval.windows:var:400" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Audit system events" datatype="string" id="oval:com.mcafee.oval.windows:var:38" version="3">
      <possible_value hint="Does not audit.">AUDIT_NONE</possible_value>
      <possible_value hint="Audits only successes.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Audits only failures.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Audits both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit privilege use" datatype="string" id="oval:com.mcafee.oval.windows:var:37" version="3">
      <possible_value hint="Does not audit.">AUDIT_NONE</possible_value>
      <possible_value hint="Audits only successes.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Audits only failures.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Audits both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit policy change" datatype="string" id="oval:com.mcafee.oval.windows:var:36" version="3">
      <possible_value hint="Does not audit.">AUDIT_NONE</possible_value>
      <possible_value hint="Audits only successes.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Audits only failures.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Audits both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit object access" datatype="string" id="oval:com.mcafee.oval.windows:var:35" version="3">
      <possible_value hint="Does not audit.">AUDIT_NONE</possible_value>
      <possible_value hint="Audits only successes.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Audits only failures.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Audits both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Display Error Notification" datatype="int" id="oval:com.mcafee.oval.windows:var:3366994" version="1">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Audit logon events" datatype="string" id="oval:com.mcafee.oval.windows:var:33" version="3">
      <possible_value hint="Does not audit.">AUDIT_NONE</possible_value>
      <possible_value hint="Audits only successes.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Audits only failures.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Audits both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit directory service access" datatype="string" id="oval:com.mcafee.oval.windows:var:32" version="3">
      <possible_value hint="Does not audit.">AUDIT_NONE</possible_value>
      <possible_value hint="Audits only successes.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Audits only failures.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Audits both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Audit account management" datatype="string" id="oval:com.mcafee.oval.windows:var:31" version="3">
      <possible_value hint="Does not audit.">AUDIT_NONE</possible_value>
      <possible_value hint="Audits only successes.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Audits only failures.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Audits both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Max machine account pwd age (in days)" datatype="int" id="oval:com.mcafee.oval.windows:var:30" version="3" />
    <external_variable comment="LDAPEnforceChannelBinding=VAR" datatype="int" id="oval:com.mcafee.oval.windows:var:2937739" version="30000000">
      <possible_value hint="Never">0</possible_value>
      <possible_value hint="When supported">1</possible_value>
      <possible_value hint="Always">2</possible_value>
    </external_variable>
    <external_variable comment="Automatic Logon Setting" datatype="string" id="oval:com.mcafee.oval.windows:var:293" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow automatic detection of dead network gateways" datatype="int" id="oval:com.mcafee.oval.windows:var:292" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Ignore NetBIOS name release requests" datatype="int" id="oval:com.mcafee.oval.windows:var:291" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Allow ICMP redirects" datatype="int" id="oval:com.mcafee.oval.windows:var:290" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Audit account logon events" datatype="string" id="oval:com.mcafee.oval.windows:var:29" version="3">
      <possible_value hint="Does not audit.">AUDIT_NONE</possible_value>
      <possible_value hint="Audits only successes.">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Audits only failures.">AUDIT_FAILURE</possible_value>
      <possible_value hint="Audits both successes and failures.">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="IP source routing protection level" datatype="int" id="oval:com.mcafee.oval.windows:var:289" version="3">
      <possible_value hint="No additional protection, source routed packets are allowed">0</possible_value>
      <possible_value hint="Medium, source routed packets ignored when IP forwarding is enabled">1</possible_value>
      <possible_value hint="Highest protection, source routing is completely disabled">2</possible_value>
    </external_variable>
    <external_variable comment="Wireless Zero Configuration Service (WZCSVC) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:28812" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Syn Attack Protection Level" datatype="int" id="oval:com.mcafee.oval.windows:var:288" version="3">
      <possible_value hint="Typical protection (default)">0</possible_value>
      <possible_value hint="Better protection">1</possible_value>
      <possible_value hint="Best protection (recommended)">2</possible_value>
    </external_variable>
    <external_variable comment="Unsigned driver installation behavior" datatype="binary" id="oval:com.mcafee.oval.windows:var:287" version="5">
      <possible_value hint="Silently succeed (Ignore)">00</possible_value>
      <possible_value hint="Warn but allow installation (Warn)">01</possible_value>
      <possible_value hint="Do not allow installation (Block)">02</possible_value>
    </external_variable>
    <external_variable comment="Minimum session security for servers" datatype="int" id="oval:com.mcafee.oval.windows:var:285" version="4">
      <possible_value hint="Require NTLMv2 session security">524288</possible_value>
      <possible_value hint="Require 128-bit encryption">536870912</possible_value>
      <possible_value hint="Require Both 128-bit encryption and NTLMv2 session security">537395200</possible_value>
      <possible_value hint="No minimum">0</possible_value>
    </external_variable>
    <external_variable comment="Minimum session security for clients" datatype="int" id="oval:com.mcafee.oval.windows:var:284" version="4" />
    <external_variable comment="desired behavior when smart card is removed" datatype="int" id="oval:com.mcafee.oval.windows:var:283" version="1">
      <possible_value hint="no action">0</possible_value>
      <possible_value hint="lock workstation">1</possible_value>
      <possible_value hint="force logoff">2</possible_value>
    </external_variable>
    <external_variable comment="Restrict access to floppy drive to locally logged-on users" datatype="string" id="oval:com.mcafee.oval.windows:var:282" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restrict access to CDROM drive to locally logged-on users" datatype="string" id="oval:com.mcafee.oval.windows:var:281" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Require strong session key" datatype="int" id="oval:com.mcafee.oval.windows:var:278" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="System Log retention method" datatype="int" id="oval:com.mcafee.oval.windows:var:261" version="6">
      <possible_value hint="Events in the System Log should be overwritten as needed">0</possible_value>
      <possible_restriction hint="Events in the System Log should be overwritten when they are X seconds old">
        <restriction operation="less than">4294967295</restriction>
      </possible_restriction>
      <possible_value hint="Events in the System Log should not be overwritten">4294967295</possible_value>
    </external_variable>
    <external_variable comment="Security Log retention method" datatype="int" id="oval:com.mcafee.oval.windows:var:260" version="3">
      <possible_value hint="Events in the Security Log should be overwritten as needed">0</possible_value>
      <possible_restriction hint="Events in the Security Log should be overwritten when they are X seconds old">
        <restriction operation="less than">4294967295</restriction>
      </possible_restriction>
      <possible_value hint="Events in the Security Log should not be overwritten">4294967295</possible_value>
    </external_variable>
    <external_variable comment="Application Log retention method" datatype="int" id="oval:com.mcafee.oval.windows:var:259" version="3">
      <possible_value hint="Events in the Application Log should be overwritten as needed">0</possible_value>
      <possible_restriction hint="Events in the Application Log should be overwritten when they are X seconds old">
        <restriction operation="less than">4294967295</restriction>
      </possible_restriction>
      <possible_value hint="Events in the Application Log should not be overwritten">4294967295</possible_value>
    </external_variable>
    <external_variable comment="number of passwords remembered" datatype="int" id="oval:com.mcafee.oval.windows:var:24" version="1" />
    <external_variable comment="Terminal Services Service (TermService) Startup Type" datatype="int" id="oval:com.mcafee.oval.windows:var:22611" version="3">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Remote Desktop Help Session Manager Service Disabled" datatype="int" id="oval:com.mcafee.oval.windows:var:21811" version="1">
      <possible_value hint="2 - Automatic">2</possible_value>
      <possible_value hint="3 - Manual">3</possible_value>
      <possible_value hint="4 - Disabled">4</possible_value>
    </external_variable>
    <external_variable comment="Disconnect clients when logon hours expire" datatype="int" id="oval:com.mcafee.oval.windows:var:216" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Amount of idle time (in minutes) required before susending session" datatype="int" id="oval:com.mcafee.oval.windows:var:215" version="2" />
    <external_variable comment="maximum size (in bytes) of setup log" datatype="int" id="oval:com.mcafee.oval.windows:var:19898" version="1" />
    <external_variable comment="Application Log size (in bytes)" datatype="int" id="oval:com.mcafee.oval.windows:var:16" version="3" />
    <external_variable comment="Account lockout duration (in seconds)" datatype="int" id="oval:com.mcafee.oval.windows:var:15" version="2" />
    <external_variable comment="Number of days to prompt user to change password before expiration" datatype="int" id="oval:com.mcafee.oval.windows:var:14" version="2" />
    <external_variable comment="are passwords stored using reversible encrption" datatype="boolean" id="oval:com.mcafee.oval.windows:var:13" version="1" />
    <external_variable comment="Minimum password length" datatype="int" id="oval:com.mcafee.oval.windows:var:12" version="3" />
    <external_variable comment="Reset account lockout counter after ( x ) seconds" datatype="int" id="oval:com.mcafee.oval.windows:var:115" version="1" />
    <external_variable comment="Prevent the dial-up password from being saved" datatype="int" id="oval:com.mcafee.oval.windows:var:1110" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="is password complexity enforced" datatype="boolean" id="oval:com.mcafee.oval.windows:var:11" version="1" />
    <external_variable comment="Shut down without logon" datatype="int" id="oval:com.mcafee.oval.windows:var:10311" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="How many times unacknowledged data is retransmitted" datatype="int" id="oval:com.mcafee.oval.windows:var:103" version="2" />
    <external_variable comment="Number of previous logons to cache" datatype="int" id="oval:com.mcafee.oval.windows:var:102" version="2" />
    <external_variable comment="Min pwd age in seconds (86400=1 day)" datatype="int" id="oval:com.mcafee.oval.windows:var:101" version="3" />
    <external_variable comment="Maximum number of bad attempts before lockout" datatype="int" id="oval:com.mcafee.oval.windows:var:10" version="4" />
    <external_variable comment='Percentage threshold for the security event log at which the system will generate a warning' datatype='int' id='oval:com.mcafee.oval.w2k:var:91' version='1' />
    <external_variable comment='Maximum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.w2k:var:90' version='1' />
    <external_variable comment='Digitally sign communications (always)' datatype='int' id='oval:com.mcafee.oval.w2k:var:8411' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='maximum size (in bytes) of system log' datatype='int' id='oval:com.mcafee.oval.w2k:var:84' version='1' />
    <external_variable comment='maximum size (in bytes) of security log' datatype='int' id='oval:com.mcafee.oval.w2k:var:81' version='1' />
    <external_variable comment='WebClientService' datatype='int' id='oval:com.mcafee.oval.w2k:var:7792' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='FastUserSwitchingCompatibilityService' datatype='int' id='oval:com.mcafee.oval.w2k:var:7776' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Enable the computer to stop generating 8.3 style filenames' datatype='int' id='oval:com.mcafee.oval.w2k:var:711' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Simple TCP/IP Services' datatype='int' id='oval:com.mcafee.oval.w2k:var:672021' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='WMI Performance Adapter' datatype='int' id='oval:com.mcafee.oval.w2k:var:6719' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Background Intelligent Transfer Service' datatype='int' id='oval:com.mcafee.oval.w2k:var:613221' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Prevent Desktop Shortcut Creation' datatype='string' id='oval:com.mcafee.oval.w2k:var:612261223' version='1' />
    <external_variable comment='Prevent Automatic Updates' datatype='int' id='oval:com.mcafee.oval.w2k:var:612261222' version='1' />
    <external_variable comment='Do Not Show First Use Dialog Boxes' datatype='int' id='oval:com.mcafee.oval.w2k:var:612261221' version='1' />
    <external_variable comment='Digitally encrypt or sign secure channel data (always)' datatype='int' id='oval:com.mcafee.oval.w2k:var:6111' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Shut down system immediately if unable to log security audits' datatype='int' id='oval:com.mcafee.oval.w2k:var:60271' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit use of Internet Connection Sharing on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.w2k:var:6024' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='LDAP Server Signing Requirements' datatype='int' id='oval:com.mcafee.oval.w2k:var:5501' version='1'>
      <possible_value hint='Require Signing'>2</possible_value>
    </external_variable>
    <external_variable comment='Allow Server Operators To Schedule Tasks' datatype='int' id='oval:com.mcafee.oval.w2k:var:5500' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment="Status of auditing the use of the backup and restore privilege" datatype="int" id="oval:com.mcafee.oval.w2k:var:53" version="2">
      <possible_value hint="Enabled">01</possible_value>
      <possible_value hint="Disabled">00</possible_value>
    </external_variable>
    <external_variable comment='status of limiting the use of blank passwords' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:52' version='1' />
    <external_variable comment='status of built-in Guest account' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:51' version='1' />
    <external_variable comment='Saved Password' datatype='int' id='oval:com.mcafee.oval.w2k:var:5020' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Administrative Shares' datatype='int' id='oval:com.mcafee.oval.w2k:var:5019' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='AutoReboot' datatype='int' id='oval:com.mcafee.oval.w2k:var:5018' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Use Certificate Rules' datatype='int' id='oval:com.mcafee.oval.w2k:var:5017' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Restrict Anonymous Access To Named Pipes and Shares' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:5008' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Server Always Sign Communications' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:5004' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='DisplayUserInformationSessionLocked' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:5002' version='1'>
      <possible_value hint='User display name, domain, and user names'>1</possible_value>
      <possible_value hint='User display name, only'>2</possible_value>
      <possible_value hint='Do not display User information'>3</possible_value>
    </external_variable>
    <external_variable comment='Shut down system immediately if unable to log security audits' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:5000' version='1'>
      <possible_value hint='Disables Shutdown'>0</possible_value>
      <possible_value hint='Enables Shutdown'>1</possible_value>
    </external_variable>
    <external_variable comment='status of built-in Administrator account' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:50' version='1' />
    <external_variable comment='How often keep-alive packets are sent in milliseconds' datatype='int' id='oval:com.mcafee.oval.w2k:var:5' version='1' />
    <external_variable comment='Audit process tracking' datatype='string' id='oval:com.mcafee.oval.w2k:var:42' version='1'>
      <possible_value hint='Does not audit events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Enable PMTU Discovery' datatype='int' id='oval:com.mcafee.oval.w2k:var:407' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='TCPMaxPortsExhausted - Number of connections refused' datatype='int' id='oval:com.mcafee.oval.w2k:var:406' version='1' />
    <external_variable comment='TcpMaxHalfOpenRetried - Number of connections permitted' datatype='int' id='oval:com.mcafee.oval.w2k:var:405' version='1' />
    <external_variable comment='TcpMaxHalfOpen - Number of connections permitted' datatype='int' id='oval:com.mcafee.oval.w2k:var:404' version='1' />
    <external_variable comment='PerformRouterDiscovery' datatype='int' id='oval:com.mcafee.oval.w2k:var:403' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='CDrom Autorun' datatype='int' id='oval:com.mcafee.oval.w2k:var:402' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Should dr. watson be disabled' datatype='int' id='oval:com.mcafee.oval.w2k:var:401' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Create a memory crash dump file' datatype='int' id='oval:com.mcafee.oval.w2k:var:400' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit system events' datatype='string' id='oval:com.mcafee.oval.w2k:var:38' version='1'>
      <possible_value hint='Does not audit attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit privilege use' datatype='string' id='oval:com.mcafee.oval.w2k:var:37' version='1'>
      <possible_value hint='Does not audit attempts by a user in exercising a user right.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts by a user in exercising a user right.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts by a user in exercising a user right.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts by a user in exercising a user right.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit policy change' datatype='string' id='oval:com.mcafee.oval.w2k:var:36' version='1'>
      <possible_value hint='Does not audit attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit object access' datatype='string' id='oval:com.mcafee.oval.w2k:var:35' version='1'>
      <possible_value hint='Does not audit attempts of a user accessing an object that has its own SACL specified.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Prohibit use of Internet Connection Sharing on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.w2k:var:3366993' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit logon events' datatype='string' id='oval:com.mcafee.oval.w2k:var:33' version='1'>
      <possible_value hint='Does not audit attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit directory service access' datatype='string' id='oval:com.mcafee.oval.w2k:var:32' version='1'>
      <possible_value hint='Does not audit attempts to access directory services.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to access directory services.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to access directory services.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to access directory services.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit account management' datatype='string' id='oval:com.mcafee.oval.w2k:var:31' version='1'>
      <possible_value hint='Does not audit attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Maximum machine account password age (in days)' datatype='int' id='oval:com.mcafee.oval.w2k:var:30' version='1' />
    <external_variable comment='Automatic Logon Disabled' datatype='int' id='oval:com.mcafee.oval.w2k:var:293' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow automatic detection of dead network gateways' datatype='int' id='oval:com.mcafee.oval.w2k:var:292' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Ignore NetBIOS name release requests' datatype='int' id='oval:com.mcafee.oval.w2k:var:291' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow ICMP redirects to override OSPF generated routes disabled' datatype='int' id='oval:com.mcafee.oval.w2k:var:290' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit account logon events' datatype='string' id='oval:com.mcafee.oval.w2k:var:29' version='1'>
      <possible_value hint='Does not audit log ons and log offs of a remote computer from this workstation.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed log ons and log offs of a remote computer from this workstation.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='IP source routing protection level' datatype='int' id='oval:com.mcafee.oval.w2k:var:289' version='1' />
    <external_variable comment='Wireless Zero Configuration' datatype='int' id='oval:com.mcafee.oval.w2k:var:28812' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='SynAttackProtectionLevel' datatype='int' id='oval:com.mcafee.oval.w2k:var:288' version='1' />
    <external_variable comment="Specifies how the system responds when a user tries to install device driver files that are not digitally signed." datatype="int" id="oval:com.mcafee.oval.w2k:var:287" version="2">
      <possible_value hint="Silently succeed (Ignore)">00</possible_value>
      <possible_value hint="Warn but allow installation (Warn)">01</possible_value>
      <possible_value hint="Do not allow installation (Block)">02</possible_value>
    </external_variable>
    <external_variable comment='should router discovery be performed on this interface' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:286' version='1'>
      <possible_value hint='Disables router discovery'>0</possible_value>
      <possible_value hint='Enables router discovery'>1</possible_value>
    </external_variable>
    <external_variable comment='Minimum session security for NTLM SSP based (including secure RPC) servers' datatype='int' id='oval:com.mcafee.oval.w2k:var:285' version='1' />
    <external_variable comment="minimum session security for NTLM SSP based (including secure RPC) clients" datatype="int" id="oval:com.mcafee.oval.w2k:var:284" version="1" />
    <external_variable comment='desired behavior when smart card is removed' datatype='int' id='oval:com.mcafee.oval.w2k:var:283' version='1'>
      <possible_value hint='no action'>0</possible_value>
      <possible_value hint='lock workstation'>1</possible_value>
      <possible_value hint='force logoff'>2</possible_value>
    </external_variable>
    <external_variable comment='restrict access to floppy drive to locally logged-on users' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:282' version='1'>
      <possible_value hint='Only locally logged on users are allowed to access the floppy drive.'>1</possible_value>
      <possible_value hint='Access to the floppy drive is not restricted to locally logged on users.'>0</possible_value>
    </external_variable>
    <external_variable comment='restrict access to CDROM drive to locally logged-on users' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:281' version='1'>
      <possible_value hint='Only locally logged on users are allowed to access the CDROM drive.'>1</possible_value>
      <possible_value hint='Access to the CDROM drive is not restricted to locally logged on users.'>0</possible_value>
    </external_variable>
    <external_variable comment='Microsoft network client: Digitally sign communications (always)' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:280' version='1'>
      <possible_value hint='The client policy is set to not always sign packets.'>0</possible_value>
      <possible_value hint='The client policy is set to always sign packets.'>1</possible_value>
    </external_variable>
    <external_variable comment='Require Domain Controller authentication to unlock workstation' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:279' version='1'>
      <possible_value hint='Domain controller authentication is not required to unlock the workstation'>0</possible_value>
      <possible_value hint='Domain controller authentication is required to unlock the workstation'>1</possible_value>
    </external_variable>
    <external_variable comment='Require strong (Windows 2000 or later) session key' datatype='int' id='oval:com.mcafee.oval.w2k:var:278' version='1'>
      <possible_value hint='Requires strong (Windows 2000 or later) session key'>1</possible_value>
      <possible_value hint='Does not require strong (Windows 2000 or later) session key'>0</possible_value>
    </external_variable>
    <external_variable comment='Prevent users from installing printer drivers' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:277' version='1'>
      <possible_value hint='Only Administrators are allowed to add and to delete printer drivers on the local system.'>1</possible_value>
      <possible_value hint='Users are allowed to add and to delete printer drivers on the local system.'>0</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the system log' datatype='int' id='oval:com.mcafee.oval.w2k:var:261' version='1'>
      <possible_value hint='events in the system log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the system log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the system log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the security log' datatype='int' id='oval:com.mcafee.oval.w2k:var:260' version='1'>
      <possible_value hint='events in the security log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the security log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the security log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the application log' datatype='int' id='oval:com.mcafee.oval.w2k:var:259' version='1'>
      <possible_value hint='events in the application log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the application log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the application log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='number of passwords remembered' datatype='int' id='oval:com.mcafee.oval.w2k:var:24' version='1' />
    <external_variable comment='Terminal Services Service' datatype='int' id='oval:com.mcafee.oval.w2k:var:22611' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remote Desktop Help Session Manager Service Disabled' datatype='int' id='oval:com.mcafee.oval.w2k:var:21811' version='1'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Specifies whether the server should force a client to disconnect once the client&#39;s logon time has expired' datatype='int' id='oval:com.mcafee.oval.w2k:var:216' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Amount of idle time (in minutes) required before susending session' datatype='int' id='oval:com.mcafee.oval.w2k:var:215' version='1' />
    <external_variable comment='Specifies whether system can send unencrypted password to third-party SMB servers' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:214' version='1' />
    <external_variable comment='maximum size (in bytes) of application log' datatype='int' id='oval:com.mcafee.oval.w2k:var:16' version='1' />
    <external_variable comment='Account lockout duration (in seconds)' datatype='int' id='oval:com.mcafee.oval.w2k:var:15' version='1' />
    <external_variable comment='Number of days to prompt user to change password before expiration' datatype='int' id='oval:com.mcafee.oval.w2k:var:14' version='1' />
    <external_variable comment='are passwords stored using reversible encrption' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:13' version='1' />
    <external_variable comment='is the local guests group prevented from accessing the system log' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:122' version='1' />
    <external_variable comment='is the local guests group prevented from accessing the sycurity log' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:121' version='1' />
    <external_variable comment='is the local guests group prevented from accessing the application log' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:120' version='1' />
    <external_variable comment='minimum password length' datatype='int' id='oval:com.mcafee.oval.w2k:var:12' version='1' />
    <external_variable comment='Reset account lockout counter after ( x ) seconds' datatype='int' id='oval:com.mcafee.oval.w2k:var:115' version='1' />
    <external_variable comment='Prevent the dial-up password from being saved' datatype='int' id='oval:com.mcafee.oval.w2k:var:1110' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='is password complexity enforced' datatype='boolean' id='oval:com.mcafee.oval.w2k:var:11' version='1' />
    <external_variable comment='Allow system to be shut down without having to log on' datatype='int' id='oval:com.mcafee.oval.w2k:var:10311' version='1'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='How many times unacknowledged data is retransmitted' datatype='int' id='oval:com.mcafee.oval.w2k:var:103' version='1' />
    <external_variable comment='Number of previous logons to cache' datatype='string' id='oval:com.mcafee.oval.w2k:var:102' version='1' />
    <external_variable comment='Minimum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.w2k:var:101' version='1' />
    <external_variable comment='Account lockout threshold (number of bad attempts before lockout)' datatype='int' id='oval:com.mcafee.oval.w2k:var:10' version='1' />
    <external_variable comment="Apply Local Connection Security Rules - Public Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6535" version="4">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Firewall Rules - Public Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6534" version="4">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Unicast Response - Public Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6533" version="5">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Display a Notification - Public Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6532" version="5">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Outbound Connections - Public Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6531" version="3">
      <possible_value hint="Block">Block</possible_value>
      <possible_value hint="Allow (default)">Allow</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Inbound Connections - Public Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6530" version="3">
      <possible_value hint="Block (default)">Block</possible_value>
      <possible_value hint="Block all connections">All</possible_value>
      <possible_value hint="Allow">Allow</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Firewall state - Public Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6529" version="5">
      <possible_value hint="On (recommended)">On</possible_value>
      <possible_value hint="Off">Off</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Connection Security Rules - Private Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6528" version="4">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Firewall Rules - Private Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6527" version="4">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Unicast Response - Private Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6526" version="5">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Display a Notification - Private Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6525" version="5">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Outbound Connections - Private Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6524" version="3">
      <possible_value hint="Block">Block</possible_value>
      <possible_value hint="Allow (default)">Allow</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Inbound Connections - Private Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6523" version="3">
      <possible_value hint="Block (default)">Block</possible_value>
      <possible_value hint="Block all connections">All</possible_value>
      <possible_value hint="Allow">Allow</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Firewall state - Private Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6522" version="5">
      <possible_value hint="On (recommended)">On</possible_value>
      <possible_value hint="Off">Off</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Connection Security Rules - Domain Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6521" version="4">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Apply Local Firewall Rules - Domain Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6520" version="4">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Allow Unicast Response - Domain Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6519" version="5">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Display a Notification - Domain Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6518" version="5">
      <possible_value hint="Yes (default)">Yes</possible_value>
      <possible_value hint="No">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Outbound Connections - Domain Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6517" version="3">
      <possible_value hint="Block">Block</possible_value>
      <possible_value hint="Allow (default)">Allow</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Inbound Connections - Domain Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6516" version="3">
      <possible_value hint="Block (default)">Block</possible_value>
      <possible_value hint="Block all connections">All</possible_value>
      <possible_value hint="Allow">Allow</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Firewall state - Domain Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6515" version="5">
      <possible_value hint="On (recommended)">On</possible_value>
      <possible_value hint="Off">Off</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Logfile size limit - Public Profile (size is kilobytes)" datatype="int" id="oval:com.mcafee.oval.vistafirewall:var:6424" version="4" />
    <external_variable comment="Logfile path and name (public)" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6423" version="5" />
    <external_variable comment="Log Successful Connections - Public Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6422" version="5">
      <possible_value hint="Yes">Yes</possible_value>
      <possible_value hint="No (default)">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Log Dropped Packets - Public Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6421" version="4">
      <possible_value hint="Yes">Yes</possible_value>
      <possible_value hint="No (default)">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Logfile size limit - Private Profile (size is kilobytes)" datatype="int" id="oval:com.mcafee.oval.vistafirewall:var:6414" version="4" />
    <external_variable comment="Logfile path and name (private)" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6413" version="5" />
    <external_variable comment="Log Successful Connections - Private Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6412" version="5">
      <possible_value hint="Yes">Yes</possible_value>
      <possible_value hint="No (default)">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Log Dropped Packets - Private Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6411" version="4">
      <possible_value hint="Yes">Yes</possible_value>
      <possible_value hint="No (default)">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Logfile size limit - Domain Profile (size is kilobytes)" datatype="int" id="oval:com.mcafee.oval.vistafirewall:var:6404" version="4" />
    <external_variable comment="Logfile path and name (domain)" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6403" version="5" />
    <external_variable comment="Log Successful Connections - Domain Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6402" version="5">
      <possible_value hint="Yes">Yes</possible_value>
      <possible_value hint="No (default)">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Log Dropped Packets - Domain Profile" datatype="string" id="oval:com.mcafee.oval.vistafirewall:var:6401" version="4">
      <possible_value hint="Yes">Yes</possible_value>
      <possible_value hint="No (default)">No</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment='maximum size (in bytes) of system log' datatype='int' id='oval:com.mcafee.oval.vista:var:84' version='3' />
    <external_variable comment='maximum size (in bytes) of security log' datatype='int' id='oval:com.mcafee.oval.vista:var:81' version='3' />
    <external_variable comment="Virtualize file and registry write failures to per-user locations" datatype="int" id="oval:com.mcafee.oval.vista:var:8089" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Switch to the secure desktop when prompting for elevation" datatype="int" id="oval:com.mcafee.oval.vista:var:8088" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Run all administrators in Admin Approval Mode" datatype="int" id="oval:com.mcafee.oval.vista:var:8087" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Only elevate UIAccess applications that are installed in secure locations" datatype="int" id="oval:com.mcafee.oval.vista:var:8086" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Only elevate executables that are signed and validated" datatype="int" id="oval:com.mcafee.oval.vista:var:8085" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Detect application installations and prompt for elevation" datatype="int" id="oval:com.mcafee.oval.vista:var:8084" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Behavior of the elevation prompt for standard users" datatype="string" id="oval:com.mcafee.oval.vista:var:8083" version="5">
      <possible_value hint="Automatically deny elevation requests (All)">AutoDeny</possible_value>
      <possible_value hint="Prompt for credentials on the secure desktop (Windows 7 and newer)">SecureCreds</possible_value>
      <possible_value hint="Prompt for credentials (Vista and Server 2008)">PromptCredsOld</possible_value>
      <possible_value hint="Prompt for credentials (Windows 7 and newer)">PromptCredsNew</possible_value>
    </external_variable>
    <external_variable comment="Behavior of the elevation prompt for administrators" datatype="string" id="oval:com.mcafee.oval.vista:var:8082" version="6">
      <possible_value hint="Elevate without prompting (All)">NoPrompt</possible_value>
      <possible_value hint="Prompt for credentials on the secure desktop (Windows 7 and newer)">SecureCreds</possible_value>
      <possible_value hint="Prompt for consent on the secure desktop (Windows 7 and newer)">SecureConsent</possible_value>
      <possible_value hint="Prompt for credentials (Vista and Server 2008)">PromptCredsOld</possible_value>
      <possible_value hint="Prompt for credentials (Windows 7 and newer)">PromptCredsNew</possible_value>
      <possible_value hint="Prompt for consent (Vista and Server 2008)">PromptConsentOld</possible_value>
      <possible_value hint="Prompt for consent (Windows 7 and newer)">PromptConsentNew</possible_value>
      <possible_value hint="Prompt for consent for non-Windows binaries (Windows 7 and newer)">PromptBinaries</possible_value>
    </external_variable>
    <external_variable comment="Admin Approval Mode" datatype="int" id="oval:com.mcafee.oval.vista:var:8081" version="4">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="System Integrity audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8047" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Security System Extension audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8046" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Security State Change audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8045" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Other System Events audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8044" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="IPsec Driver audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8043" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Sensitive Privilege Use audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8042" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Other Privilege Use Events audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8041" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Non Sensitive Privilege Use audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8040" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Other Policy Change Events audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8039" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="MPSSVC Rule-Level Policy Change audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8038" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Filtering Platform Policy Change audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8037" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Authorization Policy Change audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8036" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Authentication Policy Change audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8035" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit Policy Change audit subcategory.' datatype='string' id='oval:com.mcafee.oval.vista:var:8034' version='2'>
      <possible_value hint='No Auditing'>AUDIT_NONE</possible_value>
      <possible_value hint='Success'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Failure'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Success, Failure (both)'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="SAM audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8033" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Registry audit subcategory.' datatype='string' id='oval:com.mcafee.oval.vista:var:8032' version='2'>
      <possible_value hint='No Auditing'>AUDIT_NONE</possible_value>
      <possible_value hint='Success'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Failure'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Success, Failure (both)'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Other Object Access Events audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8031" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Kernel Object audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8030" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Handle Manipulation audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8029" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Filtering Platform Packet Drop audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8028" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Filtering Platform Connection audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8027" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="File System audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8026" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="File Share audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8025" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Certification Services audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8024" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Application Generated audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8023" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Special Logon audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8022" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Other Logon/Logoff Events audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8021" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Logon audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8020" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Logoff audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8019" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="IPsec Quick Mode audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8018" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="IPsec Main Mode audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8017" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="IPsec Extended Mode audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8016" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Account Lockout audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8015" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Directory Service Replication audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8014" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Directory Service Changes audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8013" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Directory Service Access audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8012" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Detailed Directory Service Replication audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8011" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="RPC Events audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8010" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Process Termination audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8009" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Process Creation audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8008" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="DPAPI Activity audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8007" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="User Account Management audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8006" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Security Group Management audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8005" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Other Account Management Events audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8004" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Distribution Group Management audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8003" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Computer Account Management audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8002" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment="Application Group Management audit subcategory." datatype="string" id="oval:com.mcafee.oval.vista:var:8001" version="3">
      <possible_value hint="No Auditing">AUDIT_NONE</possible_value>
      <possible_value hint="Success">AUDIT_SUCCESS</possible_value>
      <possible_value hint="Failure">AUDIT_FAILURE</possible_value>
      <possible_value hint="Success, Failure (both)">AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Configure Microsoft SpyNet Reporting (0, 1 or 2)' datatype='int' id='oval:com.mcafee.oval.vista:var:6727' version='2' />
    <external_variable comment='Set a time limit (in milliseconds) for disconnected sessions' datatype='int' id='oval:com.mcafee.oval.vista:var:6726' version='2' />
    <external_variable comment='Set a time limit (in milliseconds) for active but idle Terminal Services sessions' datatype='int' id='oval:com.mcafee.oval.vista:var:6725' version='2' />
    <external_variable comment='Prevent users from sharing files within their profile' datatype='string' id='oval:com.mcafee.oval.vista:var:6715' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Prompt for password on resume from hibernate / suspend' datatype='string' id='oval:com.mcafee.oval.vista:var:6714' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Screen Saver timeout (in seconds)' datatype='string' id='oval:com.mcafee.oval.vista:var:6708' version='2' />
    <external_variable comment='Password protect the screen saver' datatype='string' id='oval:com.mcafee.oval.vista:var:6707' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Prevent indexing uncached Exchange folders' datatype='string' id='oval:com.mcafee.oval.vista:var:6705' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Allow indexing of encrypted files' datatype='string' id='oval:com.mcafee.oval.vista:var:6704' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Downloading of Game Information' datatype='string' id='oval:com.mcafee.oval.vista:var:6703' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not allow Digital Locker to run' datatype='string' id='oval:com.mcafee.oval.vista:var:6698' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Windows Movie Maker Saving to Online Video Hosting Provider' datatype='string' id='oval:com.mcafee.oval.vista:var:6697' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Windows Movies Maker Automatic Codec Downloads' datatype='string' id='oval:com.mcafee.oval.vista:var:6696' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Approved Installation Sites for ActiveX Controls' datatype='string' id='oval:com.mcafee.oval.vista:var:6695' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn on session logging' datatype='string' id='oval:com.mcafee.oval.vista:var:6694' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Require a Password when a Computer Wakes (Plugged)' datatype='string' id='oval:com.mcafee.oval.vista:var:6690' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Require a Password when a Computer Wakes (On Battery)' datatype='string' id='oval:com.mcafee.oval.vista:var:6689' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Startup Sound' datatype='string' id='oval:com.mcafee.oval.vista:var:6688' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Don’t Display the Getting Started Welcome Screen at Logon' datatype='string' id='oval:com.mcafee.oval.vista:var:6687' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Always Use Classic Logon' datatype='string' id='oval:com.mcafee.oval.vista:var:6686' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Windows Movie Maker Online Web Links' datatype='string' id='oval:com.mcafee.oval.vista:var:6684' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Error Reporting' datatype='string' id='oval:com.mcafee.oval.vista:var:6683' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off the Order Prints Picture Task' datatype='string' id='oval:com.mcafee.oval.vista:var:6682' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Registration if URL Connection is Referring to Microsoft.com' datatype='string' id='oval:com.mcafee.oval.vista:var:6681' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Internet File Association Service' datatype='string' id='oval:com.mcafee.oval.vista:var:6680' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com' datatype='string' id='oval:com.mcafee.oval.vista:var:6679' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Handwriting Reconition Error Reporting' datatype='string' id='oval:com.mcafee.oval.vista:var:6676' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Event Views Events.asp Links' datatype='string' id='oval:com.mcafee.oval.vista:var:6675' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Automatic Root Certificates Update' datatype='string' id='oval:com.mcafee.oval.vista:var:6674' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Registry Policy - Variable' datatype='int' id='oval:com.mcafee.oval.vista:var:6672' version='1'>
      <possible_value hint='not configured'>-1</possible_value>
      <possible_value hint='disabled'>0</possible_value>
      <possible_value hint='enabled:nobackgroundpolicy'>1</possible_value>
      <possible_value hint='enabled:nogpolistchanges'>2</possible_value>
      <possible_value hint='enabled:nobackgroundpolicy_and_nogpolistchanges'>3</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Windows Update Device Driver Search Prompt - Variable' datatype='int' id='oval:com.mcafee.oval.vista:var:6670' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not send a Windows Error Report when a generic driver is installed on a device - Variable' datatype='int' id='oval:com.mcafee.oval.vista:var:6669' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not create system restore point when new device driver installed - Variable' datatype='int' id='oval:com.mcafee.oval.vista:var:6668' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow remote access to the PnP interface - Variable' datatype='int' id='oval:com.mcafee.oval.vista:var:6667' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Prohibit access to WCN wizards" datatype="int" id="oval:com.mcafee.oval.vista:var:6666" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Wireless settings configuration" datatype="int" id="oval:com.mcafee.oval.vista:var:6665" version="4">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Microsoft Peer-to-Peer Networking Services - Variable' datatype='boolean' id='oval:com.mcafee.oval.vista:var:6662' version='1' />
    <external_variable comment='Turn on Responder (RSPNDR) driver - Variable' datatype='boolean' id='oval:com.mcafee.oval.vista:var:6661' version='1' />
    <external_variable comment='Turn on Mapper I/O (LLTDIO) driver - Variable' datatype='boolean' id='oval:com.mcafee.oval.vista:var:6660' version='1' />
    <external_variable comment='Do not allow Windows Messenger to be run' datatype='string' id='oval:com.mcafee.oval.vista:var:6601' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Set client connection encryption level' datatype='int' id='oval:com.mcafee.oval.vista:var:6600' version='1' />
    <external_variable comment='Always prompt client for password upon connection' datatype='string' id='oval:com.mcafee.oval.vista:var:6599' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not allow drive redirection' datatype='string' id='oval:com.mcafee.oval.vista:var:6598' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not allow passwords to be saved' datatype='string' id='oval:com.mcafee.oval.vista:var:6596' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Disable remote Desktop Sharing' datatype='string' id='oval:com.mcafee.oval.vista:var:6595' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Enumerate administrator accounts on elevation' datatype='string' id='oval:com.mcafee.oval.vista:var:6575' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Disable Autoplay' datatype='int' id='oval:com.mcafee.oval.vista:var:6574' version='1' />
    <external_variable comment='Turn off Windows Update device driver searching' datatype='string' id='oval:com.mcafee.oval.vista:var:6573' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off downloading of print drivers over HTTP' datatype='string' id='oval:com.mcafee.oval.vista:var:6572' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off printing over HTTP' datatype='string' id='oval:com.mcafee.oval.vista:var:6571' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Search Companion content file updates' datatype='string' id='oval:com.mcafee.oval.vista:var:6570' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off the Windows Messenger Customer Experience Improvement Program' datatype='string' id='oval:com.mcafee.oval.vista:var:6569' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Internet download for Web publishing and online ordering wizards' datatype='string' id='oval:com.mcafee.oval.vista:var:6568' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off the Publish to Web task for files and folders' datatype='string' id='oval:com.mcafee.oval.vista:var:6567' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Disable ISATAP, Teredo, and 6to4 tunneling protocols' datatype='int' id='oval:com.mcafee.oval.vista:var:6566666' version='1' />
    <external_variable comment='RPC Endpoint Mapper Client Authentication' datatype='string' id='oval:com.mcafee.oval.vista:var:6566' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Restrictions for Unauthenticated RPC clients' datatype='int' id='oval:com.mcafee.oval.vista:var:6565' version='1' />
    <external_variable comment='Solicited Remote Assistance' datatype='string' id='oval:com.mcafee.oval.vista:var:6564' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Offer Remote Assistance' datatype='string' id='oval:com.mcafee.oval.vista:var:6563' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not process the run once list' datatype='string' id='oval:com.mcafee.oval.vista:var:6561' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Notify antivirus programs when opening attachments' datatype='string' id='oval:com.mcafee.oval.vista:var:6504' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Hide mechanisms to remove zone information' datatype='string' id='oval:com.mcafee.oval.vista:var:6503' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not preserve zone information in file attachments' datatype='string' id='oval:com.mcafee.oval.vista:var:6502' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment="WLAN AutoConfig Service (Wlansvc) Startup Type" datatype="int" id="oval:com.mcafee.oval.vista:var:6148211" version="4">
      <possible_value hint="Automatic">2</possible_value>
      <possible_value hint="Manual">3</possible_value>
      <possible_value hint="Disabled">4</possible_value>
    </external_variable>
    <external_variable comment='Turn Off User Installed Windows Sidebar Gidgets' datatype='int' id='oval:com.mcafee.oval.vista:var:61311' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable unpacking and installation of gadgets that are not digitally signed' datatype='int' id='oval:com.mcafee.oval.vista:var:61291' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Meeting Space' datatype='int' id='oval:com.mcafee.oval.vista:var:61271' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prevent Windows Media DRM Internet Access' datatype='int' id='oval:com.mcafee.oval.vista:var:61261' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Mail application' datatype='int' id='oval:com.mcafee.oval.vista:var:61251' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off the communitication features' datatype='int' id='oval:com.mcafee.oval.vista:var:61241' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Report Logon Server Not Available During User logon' datatype='int' id='oval:com.mcafee.oval.vista:var:61231' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not automatically start Windows Messenger initially' datatype='int' id='oval:com.mcafee.oval.vista:var:612261224' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prevent Desktop Shortcut Creation' datatype='string' id='oval:com.mcafee.oval.vista:var:612261223' version='1' />
    <external_variable comment='Prevent Automatic Updates' datatype='int' id='oval:com.mcafee.oval.vista:var:612261222' version='1' />
    <external_variable comment='Do Not Show First Use Dialog Boxes' datatype='int' id='oval:com.mcafee.oval.vista:var:612261221' version='1' />
    <external_variable comment='Prohibit non-administrators from applying vendor signed updates' datatype='int' id='oval:com.mcafee.oval.vista:var:61221' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Enable user control over installs' datatype='int' id='oval:com.mcafee.oval.vista:var:61211' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable IE security prompt for Windows Installer scripts' datatype='int' id='oval:com.mcafee.oval.vista:var:61201' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off shell protocol protected mode' datatype='int' id='oval:com.mcafee.oval.vista:var:61191' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off Heap termination on corruption' datatype='int' id='oval:com.mcafee.oval.vista:var:61181' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do Not Send Additional Data' datatype='int' id='oval:com.mcafee.oval.vista:var:61171' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable Windows Error Reporting' datatype='int' id='oval:com.mcafee.oval.vista:var:61151' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable Logging' datatype='int' id='oval:com.mcafee.oval.vista:var:61141' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off downloading of enclosures' datatype='int' id='oval:com.mcafee.oval.vista:var:61101' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off Untrusted Content' datatype='int' id='oval:com.mcafee.oval.vista:var:61091' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off Active Help' datatype='int' id='oval:com.mcafee.oval.vista:var:61081' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prevent IIS Installation' datatype='int' id='oval:com.mcafee.oval.vista:var:61071' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Strengthen default permissions of internal system objects' datatype='int' id='oval:com.mcafee.oval.vista:var:610511' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Require case insensitivity for non-Windows subsystems' datatype='int' id='oval:com.mcafee.oval.vista:var:610411' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Use FIPS compliant algorithms for encryption, hashing, and signing' datatype='int' id='oval:com.mcafee.oval.vista:var:610211' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Clear Virtual Memory Pagefile' datatype='int' id='oval:com.mcafee.oval.vista:var:610111' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow System to be Shut Down Without Having to Log On' datatype='int' id='oval:com.mcafee.oval.vista:var:610011' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow Floppy Copy and Access to All Drives and All Folders' datatype='int' id='oval:com.mcafee.oval.vista:var:609911' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow Automatic Administrative Logon' datatype='int' id='oval:com.mcafee.oval.vista:var:609811' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Minimum session security for NTLM SSP based (including secure RPC) servers' datatype='int' id='oval:com.mcafee.oval.vista:var:609711' version='1' />
    <external_variable comment='Minimum session security for NTLM SSP based (including secure RPC) clients' datatype='int' id='oval:com.mcafee.oval.vista:var:609611' version='1' />
    <external_variable comment='LDAP client signing requirements' datatype='int' id='oval:com.mcafee.oval.vista:var:609511' version='1' />
    <external_variable comment='LAN Manager Authentication Level' datatype='int' id='oval:com.mcafee.oval.vista:var:609411' version='1' />
    <external_variable comment='Network security: Force logoff when logon hours expire' datatype='int' id='oval:com.mcafee.oval.vista:var:6081' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not store LAN Manager hash value on next password change (Enabled or Disabled)' datatype='string' id='oval:com.mcafee.oval.vista:var:6080' version='2' />
    <external_variable comment='Sharing and security model (0 or 1)' datatype='int' id='oval:com.mcafee.oval.vista:var:6079' version='2' />
    <external_variable comment='Network access: Restrict anonymous access to Named Pipes and Shares' datatype='int' id='oval:com.mcafee.oval.vista:var:6077' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Let Everyone permissions apply to anonymous users' datatype='int' id='oval:com.mcafee.oval.vista:var:60731' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not allow storage of credentials or .NET Passports' datatype='int' id='oval:com.mcafee.oval.vista:var:60721' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not allow anonymous enumeration of SAM accounts and shares' datatype='int' id='oval:com.mcafee.oval.vista:var:60711' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not allow anonymous enumeration of SAM accounts' datatype='int' id='oval:com.mcafee.oval.vista:var:60701' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Warning Level percentage (50%-90%)' datatype='int' id='oval:com.mcafee.oval.vista:var:60691' version='2' />
    <external_variable comment='Max Data Retransmissions (3 is recommended, 5 is default)' datatype='int' id='oval:com.mcafee.oval.vista:var:60681' version='2' />
    <external_variable comment='Max Connect Response Retransmissions (0, 1, 2 or 3)' datatype='int' id='oval:com.mcafee.oval.vista:var:60671' version='2' />
    <external_variable comment='Syn attack protection level (0 or 1)' datatype='int' id='oval:com.mcafee.oval.vista:var:60661' version='2' />
    <external_variable comment='Screen Saver Grace Period (in seconds)' datatype='string' id='oval:com.mcafee.oval.vista:var:60651' version='2' />
    <external_variable comment='Enable Safe DLL search mode' datatype='int' id='oval:com.mcafee.oval.vista:var:60641' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Perform Router Discovery' datatype='int' id='oval:com.mcafee.oval.vista:var:60631' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable 8.3 Name Creation' datatype='int' id='oval:com.mcafee.oval.vista:var:60621' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Ignore NetBIOS name release requests' datatype='int' id='oval:com.mcafee.oval.vista:var:60611' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='How often keep-alive packets are sent (in milliseconds)' datatype='int' id='oval:com.mcafee.oval.vista:var:60591' version='2' />
    <external_variable comment='Hide Computer From the Browse List' datatype='int' id='oval:com.mcafee.oval.vista:var:60581' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow ICMP redirects' datatype='int' id='oval:com.mcafee.oval.vista:var:60571' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow automatic detection of dead network gateways' datatype='int' id='oval:com.mcafee.oval.vista:var:60561' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='IP source routing protection level' datatype='int' id='oval:com.mcafee.oval.vista:var:60551' version='2' />
    <external_variable comment='Enable Automatic Logon' datatype='int' id='oval:com.mcafee.oval.vista:var:60541' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disconnect clients when logon hours expire' datatype='int' id='oval:com.mcafee.oval.vista:var:60531' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign communications (if client agrees)' datatype='int' id='oval:com.mcafee.oval.vista:var:60521' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign communications (always)' datatype='int' id='oval:com.mcafee.oval.vista:var:60511' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Amount of idle time (in minutes) required before suspending session' datatype='int' id='oval:com.mcafee.oval.vista:var:60501' version='2' />
    <external_variable comment='Send unencrypted password to third-party SMB servers' datatype='int' id='oval:com.mcafee.oval.vista:var:60491' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign communications (if server agrees)' datatype='int' id='oval:com.mcafee.oval.vista:var:60481' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign communications (always)' datatype='int' id='oval:com.mcafee.oval.vista:var:60471' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Smart card removal behavior (0, 1, 2 or 3)' datatype='string' id='oval:com.mcafee.oval.vista:var:60461' version='2' />
    <external_variable comment='Require Domain Controller authentication to unlock workstation' datatype='int' id='oval:com.mcafee.oval.vista:var:60451' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prompt user to change password ( x ) days before expiration' datatype='int' id='oval:com.mcafee.oval.vista:var:60441' version='2' />
    <external_variable comment='Number of previous logons to cache' datatype='string' id='oval:com.mcafee.oval.vista:var:60431' version='2' />
    <external_variable comment='Message title for users attempting to log on' datatype='string' id='oval:com.mcafee.oval.vista:var:60421' version='2' />
    <external_variable comment='Message text for users attempting to log on' datatype='string' id='oval:com.mcafee.oval.vista:var:60411' version='2' />
    <external_variable comment='Do not require CTRL+ALT+DEL' datatype='int' id='oval:com.mcafee.oval.vista:var:60401' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not display last user name' datatype='int' id='oval:com.mcafee.oval.vista:var:60391' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Require strong session key' datatype='int' id='oval:com.mcafee.oval.vista:var:60381' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Maximum machine account password age (in days)' datatype='int' id='oval:com.mcafee.oval.vista:var:60371' version='2' />
    <external_variable comment='Disable machine account password changes' datatype='int' id='oval:com.mcafee.oval.vista:var:60361' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign secure channel data (when possible)' datatype='int' id='oval:com.mcafee.oval.vista:var:60351' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally encrypt or sign secure channel data (always)' datatype='int' id='oval:com.mcafee.oval.vista:var:60341' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally encrypt or sign secure channel data (when possible)' datatype='int' id='oval:com.mcafee.oval.vista:var:60331' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Restrict Floppy access to locally logged-on user only (0 or 1)' datatype='string' id='oval:com.mcafee.oval.vista:var:60321' version='2' />
    <external_variable comment='Restrict CD-ROM access to locally logged-on user only (0 or 1)' datatype='string' id='oval:com.mcafee.oval.vista:var:60311' version='2' />
    <external_variable comment='Prevent users from installing printer drivers' datatype='int' id='oval:com.mcafee.oval.vista:var:60301' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allowed to format and eject removable media (0, 1 or 2)' datatype='string' id='oval:com.mcafee.oval.vista:var:60291' version='2' />
    <external_variable comment='Allow undock without having to log on' datatype='int' id='oval:com.mcafee.oval.vista:var:60281' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Shut down system immediately if unable to log security audits' datatype='int' id='oval:com.mcafee.oval.vista:var:60271' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Comments need to be added' datatype='int' id='oval:com.mcafee.oval.vista:var:60261' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Comments need to be added' datatype='binary' id='oval:com.mcafee.oval.vista:var:60251' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Comments need to be added' datatype='int' id='oval:com.mcafee.oval.vista:var:60241' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Limit local account use to blank passwords to console logon only' datatype='int' id='oval:com.mcafee.oval.vista:var:60211' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Guest account status' datatype='boolean' id='oval:com.mcafee.oval.vista:var:60201' version='2' />
    <external_variable comment='Reset Account Lockout Counter After ( x ) seconds' datatype='int' id='oval:com.mcafee.oval.vista:var:60091' version='2' />
    <external_variable comment='Account Lockout Threshold (number of bad logon attempts)' datatype='int' id='oval:com.mcafee.oval.vista:var:60081' version='2' />
    <external_variable comment='Account Lockout Duration (in seconds)' datatype='int' id='oval:com.mcafee.oval.vista:var:60071' version='2' />
    <external_variable comment='Minimum Password Length' datatype='int' id='oval:com.mcafee.oval.vista:var:60061' version='2' />
    <external_variable comment='Passwords are stored using reversible encryption' datatype='boolean' id='oval:com.mcafee.oval.vista:var:60051' version='2' />
    <external_variable comment='The password must meet complexity requirements' datatype='boolean' id='oval:com.mcafee.oval.vista:var:60041' version='2' />
    <external_variable comment='Minimum Password Age (in seconds)' datatype='int' id='oval:com.mcafee.oval.vista:var:60031' version='2' />
    <external_variable comment='Maximum Password Age (in seconds)' datatype='int' id='oval:com.mcafee.oval.vista:var:60021' version='2' />
    <external_variable comment='Comments need to be added' datatype='int' id='oval:com.mcafee.oval.vista:var:60011' version='1' />
    <external_variable comment='Audit process tracking' datatype='string' id='oval:com.mcafee.oval.vista:var:42' version='1'>
      <possible_value hint='Does not audit events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Enable PMTU Discovery' datatype='int' id='oval:com.mcafee.oval.vista:var:407' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit system events' datatype='string' id='oval:com.mcafee.oval.vista:var:38' version='1'>
      <possible_value hint='Does not audit attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit privilege use' datatype='string' id='oval:com.mcafee.oval.vista:var:37' version='1'>
      <possible_value hint='Does not audit attempts by a user in exercising a user right.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts by a user in exercising a user right.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts by a user in exercising a user right.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts by a user in exercising a user right.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit policy change' datatype='string' id='oval:com.mcafee.oval.vista:var:36' version='1'>
      <possible_value hint='Does not audit attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit object access' datatype='string' id='oval:com.mcafee.oval.vista:var:35' version='1'>
      <possible_value hint='Does not audit attempts of a user accessing an object that has its own SACL specified.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Display Error Notification' datatype='int' id='oval:com.mcafee.oval.vista:var:3366994' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit use of Internet Connection Sharing on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.vista:var:3366993' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit use of Internet Connection Firewall on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.vista:var:3366992' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit installation and configuration of Network Bridge on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.vista:var:3366991' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit logon events' datatype='string' id='oval:com.mcafee.oval.vista:var:33' version='1'>
      <possible_value hint='Does not audit attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit directory service access' datatype='string' id='oval:com.mcafee.oval.vista:var:32' version='1'>
      <possible_value hint='Does not audit attempts to access directory services.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to access directory services.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to access directory services.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to access directory services.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit account management' datatype='string' id='oval:com.mcafee.oval.vista:var:31' version='1'>
      <possible_value hint='Does not audit attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit account logon events' datatype='string' id='oval:com.mcafee.oval.vista:var:29' version='1'>
      <possible_value hint='Does not audit log ons and log offs of a remote computer from this workstation.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed log ons and log offs of a remote computer from this workstation.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='maximum size (in bytes) of setup log' datatype='int' id='oval:com.mcafee.oval.vista:var:19898' version='3' />
    <external_variable comment='maximum size (in bytes) of application log' datatype='int' id='oval:com.mcafee.oval.vista:var:16' version='3' />
    <external_variable comment="MK Protocol Security Restriction\Internet Explorer Processes (Iexplore)" datatype="int" id="oval:com.mcafee.oval.ie7:var:988" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Internet Zone: Download Signed ActiveX Controls" datatype="int" id="oval:com.mcafee.oval.ie7:var:98299" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Internet Zone: Display mixed content" datatype="int" id="oval:com.mcafee.oval.ie7:var:982" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Use Pop-up Blocker" datatype="int" id="oval:com.mcafee.oval.ie7:var:980" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment='Disable Software Update Shell Notifications on Program Launch' datatype='int' id='oval:com.mcafee.oval.ie7:var:977' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Download unsigned ActiveX controls" datatype="int" id="oval:com.mcafee.oval.ie7:var:973" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Internet Zone: Download unsigned ActiveX controls" datatype="int" id="oval:com.mcafee.oval.ie7:var:969" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:965" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Custom">8388608</possible_value>
      <possible_value hint="Disable Java">0</possible_value>
      <possible_value hint="High Safety">65536</possible_value>
      <possible_value hint="Low Safety">196608</possible_value>
      <possible_value hint="Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment='Do Not Allow Users to enable or Disable Add-Ons is disabled' datatype='int' id='oval:com.mcafee.oval.ie7:var:962' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Intranet Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:960" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Custom">8388608</possible_value>
      <possible_value hint="Enabled: Disable Java">0</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment="Disable AutoComplete for forms (allowed value = 1)" datatype="int" id="oval:com.mcafee.oval.ie7:var:956" version="3">
      <possible_value hint="Enabled or Disabled = 1">1</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Web sites in less privileged Web content zones can navigate into this zone" datatype="int" id="oval:com.mcafee.oval.ie7:var:95" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Scripted Window Security Restrictions\Internet Explorer Processes (Reserved)" datatype="int" id="oval:com.mcafee.oval.ie7:var:942" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Script ActiveX controls marked safe for scripting" datatype="int" id="oval:com.mcafee.oval.ie7:var:940" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off changing the URL to be displayed for checking updates to Internet Explorer" datatype="int" id="oval:com.mcafee.oval.ie7:var:935" version="6">
      <possible_value hint="Disabled/Not Configured">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Restrict ActiveX Install\Internet Explorer Processes (Iexplore)" datatype="int" id="oval:com.mcafee.oval.ie7:var:930" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Trusted Sites Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:926" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Custom">8388608</possible_value>
      <possible_value hint="Enabled: Disable Java">0</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Run .NET Framework-reliant components signed with Authenticode" datatype="int" id="oval:com.mcafee.oval.ie7:var:921" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Loose or un-compiled XAML files" datatype="int" id="oval:com.mcafee.oval.ie7:var:916" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Navigate windows and frames across different domains" datatype="int" id="oval:com.mcafee.oval.ie7:var:909" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Consistent Mime Handling\Internet Explorer Processes (Iexplore)" datatype="int" id="oval:com.mcafee.oval.ie7:var:902" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Turn on the auto-complete feature for user names and passwords on forms (allowed value is 1)" datatype="int" id="oval:com.mcafee.oval.ie7:var:879" version="3">
      <possible_value hint="Enabled or Disabled = 1">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow drag and drop or copy and paste files" datatype="int" id="oval:com.mcafee.oval.ie7:var:877" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment='Disable external branding of Internet Explorer' datatype='int' id='oval:com.mcafee.oval.ie7:var:848' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Restrict File Download\Internet Explorer Processes (Reserved)" datatype="int" id="oval:com.mcafee.oval.ie7:var:837" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Prevent participation in the Customer Experience Improvement Program" datatype="string" id="oval:com.mcafee.oval.ie7:var:821" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Download signed ActiveX controls" datatype="int" id="oval:com.mcafee.oval.ie7:var:803" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Advanced Page: Automatically Check for Internet Explorer Updates" datatype="string" id="oval:com.mcafee.oval.ie7:var:802" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Web / XAML Browser Applications" datatype="int" id="oval:com.mcafee.oval.ie7:var:8" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Disable AutoComplete for forms (allowed values are yes or no)" datatype="string" id="oval:com.mcafee.oval.ie7:var:798" version="3">
      <possible_value hint="Enabled">no</possible_value>
      <possible_value hint="Disabled">yes</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Userdata persistence" datatype="int" id="oval:com.mcafee.oval.ie7:var:797" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Allow script-initiated windows without constraints" datatype="int" id="oval:com.mcafee.oval.ie7:var:795" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Scripting of Java applets" datatype="int" id="oval:com.mcafee.oval.ie7:var:780" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Scripted Window Security Restrictions\Internet Explorer Processes (Explorer)" datatype="int" id="oval:com.mcafee.oval.ie7:var:774" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Local Machine Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:767" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Custom">8388608</possible_value>
      <possible_value hint="Enabled: Disable Java">0</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Automatic prompting for file downloads" datatype="int" id="oval:com.mcafee.oval.ie7:var:763" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Allow Software to Run or Install Even if the Signature is Invalid" datatype="string" id="oval:com.mcafee.oval.ie7:var:762" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Trusted Sites Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:758" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Custom">8388608</possible_value>
      <possible_value hint="Enabled: Disable Java">0</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Launching applications and files in an IFRAME" datatype="int" id="oval:com.mcafee.oval.ie7:var:754" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Access data sources across domains" datatype="int" id="oval:com.mcafee.oval.ie7:var:749" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Logon options" datatype="int" id="oval:com.mcafee.oval.ie7:var:723" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Anonymous logon">196608</possible_value>
      <possible_value hint="Enabled: Automatic only in Intranet zone">131072</possible_value>
      <possible_value hint="Enabled: Automatic with current user">0</possible_value>
      <possible_value hint="Enabled: Prompt for information">65536</possible_value>
    </external_variable>
    <external_variable comment="Protection From Zone Elevation\Internet Explorer Processes (Explorer)" datatype="int" id="oval:com.mcafee.oval.ie7:var:720" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Make Proxy Settings Per-Machine (Rather Then Per-User)" datatype="string" id="oval:com.mcafee.oval.ie7:var:710" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Protection From Zone Elevation\Internet Explorer Processes (Reserved)" datatype="int" id="oval:com.mcafee.oval.ie7:var:698" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Allow font downloads" datatype="int" id="oval:com.mcafee.oval.ie7:var:697" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restrict File Download\Internet Explorer Processes (Iexplore)" datatype="int" id="oval:com.mcafee.oval.ie7:var:687" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Turn On Protected Mode" datatype="int" id="oval:com.mcafee.oval.ie7:var:68699" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Turn Off First-Run Opt-In" datatype="int" id="oval:com.mcafee.oval.ie7:var:686" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Software channel permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:681" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment='Disable "Configuring History"' datatype='int' id='oval:com.mcafee.oval.ie7:var:67' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Restricted Sites Zone\Logon options' datatype='int' id='oval:com.mcafee.oval.ie7:var:668' version='3'>
      <possible_value hint='Anonymous logon'>196608</possible_value>
      <possible_value hint='Automatic only in Intranet zone'>131072</possible_value>
      <possible_value hint='Automatic with current user'>0</possible_value>
      <possible_value hint='Prompt for information'>65536</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Access data sources across domains" datatype="int" id="oval:com.mcafee.oval.ie7:var:656" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Allow Active Content from CDs to Run on User Machine" datatype="int" id="oval:com.mcafee.oval.ie7:var:655" version="4">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Allow Scriptlets" datatype="int" id="oval:com.mcafee.oval.ie7:var:621" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Protection From Zone Elevation\Internet Explorer Processes (Iexplore)" datatype="int" id="oval:com.mcafee.oval.ie7:var:616" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Local Machine Zone: Display mixed content" datatype="int" id="oval:com.mcafee.oval.ie7:var:609" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment='Turn off page transitions' datatype='int' id='oval:com.mcafee.oval.ie7:var:600' version='3'>
      <possible_value hint='Enabled'>0</possible_value>
      <possible_value hint='Disabled'>1</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Launching applications and files in an IFRAME" datatype="int" id="oval:com.mcafee.oval.ie7:var:593" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Allow Third-Party Browser Extensions" datatype="string" id="oval:com.mcafee.oval.ie7:var:590" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Restrict ActiveX Install\Internet Explorer Processes (Explorer)" datatype="int" id="oval:com.mcafee.oval.ie7:var:586" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow META REFRESH" datatype="int" id="oval:com.mcafee.oval.ie7:var:582" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment='Security Zones: Use Only Machine Settings' datatype='int' id='oval:com.mcafee.oval.ie7:var:580' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Internet Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:576" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Custom">8388608</possible_value>
      <possible_value hint="Enabled: Disable Java">0</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment='Turn off "Delete Browsing History" functionality' datatype='int' id='oval:com.mcafee.oval.ie7:var:575' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Mime Sniffing Safety Feature\Internet Explorer Processes (Reserved)" datatype="int" id="oval:com.mcafee.oval.ie7:var:574" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Initialize and script ActiveX controls not marked as safe" datatype="int" id="oval:com.mcafee.oval.ie7:var:568" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Run .NET Framework-reliant components not signed" datatype="int" id="oval:com.mcafee.oval.ie7:var:562" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Automatic prompting for file downloads" datatype="int" id="oval:com.mcafee.oval.ie7:var:559" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Mime Sniffing Safety Feature\Internet Explorer Processes (Iexplore)" datatype="int" id="oval:com.mcafee.oval.ie7:var:557" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow status bar updates via script" datatype="int" id="oval:com.mcafee.oval.ie7:var:555" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment='Disable Periodic Check For Internet Explorer Software Updates' datatype='int' id='oval:com.mcafee.oval.ie7:var:543' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Intranet Zone: Display mixed content" datatype="int" id="oval:com.mcafee.oval.ie7:var:542" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Mime Sniffing Safety Feature\Internet Explorer Processes (Explorer)" datatype="int" id="oval:com.mcafee.oval.ie7:var:527" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Intranet Sites: Include all network paths (UNCs)" datatype="string" id="oval:com.mcafee.oval.ie7:var:522" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Allow drag and drop or copy and paste files" datatype="int" id="oval:com.mcafee.oval.ie7:var:521" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment='Configure Outlook Express' datatype='int' id='oval:com.mcafee.oval.ie7:var:518' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow font downloads" datatype="int" id="oval:com.mcafee.oval.ie7:var:516" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Scripted Window Security Restrictions\Internet Explorer Processes (Iexplore)" datatype="int" id="oval:com.mcafee.oval.ie7:var:506" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Restricted Sites Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:493" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Custom">8388608</possible_value>
      <possible_value hint="Enabled: Disable Java">0</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment='Disable Internet Connection wizard' datatype='int' id='oval:com.mcafee.oval.ie7:var:491' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="MK Protocol Security Restriction\Internet Explorer Processes (Explorer)" datatype="int" id="oval:com.mcafee.oval.ie7:var:488" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow cut, copy, or paste operations" datatype="int" id="oval:com.mcafee.oval.ie7:var:487" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment='Enable Native XMLHttp Support' datatype='int' id='oval:com.mcafee.oval.ie7:var:483' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Restrict ActiveX Install\Internet Explorer Processes (Reserved)" datatype="int" id="oval:com.mcafee.oval.ie7:var:478" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Software channel permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:474" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment="Consistent Mime Handling\Internet Explorer Processes (Reserved)" datatype="int" id="oval:com.mcafee.oval.ie7:var:455" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment='Restricted Sites Zone\Allow binary and script behaviors' datatype='int' id='oval:com.mcafee.oval.ie7:var:453' version='3'>
      <possible_value hint='Enabled'>0</possible_value>
      <possible_value hint='Disabled'>3</possible_value>
      <possible_value hint='Administrator'>65536</possible_value>
    </external_variable>
    <external_variable comment="Intranet Zone: Display mixed content" datatype="int" id="oval:com.mcafee.oval.ie7:var:415" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Navigate windows and frames across different domains" datatype="int" id="oval:com.mcafee.oval.ie7:var:41" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Open files based on content, not file extension" datatype="int" id="oval:com.mcafee.oval.ie7:var:406" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Use Pop-up Blocker" datatype="int" id="oval:com.mcafee.oval.ie7:var:404" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment='Turn off Managing Phishing Filter' datatype='int' id='oval:com.mcafee.oval.ie7:var:40' version='3'>
      <possible_value hint='Automatic'>2</possible_value>
      <possible_value hint='Manual'>1</possible_value>
      <possible_value hint='Off'>0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow script-initiated windows without constraints" datatype="int" id="oval:com.mcafee.oval.ie7:var:393" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Web sites in less privileged Web content zones" datatype="int" id="oval:com.mcafee.oval.ie7:var:392" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Trusted Sites Zone: Allow Status Bar Updates Via Script" datatype="int" id="oval:com.mcafee.oval.ie7:var:38899" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Trusted Sites Zone: Display mixed content" datatype="int" id="oval:com.mcafee.oval.ie7:var:388" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment='Do Not Allow Resetting Internet Explorer Settings' datatype='int' id='oval:com.mcafee.oval.ie7:var:384' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Restrict File Download\Internet Explorer Processes (Explorer)" datatype="int" id="oval:com.mcafee.oval.ie7:var:382" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Run ActiveX controls and plugins" datatype="int" id="oval:com.mcafee.oval.ie7:var:380" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Administrator approved">65536</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Turn on the auto-complete feature for user names and passwords on forms (yes or no)" datatype="string" id="oval:com.mcafee.oval.ie7:var:372" version="3">
      <possible_value hint="Enabled">yes</possible_value>
      <possible_value hint="Disabled">no</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Local Machine Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:361" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Custom">8388608</possible_value>
      <possible_value hint="Enabled: Disable Java">0</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow active scripting" datatype="int" id="oval:com.mcafee.oval.ie7:var:356" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow installation of desktop items" datatype="int" id="oval:com.mcafee.oval.ie7:var:35" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Crash Detection' datatype='int' id='oval:com.mcafee.oval.ie7:var:346' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:340" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Custom">8388608</possible_value>
      <possible_value hint="Enabled: Disable Java">0</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Allow cut, copy, or paste operations from the clipboard via script" datatype="int" id="oval:com.mcafee.oval.ie7:var:314" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Loose or un-compiled XAML files" datatype="int" id="oval:com.mcafee.oval.ie7:var:310" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Consistent Mime Handling\Internet Explorer Processes (Explorer)" datatype="int" id="oval:com.mcafee.oval.ie7:var:308" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Check for Signature on Downloaded Programs" datatype="string" id="oval:com.mcafee.oval.ie7:var:307" version="4">
      <possible_value hint="Enabled">yes</possible_value>
      <possible_value hint="Disabled">no</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Open files based on content, not file extension" datatype="int" id="oval:com.mcafee.oval.ie7:var:299" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Disable Showing the Splash Screen" datatype="int" id="oval:com.mcafee.oval.ie7:var:298" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Download signed ActiveX controls" datatype="int" id="oval:com.mcafee.oval.ie7:var:294" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment='Prevent Ignoing Certificate Errors' datatype='int' id='oval:com.mcafee.oval.ie7:var:291' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Security Zones: Do Not Allow Users to Add/Delete Sites' datatype='int' id='oval:com.mcafee.oval.ie7:var:287' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Userdata persistence" datatype="int" id="oval:com.mcafee.oval.ie7:var:277" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="MK Protocol Security Restriction\Internet Explorer Processes (Reserved)" datatype="int" id="oval:com.mcafee.oval.ie7:var:275" version="3">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment='Disable Automatic Install of Internet Explorer Compoents' datatype='int' id='oval:com.mcafee.oval.ie7:var:273' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Intranet Zone: Java permissions" datatype="int" id="oval:com.mcafee.oval.ie7:var:23" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Custom">8388608</possible_value>
      <possible_value hint="Enabled: Disable Java">0</possible_value>
      <possible_value hint="Enabled: High Safety">65536</possible_value>
      <possible_value hint="Enabled: Low Safety">196608</possible_value>
      <possible_value hint="Enabled: Medium Safety">131072</possible_value>
    </external_variable>
    <external_variable comment="Locked-Down Restricted Sites Zone: Display mixed content" datatype="int" id="oval:com.mcafee.oval.ie7:var:187" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Check for Server Certificate Revocation" datatype="string" id="oval:com.mcafee.oval.ie7:var:173" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment='Security Zones: Do Not Allow Users to Change Policies' datatype='int' id='oval:com.mcafee.oval.ie7:var:167' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Web / XAML Browser Applications" datatype="int" id="oval:com.mcafee.oval.ie7:var:164" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Allow installation of desktop items" datatype="int" id="oval:com.mcafee.oval.ie7:var:149" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Initialize and script ActiveX controls not marked as safe" datatype="int" id="oval:com.mcafee.oval.ie7:var:148" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Turn Off Configuring the Update Check Interval (In Days)" datatype="int" id="oval:com.mcafee.oval.ie7:var:147" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_restriction hint="Enabled. Range is 1 to 365">
        <restriction operation="greater than or equal">1</restriction>
        <restriction operation="less than or equal">365</restriction>
      </possible_restriction>
    </external_variable>
    <external_variable comment="Prevent performance of First Run Customize settings" datatype="int" id="oval:com.mcafee.oval.ie7:var:145" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Go directly to &quot;Welcome ToIE&quot; page">2</possible_value>
      <possible_value hint="Enabled: Go directly to home page">1</possible_value>
    </external_variable>
    <external_variable comment='Disable the Reset Web Settings feature' datatype='int' id='oval:com.mcafee.oval.ie7:var:141' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable Changing Automatic Configuration Settings' datatype='int' id='oval:com.mcafee.oval.ie7:var:140' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Turn off the Security Settings Check feature" datatype="string" id="oval:com.mcafee.oval.ie7:var:128" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Local Machine Zone: Display mixed content" datatype="int" id="oval:com.mcafee.oval.ie7:var:12" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Allow status bar updates via script" datatype="int" id="oval:com.mcafee.oval.ie7:var:119" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Trusted Sites Zone: Display mixed content" datatype="int" id="oval:com.mcafee.oval.ie7:var:109" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
      <possible_value hint="Enabled: Prompt">1</possible_value>
    </external_variable>
    <external_variable comment='Disable "Configuring History (in days)"' datatype='int' id='oval:com.mcafee.oval.ie7:var:107' version='2' />
    <external_variable comment="Internet Zone: Turn On Protected Mode" datatype="int" id="oval:com.mcafee.oval.ie7:var:10599" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment="Internet Zone: Turn Off First-Run Opt-In" datatype="int" id="oval:com.mcafee.oval.ie7:var:105" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment='Turn on the Internet Connection Wizard Auto Detect' datatype='int' id='oval:com.mcafee.oval.ie7:var:101' version='3'>
      <possible_value hint='Enabled'>0</possible_value>
      <possible_value hint='Disabled'>1</possible_value>
    </external_variable>
    <external_variable comment="Restricted Sites Zone: Allow file downloads" datatype="int" id="oval:com.mcafee.oval.ie7:var:100" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="Enabled: Disable">3</possible_value>
      <possible_value hint="Enabled: Enable">0</possible_value>
    </external_variable>
    <external_variable comment='Percentage threshold for the security event log at which the system will generate a warning' datatype='int' id='oval:com.mcafee.oval.3:var:91' version='1' />
    <external_variable comment='maximum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.3:var:90' version='2' />
    <external_variable comment='maximum size (in bytes) of system log' datatype='int' id='oval:com.mcafee.oval.3:var:84' version='1' />
    <external_variable comment='maximum size (in bytes) of security log' datatype='int' id='oval:com.mcafee.oval.3:var:81' version='1' />
    <external_variable comment='LDAP Server Signing Requirements' datatype='int' id='oval:com.mcafee.oval.3:var:5501' version='1'>
      <possible_value hint='Require Signing'>2</possible_value>
    </external_variable>
    <external_variable comment='Allow Server Operators To Schedule Tasks' datatype='int' id='oval:com.mcafee.oval.3:var:5500' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment="status of limiting the use of blank passwords" datatype="int" id="oval:com.mcafee.oval.3:var:52" version="2" />
    <external_variable comment='status of built-in Guest account' datatype='boolean' id='oval:com.mcafee.oval.3:var:51' version='1' />
    <external_variable comment='Dot3nameCreation' datatype='int' id='oval:com.mcafee.oval.3:var:5022' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Saved Password' datatype='int' id='oval:com.mcafee.oval.3:var:5020' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Administrative Shares' datatype='int' id='oval:com.mcafee.oval.3:var:5019' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='AutoReboot' datatype='int' id='oval:com.mcafee.oval.3:var:5018' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Use Certificate Rules' datatype='int' id='oval:com.mcafee.oval.3:var:5017' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='FIPS' datatype='int' id='oval:com.mcafee.oval.3:var:5015' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='ForceKeyProtection' datatype='int' id='oval:com.mcafee.oval.3:var:5014' version='1'>
      <possible_value hint='SSLF'>2</possible_value>
      <possible_value hint='Enterprise'>1</possible_value>
      <possible_value hint='Legacy'>1</possible_value>
    </external_variable>
    <external_variable comment='Recovery console Full Assess' datatype='int' id='oval:com.mcafee.oval.3:var:5013' version='1'>
      <possible_value hint='SSLF'>0</possible_value>
      <possible_value hint='Enterprise'>1</possible_value>
      <possible_value hint='Legacy'>1</possible_value>
    </external_variable>
    <external_variable comment='LAN manager Authentication' datatype='int' id='oval:com.mcafee.oval.3:var:5011' version='1'>
      <possible_value hint='SSLF'>5</possible_value>
      <possible_value hint='Enterprise'>4</possible_value>
      <possible_value hint='Legacy'>3</possible_value>
    </external_variable>
    <external_variable comment="Restrict Anonymous Access To Named Pipes and Shares" datatype="int" id="oval:com.mcafee.oval.3:var:5008" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Server Always Sign Communications" datatype="int" id="oval:com.mcafee.oval.3:var:5004" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="DisplayUserInformationSessionLocked" datatype="int" id="oval:com.mcafee.oval.3:var:5002" version="2">
      <possible_value hint="User display name, domain, and user names">1</possible_value>
      <possible_value hint="User display name, only">2</possible_value>
      <possible_value hint="Do not display User information">3</possible_value>
    </external_variable>
    <external_variable comment="Shut down system immediately if unable to log security audits" datatype="int" id="oval:com.mcafee.oval.3:var:5001" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Shut down system immediately if unable to log security audits" datatype="int" id="oval:com.mcafee.oval.3:var:5000" version="2">
      <possible_value hint="Disables Shutdown">0</possible_value>
      <possible_value hint="Enables Shutdown">1</possible_value>
    </external_variable>
    <external_variable comment='status of built-in Administrator account' datatype='boolean' id='oval:com.mcafee.oval.3:var:50' version='1' />
    <external_variable comment='How often keep-alive packets are sent in milliseconds' datatype='int' id='oval:com.mcafee.oval.3:var:5' version='1' />
    <external_variable comment='Audit process tracking' datatype='string' id='oval:com.mcafee.oval.3:var:42' version='1'>
      <possible_value hint='Does not audit events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='TCPMaxPortsExhausted - Number of connections refused' datatype='int' id='oval:com.mcafee.oval.3:var:406' version='2' />
    <external_variable comment='TcpMaxHalfOpenRetried - Number of connections permitted' datatype='int' id='oval:com.mcafee.oval.3:var:405' version='2' />
    <external_variable comment='TcpMaxHalfOpen - Number of connections permitted' datatype='int' id='oval:com.mcafee.oval.3:var:404' version='2' />
    <external_variable comment='PerformRouterDiscovery' datatype='int' id='oval:com.mcafee.oval.3:var:403' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='CDrom Autorun' datatype='int' id='oval:com.mcafee.oval.3:var:402' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Should dr. watson be disabled' datatype='int' id='oval:com.mcafee.oval.3:var:401' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Create memory crash dump' datatype='int' id='oval:com.mcafee.oval.3:var:400' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit system events' datatype='string' id='oval:com.mcafee.oval.3:var:38' version='1'>
      <possible_value hint='Does not audit attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit privilege use' datatype='string' id='oval:com.mcafee.oval.3:var:37' version='1'>
      <possible_value hint='Does not audit attempts by a user in exercising a user right.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts by a user in exercising a user right.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts by a user in exercising a user right.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts by a user in exercising a user right.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit policy change' datatype='string' id='oval:com.mcafee.oval.3:var:36' version='1'>
      <possible_value hint='Does not audit attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit object access' datatype='string' id='oval:com.mcafee.oval.3:var:35' version='1'>
      <possible_value hint='Does not audit attempts of a user accessing an object that has its own SACL specified.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit logon events' datatype='string' id='oval:com.mcafee.oval.3:var:33' version='1'>
      <possible_value hint='Does not audit attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit directory service access' datatype='string' id='oval:com.mcafee.oval.3:var:32' version='1'>
      <possible_value hint='Does not audit attempts to access directory services.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to access directory services.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to access directory services.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to access directory services.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit account management' datatype='string' id='oval:com.mcafee.oval.3:var:31' version='1'>
      <possible_value hint='Does not audit attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Maximum machine account password age (in days)' datatype='int' id='oval:com.mcafee.oval.3:var:30' version='2' />
    <external_variable comment='Audit account logon events' datatype='string' id='oval:com.mcafee.oval.3:var:29' version='1'>
      <possible_value hint='Does not audit log ons and log offs of a remote computer from this workstation.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed log ons and log offs of a remote computer from this workstation.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Specifies how the system responds when a user tries to install device driver files that are not digitally signed.' datatype='int' id='oval:com.mcafee.oval.3:var:287' version='1'>
      <possible_value hint='ignore'>0</possible_value>
      <possible_value hint='warn'>1</possible_value>
      <possible_value hint='block'>2</possible_value>
    </external_variable>
    <external_variable comment="should router discovery be performed on this interface" datatype="int" id="oval:com.mcafee.oval.3:var:286" version="2">
      <possible_value hint="Disables router discovery">0</possible_value>
      <possible_value hint="Enables router discovery">1</possible_value>
    </external_variable>
    <external_variable comment='Minimum session security for NTLM SSP based (including secure RPC) servers' datatype='int' id='oval:com.mcafee.oval.3:var:285' version='1' />
    <external_variable comment='minimum session security for NTLM SSP based (including secure RPC) clients' datatype='int' id='oval:com.mcafee.oval.3:var:284' version='1' />
    <external_variable comment='desired behavior when smart card is removed' datatype='int' id='oval:com.mcafee.oval.3:var:283' version='1'>
      <possible_value hint='no action'>0</possible_value>
      <possible_value hint='lock workstation'>1</possible_value>
      <possible_value hint='force logoff'>2</possible_value>
    </external_variable>
    <external_variable comment="restrict access to floppy drive to locally logged-on users" datatype="int" id="oval:com.mcafee.oval.3:var:282" version="2">
      <possible_value hint="Only locally logged on users are allowed to access the floppy drive.">1</possible_value>
      <possible_value hint="Access to the floppy drive is not restricted to locally logged on users.">0</possible_value>
    </external_variable>
    <external_variable comment="restrict access to CDROM drive to locally logged-on users" datatype="int" id="oval:com.mcafee.oval.3:var:281" version="2">
      <possible_value hint="Only locally logged on users are allowed to access the CDROM drive.">1</possible_value>
      <possible_value hint="Access to the CDROM drive is not restricted to locally logged on users.">0</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network client: Digitally sign communications (always)" datatype="int" id="oval:com.mcafee.oval.3:var:280" version="2">
      <possible_value hint="The client policy is set to not always sign packets.">0</possible_value>
      <possible_value hint="The client policy is set to always sign packets.">1</possible_value>
    </external_variable>
    <external_variable comment="Require Domain Controller authentication to unlock workstation" datatype="int" id="oval:com.mcafee.oval.3:var:279" version="2">
      <possible_value hint="Domain controller authentication is not required to unlock the workstation">0</possible_value>
      <possible_value hint="Domain controller authentication is required to unlock the workstation">1</possible_value>
    </external_variable>
    <external_variable comment='Require strong (Windows 2000 or later) session key' datatype='int' id='oval:com.mcafee.oval.3:var:278' version='1'>
      <possible_value hint='Requires strong (Windows 2000 or later) session key'>1</possible_value>
      <possible_value hint='Does not require strong (Windows 2000 or later) session key'>0</possible_value>
    </external_variable>
    <external_variable comment="Prevent users from installing printer drivers" datatype="int" id="oval:com.mcafee.oval.3:var:277" version="2">
      <possible_value hint="Only Administrators are allowed to add and to delete printer drivers on the local system.">1</possible_value>
      <possible_value hint="Users are allowed to add and to delete printer drivers on the local system.">0</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the system log' datatype='int' id='oval:com.mcafee.oval.3:var:261' version='1'>
      <possible_value hint='events in the system log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the system log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the system log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the security log' datatype='int' id='oval:com.mcafee.oval.3:var:260' version='1'>
      <possible_value hint='events in the security log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the security log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the security log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the application log' datatype='int' id='oval:com.mcafee.oval.3:var:259' version='1'>
      <possible_value hint='events in the application log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the application log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the application log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='number of passwords remembered' datatype='int' id='oval:com.mcafee.oval.3:var:24' version='1' />
    <external_variable comment='Amount of idle time (in minutes) required before susending session' datatype='int' id='oval:com.mcafee.oval.3:var:215' version='2' />
    <external_variable comment='maximum size (in bytes) of application log' datatype='int' id='oval:com.mcafee.oval.3:var:16' version='1' />
    <external_variable comment='Account lockout duration (in seconds)' datatype='int' id='oval:com.mcafee.oval.3:var:15' version='2' />
    <external_variable comment='Number of days to prompt user to change password before expiration' datatype='int' id='oval:com.mcafee.oval.3:var:14' version='1' />
    <external_variable comment='are passwords stored using reversible encrption' datatype='boolean' id='oval:com.mcafee.oval.3:var:13' version='1' />
    <external_variable comment="is the local guests group prevented from accessing the system log" datatype="int" id="oval:com.mcafee.oval.3:var:122" version="2" />
    <external_variable comment="is the local guests group prevented from accessing the sycurity log" datatype="int" id="oval:com.mcafee.oval.3:var:121" version="2" />
    <external_variable comment="is the local guests group prevented from accessing the application log" datatype="int" id="oval:com.mcafee.oval.3:var:120" version="2" />
    <external_variable comment='minimum password length' datatype='int' id='oval:com.mcafee.oval.3:var:12' version='1' />
    <external_variable comment='Reset account lockout counter after ( x ) seconds' datatype='int' id='oval:com.mcafee.oval.3:var:115' version='2' />
    <external_variable comment='is password complexity enforced' datatype='boolean' id='oval:com.mcafee.oval.3:var:11' version='1' />
    <external_variable comment='How many times unacknowledged data is retransmitted' datatype='int' id='oval:com.mcafee.oval.3:var:103' version='1' />
    <external_variable comment='Number of previous logons to cache' datatype='int' id='oval:com.mcafee.oval.3:var:102' version='1' />
    <external_variable comment='minimum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.3:var:101' version='2' />
    <external_variable comment='Account lockout threshold (number of bad attempts)' datatype='int' id='oval:com.mcafee.oval.3:var:10' version='2' />
    <external_variable comment='Percentage threshold for the security event log at which the system will generate a warning' datatype='int' id='oval:com.mcafee.oval.2:var:91' version='1' />
    <external_variable comment='Maximum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.2:var:90' version='2' />
    <external_variable comment='maximum size (in bytes) of system log' datatype='int' id='oval:com.mcafee.oval.2:var:84' version='1' />
    <external_variable comment='maximum size (in bytes) of security log' datatype='int' id='oval:com.mcafee.oval.2:var:81' version='1' />
    <external_variable comment="status of limiting the use of blank passwords" datatype="int" id="oval:com.mcafee.oval.2:var:52" version="2" />
    <external_variable comment='status of built-in Guest account' datatype='boolean' id='oval:com.mcafee.oval.2:var:51' version='1' />
    <external_variable comment='Dot3nameCreation' datatype='int' id='oval:com.mcafee.oval.2:var:5022' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Saved Password' datatype='int' id='oval:com.mcafee.oval.2:var:5020' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Administrative Shares' datatype='int' id='oval:com.mcafee.oval.2:var:5019' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='AutoReboot' datatype='int' id='oval:com.mcafee.oval.2:var:5018' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='Use Certificate Rules' datatype='int' id='oval:com.mcafee.oval.2:var:5017' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='FIPS' datatype='int' id='oval:com.mcafee.oval.2:var:5015' version='1'>
      <possible_value hint='Disabled'>0</possible_value>
      <possible_value hint='Enabled'>1</possible_value>
    </external_variable>
    <external_variable comment='ForceKeyProtection' datatype='int' id='oval:com.mcafee.oval.2:var:5014' version='1'>
      <possible_value hint='SSLF'>2</possible_value>
      <possible_value hint='Enterprise'>1</possible_value>
      <possible_value hint='Legacy'>1</possible_value>
    </external_variable>
    <external_variable comment='Recovery console Full Assess' datatype='int' id='oval:com.mcafee.oval.2:var:5013' version='1'>
      <possible_value hint='SSLF'>0</possible_value>
      <possible_value hint='Enterprise'>1</possible_value>
      <possible_value hint='Legacy'>1</possible_value>
    </external_variable>
    <external_variable comment='LAN manager Authentication' datatype='int' id='oval:com.mcafee.oval.2:var:5011' version='1'>
      <possible_value hint='SSLF'>5</possible_value>
      <possible_value hint='Enterprise'>4</possible_value>
      <possible_value hint='Legacy'>3</possible_value>
    </external_variable>
    <external_variable comment="Restrict Anonymous Access To Named Pipes and Shares" datatype="int" id="oval:com.mcafee.oval.2:var:5008" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Server Always Sign Communications" datatype="int" id="oval:com.mcafee.oval.2:var:5004" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="DisplayUserInformationSessionLocked" datatype="int" id="oval:com.mcafee.oval.2:var:5002" version="2">
      <possible_value hint="User display name, domain, and user names">1</possible_value>
      <possible_value hint="User display name, only">2</possible_value>
      <possible_value hint="Do not display User information">3</possible_value>
    </external_variable>
    <external_variable comment="Shut down system immediately if unable to log security audits" datatype="int" id="oval:com.mcafee.oval.2:var:5001" version="2">
      <possible_value hint="Disabled">0</possible_value>
      <possible_value hint="Enabled">1</possible_value>
    </external_variable>
    <external_variable comment="Shut down system immediately if unable to log security audits" datatype="int" id="oval:com.mcafee.oval.2:var:5000" version="2">
      <possible_value hint="Disables Shutdown">0</possible_value>
      <possible_value hint="Enables Shutdown">1</possible_value>
    </external_variable>
    <external_variable comment='status of built-in Administrator account' datatype='boolean' id='oval:com.mcafee.oval.2:var:50' version='1' />
    <external_variable comment='How often keep-alive packets are sent in milliseconds' datatype='int' id='oval:com.mcafee.oval.2:var:5' version='1' />
    <external_variable comment='Audit process tracking' datatype='string' id='oval:com.mcafee.oval.2:var:42' version='1'>
      <possible_value hint='Does not audit events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='TCPMaxPortsExhausted - Number of connections refused' datatype='int' id='oval:com.mcafee.oval.2:var:406' version='2' />
    <external_variable comment='TcpMaxHalfOpenRetried - Number of connections permitted' datatype='int' id='oval:com.mcafee.oval.2:var:405' version='2' />
    <external_variable comment='TcpMaxHalfOpen - number of connections permitted' datatype='int' id='oval:com.mcafee.oval.2:var:404' version='2' />
    <external_variable comment='PerformRouterDiscovery' datatype='int' id='oval:com.mcafee.oval.2:var:403' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='CDrom Autorun' datatype='int' id='oval:com.mcafee.oval.2:var:402' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Should dr. watson be disabled' datatype='int' id='oval:com.mcafee.oval.2:var:401' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Create memory crash dump' datatype='int' id='oval:com.mcafee.oval.2:var:400' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit system events' datatype='string' id='oval:com.mcafee.oval.2:var:38' version='1'>
      <possible_value hint='Does not audit attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit privilege use' datatype='string' id='oval:com.mcafee.oval.2:var:37' version='1'>
      <possible_value hint='Does not audit attempts by a user in exercising a user right.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts by a user in exercising a user right.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts by a user in exercising a user right.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts by a user in exercising a user right.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit policy change' datatype='string' id='oval:com.mcafee.oval.2:var:36' version='1'>
      <possible_value hint='Does not audit attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit object access' datatype='string' id='oval:com.mcafee.oval.2:var:35' version='1'>
      <possible_value hint='Does not audit attempts of a user accessing an object that has its own SACL specified.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit logon events' datatype='string' id='oval:com.mcafee.oval.2:var:33' version='1'>
      <possible_value hint='Does not audit attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit Directory Service Access' datatype='string' id='oval:com.mcafee.oval.2:var:32' version='2'>
      <possible_value hint='Does not audit attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit account management' datatype='string' id='oval:com.mcafee.oval.2:var:31' version='1'>
      <possible_value hint='Does not audit attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Maximum machine account password age (in days)' datatype='int' id='oval:com.mcafee.oval.2:var:30' version='2' />
    <external_variable comment='Audit account logon events' datatype='string' id='oval:com.mcafee.oval.2:var:29' version='1'>
      <possible_value hint='Does not audit log ons and log offs of a remote computer from this workstation.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed log ons and log offs of a remote computer from this workstation.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Specifies how the system responds when a user tries to install device driver files that are not digitally signed.' datatype='int' id='oval:com.mcafee.oval.2:var:287' version='1'>
      <possible_value hint='ignore'>0</possible_value>
      <possible_value hint='warn'>1</possible_value>
      <possible_value hint='block'>2</possible_value>
    </external_variable>
    <external_variable comment="should router discovery be performed on this interface" datatype="int" id="oval:com.mcafee.oval.2:var:286" version="2">
      <possible_value hint="Disables router discovery">0</possible_value>
      <possible_value hint="Enables router discovery">1</possible_value>
    </external_variable>
    <external_variable comment='Minimum session security for NTLM SSP based (including secure RPC) servers' datatype='int' id='oval:com.mcafee.oval.2:var:285' version='1' />
    <external_variable comment='minimum session security for NTLM SSP based (including secure RPC) clients' datatype='int' id='oval:com.mcafee.oval.2:var:284' version='1' />
    <external_variable comment='desired behavior when smart card is removed' datatype='int' id='oval:com.mcafee.oval.2:var:283' version='1'>
      <possible_value hint='no action'>0</possible_value>
      <possible_value hint='lock workstation'>1</possible_value>
      <possible_value hint='force logoff'>2</possible_value>
    </external_variable>
    <external_variable comment="restrict access to floppy drive to locally logged-on users" datatype="int" id="oval:com.mcafee.oval.2:var:282" version="2">
      <possible_value hint="Only locally logged on users are allowed to access the floppy drive.">1</possible_value>
      <possible_value hint="Access to the floppy drive is not restricted to locally logged on users.">0</possible_value>
    </external_variable>
    <external_variable comment="restrict access to CDROM drive to locally logged-on users" datatype="int" id="oval:com.mcafee.oval.2:var:281" version="2">
      <possible_value hint="Only locally logged on users are allowed to access the CDROM drive.">1</possible_value>
      <possible_value hint="Access to the CDROM drive is not restricted to locally logged on users.">0</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network client: Digitally sign communications (always)" datatype="int" id="oval:com.mcafee.oval.2:var:280" version="2">
      <possible_value hint="The client policy is set to not always sign packets.">0</possible_value>
      <possible_value hint="The client policy is set to always sign packets.">1</possible_value>
    </external_variable>
    <external_variable comment="Require Domain Controller authentication to unlock workstation" datatype="int" id="oval:com.mcafee.oval.2:var:279" version="2">
      <possible_value hint="Domain controller authentication is not required to unlock the workstation">0</possible_value>
      <possible_value hint="Domain controller authentication is required to unlock the workstation">1</possible_value>
    </external_variable>
    <external_variable comment='Require strong (Windows 2000 or later) session key' datatype='int' id='oval:com.mcafee.oval.2:var:278' version='1'>
      <possible_value hint='Requires strong (Windows 2000 or later) session key'>1</possible_value>
      <possible_value hint='Does not require strong (Windows 2000 or later) session key'>0</possible_value>
    </external_variable>
    <external_variable comment="Prevent users from installing printer drivers" datatype="int" id="oval:com.mcafee.oval.2:var:277" version="2">
      <possible_value hint="Only Administrators are allowed to add and to delete printer drivers on the local system.">1</possible_value>
      <possible_value hint="Users are allowed to add and to delete printer drivers on the local system.">0</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the system log' datatype='int' id='oval:com.mcafee.oval.2:var:261' version='1'>
      <possible_value hint='events in the system log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the system log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the system log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the security log' datatype='int' id='oval:com.mcafee.oval.2:var:260' version='1'>
      <possible_value hint='events in the security log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the security log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the security log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the application log' datatype='int' id='oval:com.mcafee.oval.2:var:259' version='1'>
      <possible_value hint='events in the application log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the application log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the application log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='number of passwords remembered' datatype='int' id='oval:com.mcafee.oval.2:var:24' version='1' />
    <external_variable comment='Amount of idle time (in minutes) required before susending session' datatype='int' id='oval:com.mcafee.oval.2:var:215' version='2' />
    <external_variable comment='maximum size (in bytes) of application log' datatype='int' id='oval:com.mcafee.oval.2:var:16' version='1' />
    <external_variable comment='Account lockout duration (in seconds)' datatype='int' id='oval:com.mcafee.oval.2:var:15' version='2' />
    <external_variable comment='Number of days to prompt user to change password before expiration' datatype='int' id='oval:com.mcafee.oval.2:var:14' version='1' />
    <external_variable comment='are passwords stored using reversible encrption' datatype='boolean' id='oval:com.mcafee.oval.2:var:13' version='1' />
    <external_variable comment="is the local guests group prevented from accessing the system log" datatype="int" id="oval:com.mcafee.oval.2:var:122" version="2" />
    <external_variable comment="is the local guests group prevented from accessing the sycurity log" datatype="int" id="oval:com.mcafee.oval.2:var:121" version="2" />
    <external_variable comment="is the local guests group prevented from accessing the application log" datatype="int" id="oval:com.mcafee.oval.2:var:120" version="2" />
    <external_variable comment='minimum password length' datatype='int' id='oval:com.mcafee.oval.2:var:12' version='1' />
    <external_variable comment='Reset account lockout counter after ( x ) seconds' datatype='int' id='oval:com.mcafee.oval.2:var:115' version='2' />
    <external_variable comment='is password complexity enforced' datatype='boolean' id='oval:com.mcafee.oval.2:var:11' version='1' />
    <external_variable comment='How many times unacknowledged data is retransmitted' datatype='int' id='oval:com.mcafee.oval.2:var:103' version='1' />
    <external_variable comment='Number of previous logons to cache' datatype='int' id='oval:com.mcafee.oval.2:var:102' version='1' />
    <external_variable comment='Minimum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.2:var:101' version='2' />
    <external_variable comment='Account lockout threshold (number of bad attempts)' datatype='int' id='oval:com.mcafee.oval.2:var:10' version='2' />
    <external_variable comment='Percentage threshold for the security event log at which the system will generate a warning' datatype='int' id='oval:com.mcafee.oval.1:var:91' version='1' />
    <external_variable comment='Maximum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.1:var:90' version='2' />
    <external_variable comment='Digitally sign communications (always)' datatype='int' id='oval:com.mcafee.oval.1:var:8411' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='maximum size (in bytes) of system log' datatype='int' id='oval:com.mcafee.oval.1:var:84' version='1' />
    <external_variable comment='maximum size (in bytes) of security log' datatype='int' id='oval:com.mcafee.oval.1:var:81' version='1' />
    <external_variable comment='Enable the computer to stop generating 8.3 style filenames' datatype='int' id='oval:com.mcafee.oval.1:var:711' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Microsoft Spynet Membership" datatype="int" id="oval:com.mcafee.oval.1:var:6727" version="6">
      <possible_value hint="Not Configured / Disabled">99999</possible_value>
      <possible_value hint="No membership">0</possible_value>
      <possible_value hint="Basic">1</possible_value>
      <possible_value hint="Advanced">2</possible_value>
    </external_variable>
    <external_variable comment='Set a time limit (in minutes) for disconnected sessions' datatype='int' id='oval:com.mcafee.oval.1:var:6726' version='3' />
    <external_variable comment='Set a time limit (in minutes) for active but idle Terminal Services sessions' datatype='int' id='oval:com.mcafee.oval.1:var:6725' version='3' />
    <external_variable comment='Simple TCP/IP Services' datatype='int' id='oval:com.mcafee.oval.1:var:672021' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='WMI Performance Adapter' datatype='int' id='oval:com.mcafee.oval.1:var:6719' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='SSDP Discovery' datatype='int' id='oval:com.mcafee.oval.1:var:6718' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remove Security tab' datatype='string' id='oval:com.mcafee.oval.1:var:6717' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Remove CD Burning features' datatype='string' id='oval:com.mcafee.oval.1:var:6716' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Prevent users from sharing files within their profile' datatype='string' id='oval:com.mcafee.oval.1:var:6715' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Prompt for password on resume from hibernate / suspend' datatype='string' id='oval:com.mcafee.oval.1:var:6714' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Online' datatype='string' id='oval:com.mcafee.oval.1:var:6713' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off the &#39;Publish to Web&#39; task for files and folders' datatype='string' id='oval:com.mcafee.oval.1:var:6712' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Help Ratings' datatype='string' id='oval:com.mcafee.oval.1:var:6711' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Help Experience Improvement Program' datatype='string' id='oval:com.mcafee.oval.1:var:6710' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Remove Default Programs Link from the Start Menu' datatype='string' id='oval:com.mcafee.oval.1:var:6709' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Screen Saver timeout (in seconds)' datatype='string' id='oval:com.mcafee.oval.1:var:6708' version='2' />
    <external_variable comment='Password protect the screen saver' datatype='string' id='oval:com.mcafee.oval.1:var:6707' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Prevent indexing uncached Exchange folders' datatype='string' id='oval:com.mcafee.oval.1:var:6705' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Allow indexing of encrypted files' datatype='string' id='oval:com.mcafee.oval.1:var:6704' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Downloading of Game Information' datatype='string' id='oval:com.mcafee.oval.1:var:6703' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not allow Digital Locker to run' datatype='string' id='oval:com.mcafee.oval.1:var:6698' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Windows Movie Maker Saving to Online Video Hosting Provider' datatype='string' id='oval:com.mcafee.oval.1:var:6697' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Windows Movies Maker Automatic Codec Downloads' datatype='string' id='oval:com.mcafee.oval.1:var:6696' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Approved Installation Sites for ActiveX Controls' datatype='string' id='oval:com.mcafee.oval.1:var:6695' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn on session logging' datatype='string' id='oval:com.mcafee.oval.1:var:6694' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn on bandwidth optimization' datatype='string' id='oval:com.mcafee.oval.1:var:6693' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Customization Warning Messages' datatype='string' id='oval:com.mcafee.oval.1:var:6692' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Allow only Vista or later connections' datatype='string' id='oval:com.mcafee.oval.1:var:6691' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Require a Password when a Computer Wakes (Plugged)' datatype='string' id='oval:com.mcafee.oval.1:var:6690' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Require a Password when a Computer Wakes (On Battery)' datatype='string' id='oval:com.mcafee.oval.1:var:6689' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Startup Sound' datatype='string' id='oval:com.mcafee.oval.1:var:6688' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Don’t Display the Getting Started Welcome Screen at Logon' datatype='string' id='oval:com.mcafee.oval.1:var:6687' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Always Use Classic Logon' datatype='string' id='oval:com.mcafee.oval.1:var:6686' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Restrict Internet Communication' datatype='string' id='oval:com.mcafee.oval.1:var:6685' version='1' />
    <external_variable comment='Turn Off Windows Movie Maker Online Web Links' datatype='string' id='oval:com.mcafee.oval.1:var:6684' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Error Reporting' datatype='string' id='oval:com.mcafee.oval.1:var:6683' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off the Order Prints Picture Task' datatype='string' id='oval:com.mcafee.oval.1:var:6682' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Registration if URL Connection is Referring to Microsoft.com' datatype='string' id='oval:com.mcafee.oval.1:var:6681' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Internet File Association Service' datatype='string' id='oval:com.mcafee.oval.1:var:6680' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com' datatype='string' id='oval:com.mcafee.oval.1:var:6679' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Help and Support Center Microsoft Knowledge Base Search' datatype='string' id='oval:com.mcafee.oval.1:var:6678' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Help and Support Center Did You Know? Content' datatype='string' id='oval:com.mcafee.oval.1:var:6677' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Handwriting Reconition Error Reporting' datatype='string' id='oval:com.mcafee.oval.1:var:6676' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Event Views Events.asp Links' datatype='string' id='oval:com.mcafee.oval.1:var:6675' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Automatic Root Certificates Update' datatype='string' id='oval:com.mcafee.oval.1:var:6674' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Access to All Windows Update Feature' datatype='string' id='oval:com.mcafee.oval.1:var:6673' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Registry Policy Processing - Variable' datatype='int' id='oval:com.mcafee.oval.1:var:6672' version='1' />
    <external_variable comment="Turn Off Windows Update Device Driver Search Prompt" datatype="string" id="oval:com.mcafee.oval.1:var:6670" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Do not send a Windows Error Report when a generic driver is installed" datatype="string" id="oval:com.mcafee.oval.1:var:6669" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment='Do not create system restore point when new device driver installed - Variable' datatype='int' id='oval:com.mcafee.oval.1:var:6668' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow remote access to the PnP interface - Variable' datatype='int' id='oval:com.mcafee.oval.1:var:6667' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Configuration of Wireless Settings Using Windows Connect Now - Variable' datatype='int' id='oval:com.mcafee.oval.1:var:6666' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Prohibit Access of the Windows Connect Now Wizards" datatype="int" id="oval:com.mcafee.oval.1:var:6665" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow ICMP exceptions - Standard Profile" datatype="int" id="oval:com.mcafee.oval.1:var:6664" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment="Windows Firewall: Allow ICMP exceptions - Domain Profile" datatype="int" id="oval:com.mcafee.oval.1:var:6663" version="2">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment='Turn Off Microsoft Peer-to-Peer Networking Services - Variable' datatype='boolean' id='oval:com.mcafee.oval.1:var:6662' version='1' />
    <external_variable comment='Turn on Responder (RSPNDR) driver - Variable' datatype='boolean' id='oval:com.mcafee.oval.1:var:6661' version='1' />
    <external_variable comment='Turn on Mapper I/O (LLTDIO) driver - Variable' datatype='boolean' id='oval:com.mcafee.oval.1:var:6660' version='1' />
    <external_variable comment='Reschedule Automatic Updates scheduled installations' datatype='string' id='oval:com.mcafee.oval.1:var:6606' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='No auto-restart for scheduled Automatic Updates installations' datatype='string' id='oval:com.mcafee.oval.1:var:6605' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Configure Automatic Updates' datatype='string' id='oval:com.mcafee.oval.1:var:6604' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not adjust default option to ‘Install Updates and Shut Down’ in Shut Down Windows Dialog box' datatype='string' id='oval:com.mcafee.oval.1:var:6603' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not display &#39;Install Updates and Shut Down&#39; option in the Shut Down Windows dialog box' datatype='string' id='oval:com.mcafee.oval.1:var:6602' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not allow Windows Messenger to be run' datatype='string' id='oval:com.mcafee.oval.1:var:6601' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Set client connection encryption level' datatype='int' id='oval:com.mcafee.oval.1:var:6600' version='1' />
    <external_variable comment='Always prompt client for password upon connection' datatype='string' id='oval:com.mcafee.oval.1:var:6599' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not allow drive redirection' datatype='string' id='oval:com.mcafee.oval.1:var:6598' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Allow users to connect remotely using Terminal Services' datatype='string' id='oval:com.mcafee.oval.1:var:6597' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not allow passwords to be saved' datatype='string' id='oval:com.mcafee.oval.1:var:6596' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Disable remote Desktop Sharing' datatype='string' id='oval:com.mcafee.oval.1:var:6595' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Deny all add-ons unless specifically allowed in the Add-on List' datatype='string' id='oval:com.mcafee.oval.1:var:6594' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Internet Explorer Processes (Restrict File Download)' datatype='string' id='oval:com.mcafee.oval.1:var:6593' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Internet Explorer Processes (Restrict ActiveX Install)' datatype='string' id='oval:com.mcafee.oval.1:var:6592' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Internet Explorer Processes (Zone Elevation Protection)' datatype='string' id='oval:com.mcafee.oval.1:var:6591' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Internet Explorer Processes (Scripted Window Security Restrictions)' datatype='string' id='oval:com.mcafee.oval.1:var:6590' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Internet Explorer Processes (MIME Sniffing)' datatype='string' id='oval:com.mcafee.oval.1:var:6589' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Internet Explorer Processes (Consistent MIME Handling)' datatype='string' id='oval:com.mcafee.oval.1:var:6588' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Internet Explorer Processes (MK Protocol)' datatype='string' id='oval:com.mcafee.oval.1:var:6587' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Allow software to run or install even if the signature is invalid' datatype='string' id='oval:com.mcafee.oval.1:var:6586' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Crash Detection' datatype='string' id='oval:com.mcafee.oval.1:var:6585' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Security Zones: Use only machine settings' datatype='string' id='oval:com.mcafee.oval.1:var:6584' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Security Zones: Do not allow users to change policies' datatype='string' id='oval:com.mcafee.oval.1:var:6583' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Security Zones: Do not allow users to add/delete sites' datatype='string' id='oval:com.mcafee.oval.1:var:6582' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Make proxy settings per-machine (rather than per-user)' datatype='string' id='oval:com.mcafee.oval.1:var:6581' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not allow users to enable or disable add-ons' datatype='string' id='oval:com.mcafee.oval.1:var:6580' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Disable software update shell notifications on program launch' datatype='string' id='oval:com.mcafee.oval.1:var:6579' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Disable Periodic Check for Internet Explorer software updates' datatype='string' id='oval:com.mcafee.oval.1:var:6578' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Disable Automatic Install of Internet Explorer components' datatype='string' id='oval:com.mcafee.oval.1:var:6577' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Require trusted path for credential entry' datatype='string' id='oval:com.mcafee.oval.1:var:6576' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Enumerate administrator accounts on elevation' datatype='string' id='oval:com.mcafee.oval.1:var:6575' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Autoplay' datatype='string' id='oval:com.mcafee.oval.1:var:6574' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Update device driver searching' datatype='string' id='oval:com.mcafee.oval.1:var:6573' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off downloading of print drivers over HTTP' datatype='string' id='oval:com.mcafee.oval.1:var:6572' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off printing over HTTP' datatype='string' id='oval:com.mcafee.oval.1:var:6571' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Search Companion content file updates' datatype='string' id='oval:com.mcafee.oval.1:var:6570' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off the Windows Messenger Customer Experience Improvement Program' datatype='string' id='oval:com.mcafee.oval.1:var:6569' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Internet download for Web publishing and online ordering wizards' datatype='string' id='oval:com.mcafee.oval.1:var:6568' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off the Publish to Web task for files and folders' datatype='string' id='oval:com.mcafee.oval.1:var:6567' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='RPC Endpoint Mapper Client Authentication' datatype='string' id='oval:com.mcafee.oval.1:var:6566' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Restrictions for Unauthenticated RPC clients' datatype='int' id='oval:com.mcafee.oval.1:var:6565' version='1' />
    <external_variable comment='Solicited Remote Assistance' datatype='string' id='oval:com.mcafee.oval.1:var:6564' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Offer Remote Assistance' datatype='string' id='oval:com.mcafee.oval.1:var:6563' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Registry policy processing' datatype='string' id='oval:com.mcafee.oval.1:var:6562' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not process the run once list' datatype='string' id='oval:com.mcafee.oval.1:var:6561' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not process the legacy run list' datatype='string' id='oval:com.mcafee.oval.1:var:6560' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Protect all network connections - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6559' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Prohibit unicast response to multicast or broadcast requests - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6558' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Prohibit notifications - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6557' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Do not allow exceptions - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6556' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Define inbound program exceptions - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6555' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Define inbound port exceptions - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6554' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow local program exceptions - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6553' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow local port exceptions - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6552' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow inbound UPnP framework exceptions - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6551' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow inbound Remote Desktop exceptions - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6550' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow inbound remote administration exception - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6549' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow inbound file and printer sharing exception - Standard Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6548' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Protect all network connections - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6547' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Prohibit unicast response to multicast or broadcast requests - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6546' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Prohibit notifications - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6545' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Do not allow exceptions - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6544' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Define inbound program exceptions - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6543' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Define inbound port exceptions - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6542' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow local program exceptions - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6541' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow local port exceptions - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6540' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow inbound UPnP framework exceptions - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6539' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow inbound Remote Desktop exceptions - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6538' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow inbound remote administration exception - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6537' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Windows Firewall: Allow inbound file and printer sharing exception - Domain Profile' datatype='string' id='oval:com.mcafee.oval.1:var:6536' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Retention Method For System Log' datatype='int' id='oval:com.mcafee.oval.1:var:6514' version='1' />
    <external_variable comment='Retention Method For Security Log' datatype='int' id='oval:com.mcafee.oval.1:var:6513' version='1' />
    <external_variable comment='Retention Method For Application Log' datatype='int' id='oval:com.mcafee.oval.1:var:6512' version='1' />
    <external_variable comment='Prevent Local Guests Group From Accessing Security Log' datatype='int' id='oval:com.mcafee.oval.1:var:6511' version='1' />
    <external_variable comment='Prevent Local Guests Group From Accessing System Log' datatype='int' id='oval:com.mcafee.oval.1:var:6510' version='1' />
    <external_variable comment='Prevent Local Guests Group From Accessing Application Log' datatype='int' id='oval:com.mcafee.oval.1:var:6509' version='1' />
    <external_variable comment='Maximum System Log Size in bytes' datatype='int' id='oval:com.mcafee.oval.1:var:6508' version='2' />
    <external_variable comment='Maximum Security Log Size in bytes' datatype='int' id='oval:com.mcafee.oval.1:var:6507' version='2' />
    <external_variable comment='Maximum Application Log Size in bytes' datatype='int' id='oval:com.mcafee.oval.1:var:6506' version='2' />
    <external_variable comment='Configure Outlook Express' datatype='string' id='oval:com.mcafee.oval.1:var:6505' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Notify antivirus programs when opening attachments' datatype='string' id='oval:com.mcafee.oval.1:var:6504' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Hide mechanisms to remove zone information' datatype='string' id='oval:com.mcafee.oval.1:var:6503' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Do not preserve zone information in file attachments' datatype='string' id='oval:com.mcafee.oval.1:var:6502' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='Prompt for password on resume from hibernate/suspend' datatype='string' id='oval:com.mcafee.oval.1:var:6501' version='2'>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Not Configured'>Not Configured</possible_value>
    </external_variable>
    <external_variable comment='Prevent access to registry editing tools' datatype='string' id='oval:com.mcafee.oval.1:var:6500' version='2'>
      <possible_value hint='Enabled'>Enabled</possible_value>
      <possible_value hint='Disabled'>Disabled</possible_value>
      <possible_value hint='Not Configured'>Not configured</possible_value>
    </external_variable>
    <external_variable comment='World Wide Web Publishing Services' datatype='int' id='oval:com.mcafee.oval.1:var:614921' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Wireless Zero Configuration' datatype='int' id='oval:com.mcafee.oval.1:var:6148211' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Windows Search Service Startup Type' datatype='int' id='oval:com.mcafee.oval.1:var:614821' version='3'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Universal Plug and Play Device Host' datatype='int' id='oval:com.mcafee.oval.1:var:614721' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Terminal Services' datatype='int' id='oval:com.mcafee.oval.1:var:614621' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Telnet' datatype='int' id='oval:com.mcafee.oval.1:var:614521' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Task Scheduler' datatype='int' id='oval:com.mcafee.oval.1:var:614421' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Simple Network Management Protocol (SNMP) Trap' datatype='int' id='oval:com.mcafee.oval.1:var:614321' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Simple Network Management Protocol (SNMP) Service' datatype='int' id='oval:com.mcafee.oval.1:var:614221' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Routing and Remote Access' datatype='int' id='oval:com.mcafee.oval.1:var:614121' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remote Access Connection Manager' datatype='int' id='oval:com.mcafee.oval.1:var:61402' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Infrared Monitor' datatype='int' id='oval:com.mcafee.oval.1:var:613921' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Indexing Service' datatype='int' id='oval:com.mcafee.oval.1:var:613821' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='IIS Admin Service' datatype='int' id='oval:com.mcafee.oval.1:var:613721' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='FTP Publishing Service' datatype='int' id='oval:com.mcafee.oval.1:var:613621' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Fax Service' datatype='int' id='oval:com.mcafee.oval.1:var:613521' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Dns Client Service' datatype='int' id='oval:com.mcafee.oval.1:var:61342' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Computer Browser' datatype='int' id='oval:com.mcafee.oval.1:var:613321' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Background Intelligent Transfer Service' datatype='int' id='oval:com.mcafee.oval.1:var:613221' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment="Turn Off User Installed Windows Sidebar Gadgets" datatype="string" id="oval:com.mcafee.oval.1:var:61311" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off unsigned gadgets" datatype="string" id="oval:com.mcafee.oval.1:var:61291" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment='Turn on Windows Meeting Space audting' datatype='int' id='oval:com.mcafee.oval.1:var:61281' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Meeting Space" datatype="string" id="oval:com.mcafee.oval.1:var:61271" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Prevent Windows Media DRM Internet Access" datatype="string" id="oval:com.mcafee.oval.1:var:61261" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Windows Mail application" datatype="string" id="oval:com.mcafee.oval.1:var:61251" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off the communities features" datatype="string" id="oval:com.mcafee.oval.1:var:61241" version="6">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment='Prohibit non-administrators from applying vendor signed updates' datatype='int' id='oval:com.mcafee.oval.1:var:61231' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit non-administrators from applying vendor signed updates' datatype='int' id='oval:com.mcafee.oval.1:var:61221' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Enable user control over installs' datatype='int' id='oval:com.mcafee.oval.1:var:61211' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable IE security prompt for Windows Installer scripts' datatype='int' id='oval:com.mcafee.oval.1:var:61201' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off shell protocol protected mode' datatype='int' id='oval:com.mcafee.oval.1:var:61191' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off Heap termination on corruption' datatype='int' id='oval:com.mcafee.oval.1:var:61181' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Do Not Send Additional Data" datatype="string" id="oval:com.mcafee.oval.1:var:61171" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment='Disable Error Notification' datatype='int' id='oval:com.mcafee.oval.1:var:61161' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable Windows Error Reporting' datatype='int' id='oval:com.mcafee.oval.1:var:61151' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Disable Logging" datatype="string" id="oval:com.mcafee.oval.1:var:61141" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment='Turn off Windows Defender' datatype='int' id='oval:com.mcafee.oval.1:var:61131' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow Corporate redirection of Customer Experience Improvement uploads' datatype='int' id='oval:com.mcafee.oval.1:var:61121' version='2' />
    <external_variable comment='Turn off Windows Calendar' datatype='int' id='oval:com.mcafee.oval.1:var:61111' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally encrypt or sign secure channel data (always)' datatype='int' id='oval:com.mcafee.oval.1:var:6111' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Turn off downloading of enclosures' datatype='int' id='oval:com.mcafee.oval.1:var:61101' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Turn off Untrusted Content" datatype="string" id="oval:com.mcafee.oval.1:var:61091" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment="Turn off Active Help" datatype="string" id="oval:com.mcafee.oval.1:var:61081" version="5">
      <possible_value hint="Enabled">Enabled</possible_value>
      <possible_value hint="Disabled">Disabled</possible_value>
      <possible_value hint="Not Configured">Not Configured</possible_value>
    </external_variable>
    <external_variable comment='Prevent IIS Installation' datatype='int' id='oval:com.mcafee.oval.1:var:61071' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Strengthen default permissions of internal system objects' datatype='int' id='oval:com.mcafee.oval.1:var:610511' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Require case insensitivity for non-Windows subsystems' datatype='int' id='oval:com.mcafee.oval.1:var:610411' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Use FIPS compliant algorithms for encryption, hashing, and signing' datatype='int' id='oval:com.mcafee.oval.1:var:610211' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Clear Virtual Memory Pagefile' datatype='int' id='oval:com.mcafee.oval.1:var:610111' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow System to be Shut Down Without Having to Log On' datatype='int' id='oval:com.mcafee.oval.1:var:610011' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow Floppy Copy and Access to All Drives and All Folders' datatype='int' id='oval:com.mcafee.oval.1:var:609911' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow Automatic Administrative Logon' datatype='int' id='oval:com.mcafee.oval.1:var:609811' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Minimum session security for NTLM SSP based (including secure RPC) servers' datatype='int' id='oval:com.mcafee.oval.1:var:609711' version='1' />
    <external_variable comment='Minimum session security for NTLM SSP based (including secure RPC) clients' datatype='int' id='oval:com.mcafee.oval.1:var:609611' version='1' />
    <external_variable comment='LDAP client signing requirements' datatype='int' id='oval:com.mcafee.oval.1:var:609511' version='1' />
    <external_variable comment='LAN Manager Authentication Level' datatype='int' id='oval:com.mcafee.oval.1:var:609411' version='1' />
    <external_variable comment='Require Smart card' datatype='int' id='oval:com.mcafee.oval.1:var:60821' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Network security: Force logoff when logon hours expire' datatype='int' id='oval:com.mcafee.oval.1:var:6081' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not store LAN Manager hash value (Enabled or Disabled)' datatype='string' id='oval:com.mcafee.oval.1:var:6080' version='2' />
    <external_variable comment='Sharing and security model for local accounts (0 or 1)' datatype='int' id='oval:com.mcafee.oval.1:var:6079' version='2' />
    <external_variable comment='Comments need to be added' datatype='string' id='oval:com.mcafee.oval.1:var:60771' version='1' />
    <external_variable comment='Comments need to be added' datatype='string' id='oval:com.mcafee.oval.1:var:60761' version='1' />
    <external_variable comment='Comments need to be added' datatype='string' id='oval:com.mcafee.oval.1:var:60741' version='1' />
    <external_variable comment='Let Everyone permissions apply to anonymous users' datatype='int' id='oval:com.mcafee.oval.1:var:60731' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not allow storage of credentials or .NET Passports for network authentication' datatype='int' id='oval:com.mcafee.oval.1:var:60721' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not allow anonymous enumeration of SAM accounts and shares' datatype='int' id='oval:com.mcafee.oval.1:var:60711' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not allow anonymous enumeration of SAM accounts' datatype='int' id='oval:com.mcafee.oval.1:var:60701' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Warning level (percentage)' datatype='int' id='oval:com.mcafee.oval.1:var:60691' version='2' />
    <external_variable comment='Maximum number of data retransmissions' datatype='int' id='oval:com.mcafee.oval.1:var:60681' version='2' />
    <external_variable comment='Maximum number of response retransmissions (0, 1, 2 or 3)' datatype='int' id='oval:com.mcafee.oval.1:var:60671' version='2' />
    <external_variable comment='Syn attack protection level (0 or 1)' datatype='int' id='oval:com.mcafee.oval.1:var:60661' version='2' />
    <external_variable comment='Screen Saver grace period (in seconds)' datatype='string' id='oval:com.mcafee.oval.1:var:60651' version='2' />
    <external_variable comment='Enable Safe DLL search mode' datatype='int' id='oval:com.mcafee.oval.1:var:60641' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Perform router discovery' datatype='int' id='oval:com.mcafee.oval.1:var:60631' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Stop generating 8.3 style filenames' datatype='int' id='oval:com.mcafee.oval.1:var:60621' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Ignore NetBIOS name release requests' datatype='int' id='oval:com.mcafee.oval.1:var:60611' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disable Autorun for all drives ( 0 or 255)' datatype='int' id='oval:com.mcafee.oval.1:var:60601' version='2' />
    <external_variable comment='Keep alive time (in milliseconds)' datatype='int' id='oval:com.mcafee.oval.1:var:60591' version='2' />
    <external_variable comment='Hide Computer From the Browse List' datatype='int' id='oval:com.mcafee.oval.1:var:60581' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow ICMP redirects' datatype='int' id='oval:com.mcafee.oval.1:var:60571' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow automatic detection of dead network gateways' datatype='int' id='oval:com.mcafee.oval.1:var:60561' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prevent the dial-up password from being saved' datatype='int' id='oval:com.mcafee.oval.1:var:605511' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='IP source routing protection level' datatype='int' id='oval:com.mcafee.oval.1:var:60551' version='2' />
    <external_variable comment='Enable Automatic Logon' datatype='int' id='oval:com.mcafee.oval.1:var:60541' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Disconnect clients when logon hours expire' datatype='int' id='oval:com.mcafee.oval.1:var:60531' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign communications (if client agrees)' datatype='int' id='oval:com.mcafee.oval.1:var:60521' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign communications (always)' datatype='int' id='oval:com.mcafee.oval.1:var:60511' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Amount of idle time (in minutes) required before suspending session' datatype='int' id='oval:com.mcafee.oval.1:var:60501' version='2' />
    <external_variable comment='Send unencrypted password to third-party SMB servers' datatype='int' id='oval:com.mcafee.oval.1:var:60491' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign communications (if server agrees)' datatype='int' id='oval:com.mcafee.oval.1:var:60481' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign communications (always)' datatype='int' id='oval:com.mcafee.oval.1:var:60471' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Smart card removal behavior (0, 1, 2 or 3)' datatype='string' id='oval:com.mcafee.oval.1:var:60461' version='2' />
    <external_variable comment='Require Domain Controller authentication to unlock workstation' datatype='int' id='oval:com.mcafee.oval.1:var:60451' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prompt user to change password ( x ) days before expiration' datatype='int' id='oval:com.mcafee.oval.1:var:60441' version='2' />
    <external_variable comment='Number of previous logons to cache' datatype='string' id='oval:com.mcafee.oval.1:var:60431' version='2' />
    <external_variable comment='Message title for users attempting to log on' datatype='string' id='oval:com.mcafee.oval.1:var:60421' version='2' />
    <external_variable comment='Message text for users attempting to log on' datatype='string' id='oval:com.mcafee.oval.1:var:60411' version='2' />
    <external_variable comment='Do not require CTRL+ALT+DEL' datatype='int' id='oval:com.mcafee.oval.1:var:60401' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Do not display last user name' datatype='int' id='oval:com.mcafee.oval.1:var:60391' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Require strong (Windows 2000 or later) session key' datatype='int' id='oval:com.mcafee.oval.1:var:60381' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Maximum machine account password age (in days)' datatype='int' id='oval:com.mcafee.oval.1:var:60371' version='2' />
    <external_variable comment='Disable machine account password changes' datatype='int' id='oval:com.mcafee.oval.1:var:60361' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally sign secure channel data (when possible)' datatype='int' id='oval:com.mcafee.oval.1:var:60351' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally encrypt or sign secure channel data (always)' datatype='int' id='oval:com.mcafee.oval.1:var:60341' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Digitally encrypt or sign secure channel data (when possible)' datatype='int' id='oval:com.mcafee.oval.1:var:60331' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Restrict Floppy access (0 or 1)' datatype='string' id='oval:com.mcafee.oval.1:var:60321' version='2' />
    <external_variable comment='Restrict CD-ROM access (0 or 1)' datatype='string' id='oval:com.mcafee.oval.1:var:60311' version='2' />
    <external_variable comment='Prevent users from installing printer drivers' datatype='int' id='oval:com.mcafee.oval.1:var:60301' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allowed to format and eject removable media (0, 1 or 2)' datatype='string' id='oval:com.mcafee.oval.1:var:60291' version='2' />
    <external_variable comment='Allow undock without having to log on' datatype='int' id='oval:com.mcafee.oval.1:var:60281' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Shut down system immediately if unable to log security audits' datatype='int' id='oval:com.mcafee.oval.1:var:60271' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment="Force audit policy subcategory settings" datatype="int" id="oval:com.mcafee.oval.1:var:60261" version="5">
      <possible_value hint="Enabled">1</possible_value>
      <possible_value hint="Disabled">0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit installation and configuration of Network Bridge on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.1:var:6026' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit the use of Backup and Restore privilege' datatype='binary' id='oval:com.mcafee.oval.1:var:60251' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit use of Internet Connection Firewall on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.1:var:6025' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit the access of global system objects' datatype='int' id='oval:com.mcafee.oval.1:var:60241' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Prohibit use of Internet Connection Sharing on your DNS domain network' datatype='int' id='oval:com.mcafee.oval.1:var:6024' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Limit local account use to blank passwords to console logon only' datatype='int' id='oval:com.mcafee.oval.1:var:60211' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Guest account status' datatype='boolean' id='oval:com.mcafee.oval.1:var:60201' version='2' />
    <external_variable comment='Administrator account status' datatype='boolean' id='oval:com.mcafee.oval.1:var:60191' version='2' />
    <external_variable comment='Audit Level: Audit System Events' datatype='string' id='oval:com.mcafee.oval.1:var:60181' version='2'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit Process Tracking' datatype='string' id='oval:com.mcafee.oval.1:var:60171' version='3'>
      <possible_value hint='Failure only'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Success only'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Success and Failure'>AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint='None'>AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment='Audit Privilege Use' datatype='string' id='oval:com.mcafee.oval.1:var:60161' version='3'>
      <possible_value hint='Failure only'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Success only'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Success and Failure'>AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint='None'>AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment='Audit Level: Audit Policy Change' datatype='string' id='oval:com.mcafee.oval.1:var:60151' version='2'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit Object Access' datatype='string' id='oval:com.mcafee.oval.1:var:60141' version='3'>
      <possible_value hint='Failure only'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Success only'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Success and Failure'>AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint='None'>AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment='Audit Level: Audit Logon Events' datatype='string' id='oval:com.mcafee.oval.1:var:60131' version='2'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit Directory Service Access' datatype='string' id='oval:com.mcafee.oval.1:var:60121' version='3'>
      <possible_value hint='Failure only'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Success only'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Success and Failure'>AUDIT_SUCCESS_FAILURE</possible_value>
      <possible_value hint='None'>AUDIT_NONE</possible_value>
    </external_variable>
    <external_variable comment='Audit Level: Audit Account Management' datatype='string' id='oval:com.mcafee.oval.1:var:60111' version='2'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit Level: Audit Account Login' datatype='string' id='oval:com.mcafee.oval.1:var:60101' version='2'>
      <possible_value hint='Logs failures only.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Does not log anything.'>AUDIT_NONE</possible_value>
      <possible_value hint='Logs successes only.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Logs both successes and failures.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Reset Account Lockout Counter After ( x ) seconds' datatype='int' id='oval:com.mcafee.oval.1:var:60091' version='3' />
    <external_variable comment='Account Lockout Threshold (number of bad attempts)' datatype='int' id='oval:com.mcafee.oval.1:var:60081' version='2' />
    <external_variable comment='Lockout duration in seconds (seconds = days * 86400)' datatype='int' id='oval:com.mcafee.oval.1:var:60071' version='2' />
    <external_variable comment='Minimum password length' datatype='int' id='oval:com.mcafee.oval.1:var:60061' version='2' />
    <external_variable comment='Reversible Password Encryption' datatype='boolean' id='oval:com.mcafee.oval.1:var:60051' version='2' />
    <external_variable comment='Password meets complexity requirements' datatype='boolean' id='oval:com.mcafee.oval.1:var:60041' version='2' />
    <external_variable comment='Minimum Password Age (in seconds)' datatype='int' id='oval:com.mcafee.oval.1:var:60031' version='3' />
    <external_variable comment='Maximum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.1:var:60021' version='2' />
    <external_variable comment='Number of passwords remembered' datatype='int' id='oval:com.mcafee.oval.1:var:60011' version='2' />
    <external_variable comment='status of auditing the use of the backup and restore privilege' datatype='boolean' id='oval:com.mcafee.oval.1:var:53' version='1' />
    <external_variable comment="status of limiting the use of blank passwords" datatype="int" id="oval:com.mcafee.oval.1:var:52" version="2" />
    <external_variable comment='status of built-in Guest account' datatype='boolean' id='oval:com.mcafee.oval.1:var:51' version='1' />
    <external_variable comment='status of built-in Administrator account' datatype='boolean' id='oval:com.mcafee.oval.1:var:50' version='1' />
    <external_variable comment='How often keep-alive packets are sent in milliseconds' datatype='int' id='oval:com.mcafee.oval.1:var:5' version='1' />
    <external_variable comment='Audit process tracking' datatype='string' id='oval:com.mcafee.oval.1:var:42' version='1'>
      <possible_value hint='Does not audit events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed events such as program activation, process exit, handle duplication, and indirect object access.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Enable PMTU Discovery' datatype='int' id='oval:com.mcafee.oval.1:var:407' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='TCPMaxPortsExhausted - Number of connections refused' datatype='int' id='oval:com.mcafee.oval.1:var:406' version='2' />
    <external_variable comment='TcpMaxHalfOpenRetried - Number of connections permitted' datatype='int' id='oval:com.mcafee.oval.1:var:405' version='2' />
    <external_variable comment='TcpMaxHalfOpen - Number of connections permitted' datatype='int' id='oval:com.mcafee.oval.1:var:404' version='2' />
    <external_variable comment='CDrom Autorun' datatype='int' id='oval:com.mcafee.oval.1:var:402' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Should dr. watson be disabled' datatype='int' id='oval:com.mcafee.oval.1:var:401' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Create a memory crash dump file' datatype='int' id='oval:com.mcafee.oval.1:var:400' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit system events' datatype='string' id='oval:com.mcafee.oval.1:var:38' version='1'>
      <possible_value hint='Does not audit attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user restarting or shutting down the computer or when an event occurs that affects either the system security or the security log.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit privilege use' datatype='string' id='oval:com.mcafee.oval.1:var:37' version='1'>
      <possible_value hint='Does not audit attempts by a user in exercising a user right.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts by a user in exercising a user right.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts by a user in exercising a user right.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts by a user in exercising a user right.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit policy change' datatype='string' id='oval:com.mcafee.oval.1:var:36' version='1'>
      <possible_value hint='Does not audit attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempt to change user rights assignment policies, audit policies, and trust policies.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit object access' datatype='string' id='oval:com.mcafee.oval.1:var:35' version='1'>
      <possible_value hint='Does not audit attempts of a user accessing an object that has its own SACL specified.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of a user accessing an object that has its own SACL specified.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit logon events' datatype='string' id='oval:com.mcafee.oval.1:var:33' version='1'>
      <possible_value hint='Does not audit attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts of users logging on, logging off, or making a network connection to the local computer.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit directory service access' datatype='string' id='oval:com.mcafee.oval.1:var:32' version='1'>
      <possible_value hint='Does not audit attempts to access directory services.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to access directory services.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to access directory services.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to access directory services.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Audit account management' datatype='string' id='oval:com.mcafee.oval.1:var:31' version='1'>
      <possible_value hint='Does not audit attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed attempts to create, change, or delete a user account or attempts to rename, disable, enable, or change a password of a user account.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='Maximum machine account password age (in days)' datatype='int' id='oval:com.mcafee.oval.1:var:30' version='2' />
    <external_variable comment='Automatic Logon Disabled' datatype='int' id='oval:com.mcafee.oval.1:var:293' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow automatic detection of dead network gateways' datatype='int' id='oval:com.mcafee.oval.1:var:292' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Ignore NetBIOS name release requests' datatype='int' id='oval:com.mcafee.oval.1:var:291' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Allow ICMP redirects to override OSPF generated routes disabled' datatype='int' id='oval:com.mcafee.oval.1:var:290' version='3'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Audit account logon events' datatype='string' id='oval:com.mcafee.oval.1:var:29' version='1'>
      <possible_value hint='Does not audit log ons and log offs of a remote computer from this workstation.'>AUDIT_NONE</possible_value>
      <possible_value hint='Audits the successful log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS</possible_value>
      <possible_value hint='Audits failed log ons and log offs of a remote computer from this workstation.'>AUDIT_FAILURE</possible_value>
      <possible_value hint='Audits the successful and failed log ons and log offs of a remote computer from this workstation.'>AUDIT_SUCCESS_FAILURE</possible_value>
    </external_variable>
    <external_variable comment='IP source routing protection level' datatype='int' id='oval:com.mcafee.oval.1:var:289' version='1' />
    <external_variable comment='Wireless Zero Configuration' datatype='int' id='oval:com.mcafee.oval.1:var:28812' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='SynAttackProtectionLevel' datatype='int' id='oval:com.mcafee.oval.1:var:288' version='1' />
    <external_variable comment='Specifies how the system responds when a user tries to install device driver files that are not digitally signed.' datatype='int' id='oval:com.mcafee.oval.1:var:287' version='1'>
      <possible_value hint='ignore'>0</possible_value>
      <possible_value hint='warn'>1</possible_value>
      <possible_value hint='block'>2</possible_value>
    </external_variable>
    <external_variable comment="should router discovery be performed on this interface" datatype="int" id="oval:com.mcafee.oval.1:var:286" version="2">
      <possible_value hint="Disables router discovery">0</possible_value>
      <possible_value hint="Enables router discovery">1</possible_value>
    </external_variable>
    <external_variable comment='Minimum session security for NTLM SSP based (including secure RPC) servers' datatype='int' id='oval:com.mcafee.oval.1:var:285' version='1' />
    <external_variable comment='minimum session security for NTLM SSP based (including secure RPC) clients' datatype='int' id='oval:com.mcafee.oval.1:var:284' version='1' />
    <external_variable comment='desired behavior when smart card is removed' datatype='int' id='oval:com.mcafee.oval.1:var:283' version='1'>
      <possible_value hint='no action'>0</possible_value>
      <possible_value hint='lock workstation'>1</possible_value>
      <possible_value hint='force logoff'>2</possible_value>
    </external_variable>
    <external_variable comment="restrict access to floppy drive to locally logged-on users" datatype="int" id="oval:com.mcafee.oval.1:var:282" version="2">
      <possible_value hint="Only locally logged on users are allowed to access the floppy drive.">1</possible_value>
      <possible_value hint="Access to the floppy drive is not restricted to locally logged on users.">0</possible_value>
    </external_variable>
    <external_variable comment="restrict access to CDROM drive to locally logged-on users" datatype="int" id="oval:com.mcafee.oval.1:var:281" version="2">
      <possible_value hint="Only locally logged on users are allowed to access the CDROM drive.">1</possible_value>
      <possible_value hint="Access to the CDROM drive is not restricted to locally logged on users.">0</possible_value>
    </external_variable>
    <external_variable comment="Microsoft network client: Digitally sign communications (always)" datatype="int" id="oval:com.mcafee.oval.1:var:280" version="2">
      <possible_value hint="The client policy is set to not always sign packets.">0</possible_value>
      <possible_value hint="The client policy is set to always sign packets.">1</possible_value>
    </external_variable>
    <external_variable comment="Require Domain Controller authentication to unlock workstation" datatype="int" id="oval:com.mcafee.oval.1:var:279" version="2">
      <possible_value hint="Domain controller authentication is not required to unlock the workstation">0</possible_value>
      <possible_value hint="Domain controller authentication is required to unlock the workstation">1</possible_value>
    </external_variable>
    <external_variable comment='Require strong (Windows 2000 or later) session key' datatype='int' id='oval:com.mcafee.oval.1:var:278' version='1'>
      <possible_value hint='Requires strong (Windows 2000 or later) session key'>1</possible_value>
      <possible_value hint='Does not require strong (Windows 2000 or later) session key'>0</possible_value>
    </external_variable>
    <external_variable comment="Prevent users from installing printer drivers" datatype="int" id="oval:com.mcafee.oval.1:var:277" version="2">
      <possible_value hint="Only Administrators are allowed to add and to delete printer drivers on the local system.">1</possible_value>
      <possible_value hint="Users are allowed to add and to delete printer drivers on the local system.">0</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the system log' datatype='int' id='oval:com.mcafee.oval.1:var:261' version='1'>
      <possible_value hint='events in the system log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the system log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the system log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the security log' datatype='int' id='oval:com.mcafee.oval.1:var:260' version='1'>
      <possible_value hint='events in the security log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the security log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the security log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='retention method used by the application log' datatype='int' id='oval:com.mcafee.oval.1:var:259' version='1'>
      <possible_value hint='events in the application log should be overwritten as needed'>0</possible_value>
      <possible_restriction hint='events in the application log should be overwritten when they are X seconds old'>
        <restriction operation='less than'>4294967295</restriction>
      </possible_restriction>
      <possible_value hint='events in the application log should not be overwritten'>4294967295</possible_value>
    </external_variable>
    <external_variable comment='number of passwords remembered' datatype='int' id='oval:com.mcafee.oval.1:var:24' version='1' />
    <external_variable comment='Terminal Services Service' datatype='int' id='oval:com.mcafee.oval.1:var:22611' version='4'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Remote Desktop Help Session Manager Service Disabled' datatype='int' id='oval:com.mcafee.oval.1:var:21811' version='2'>
      <possible_value hint='2 - Automatic'>2</possible_value>
      <possible_value hint='3 - Manual'>3</possible_value>
      <possible_value hint='4 - Disabled'>4</possible_value>
    </external_variable>
    <external_variable comment='Specifies whether the server should force a client to disconnect once the client&#39;s logon time has expired' datatype='int' id='oval:com.mcafee.oval.1:var:216' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='Amount of idle time (in minutes) required before susending session' datatype='int' id='oval:com.mcafee.oval.1:var:215' version='2' />
    <external_variable comment="Specifies whether system can send unencrypted password to third-party SMB servers" datatype="int" id="oval:com.mcafee.oval.1:var:214" version="2" />
    <external_variable comment='maximum size (in bytes) of application log' datatype='int' id='oval:com.mcafee.oval.1:var:16' version='1' />
    <external_variable comment='Account lockout duration (in seconds)' datatype='int' id='oval:com.mcafee.oval.1:var:15' version='2' />
    <external_variable comment='Number of days to prompt user to change password before expiration' datatype='int' id='oval:com.mcafee.oval.1:var:14' version='1' />
    <external_variable comment='are passwords stored using reversible encrption' datatype='boolean' id='oval:com.mcafee.oval.1:var:13' version='1' />
    <external_variable comment="is the local guests group prevented from accessing the system log" datatype="int" id="oval:com.mcafee.oval.1:var:122" version="2" />
    <external_variable comment="is the local guests group prevented from accessing the sycurity log" datatype="int" id="oval:com.mcafee.oval.1:var:121" version="2" />
    <external_variable comment='is the local guests group prevented from accessing the application log' datatype='boolean' id='oval:com.mcafee.oval.1:var:120' version='1' />
    <external_variable comment='minimum password length' datatype='int' id='oval:com.mcafee.oval.1:var:12' version='1' />
    <external_variable comment='Reset account lockout counter after ( x ) seconds' datatype='int' id='oval:com.mcafee.oval.1:var:115' version='2' />
    <external_variable comment='Prevent the dial-up password from being saved' datatype='int' id='oval:com.mcafee.oval.1:var:1110' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='is password complexity enforced' datatype='boolean' id='oval:com.mcafee.oval.1:var:11' version='1' />
    <external_variable comment='Allow system to be shut down without having to log on' datatype='int' id='oval:com.mcafee.oval.1:var:10311' version='2'>
      <possible_value hint='Enabled'>1</possible_value>
      <possible_value hint='Disabled'>0</possible_value>
    </external_variable>
    <external_variable comment='How many times unacknowledged data is retransmitted' datatype='int' id='oval:com.mcafee.oval.1:var:103' version='1' />
    <external_variable comment='Number of previous logons to cache' datatype='string' id='oval:com.mcafee.oval.1:var:102' version='1' />
    <external_variable comment='Minimum password age (in seconds)' datatype='int' id='oval:com.mcafee.oval.1:var:101' version='2' />
    <external_variable comment='Account lockout threshold (number of bad attempts before lockout)' datatype='int' id='oval:com.mcafee.oval.1:var:10' version='2' />
  </variables>
</oval_definitions>
