initial commit of LME

.github/workflows/main.yml

@@ -0,0 +1,47 @@
+---
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+*'  # match basic semver tags
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Linters
+        run: true  # place-holder
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Tests
+        run: true  # place-holder
+
+  release:
+    runs-on: ubuntu-latest
+    if: startsWith(github.ref, 'refs/tags/v')
+    needs: [lint, test]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+
+      - name: Set up tag name
+        id: tag
+        run: echo "::set-output name=tag::${GITHUB_REF##*/}"
+
+      - name: Build
+        run: git ls-files | zip release-${{ steps.tag.outputs.tag }}.zip -@
+
+      - name: Release
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
+        with:
+          files: release-${{ steps.tag.outputs.tag }}.zip
+          draft: true
+          generate_release_notes: true
+          fail_on_unmatched_files: true

.gitignore

@@ -0,0 +1,2 @@
+*.pdf
+.DS_Store

Chapter 1 Files/Group Policy Objects/manifest.xml

@@ -0,0 +1 @@
+<Backups xmlns="http://www.microsoft.com/GroupPolicy/GPOOperations/Manifest" xmlns:mfst="http://www.microsoft.com/GroupPolicy/GPOOperations/Manifest" mfst:version="1.0"><BackupInst><GPOGuid><![CDATA[{04D580AF-4607-4F9A-B299-254AE1156BD6}]]></GPOGuid><GPODomain><![CDATA[testme.local]]></GPODomain><GPODomainGuid><![CDATA[{5280a6af-b0f2-47cb-883b-cfb949aaaa5b}]]></GPODomainGuid><GPODomainController><![CDATA[server1.testme.local]]></GPODomainController><BackupTime><![CDATA[2019-01-09T10:58:47]]></BackupTime><ID><![CDATA[{85A544BE-53DC-4180-979D-8611A5D340A2}]]></ID><Comment><![CDATA[wef server]]></Comment><GPODisplayName><![CDATA[lme-wef-server]]></GPODisplayName></BackupInst><BackupInst><GPOGuid><![CDATA[{E3BD71B0-8B12-43F8-9DD9-26F1148A1929}]]></GPOGuid><GPODomain><![CDATA[testme.local]]></GPODomain><GPODomainGuid><![CDATA[{5280a6af-b0f2-47cb-883b-cfb949aaaa5b}]]></GPODomainGuid><GPODomainController><![CDATA[server1.testme.local]]></GPODomainController><BackupTime><![CDATA[2019-01-09T10:58:37]]></BackupTime><ID><![CDATA[{58B5FEFE-1D71-4C19-A9FF-5FD31B84313C}]]></ID><Comment><![CDATA[wef client]]></Comment><GPODisplayName><![CDATA[lme-wef-client]]></GPODisplayName></BackupInst></Backups>

Chapter 1 Files/Group Policy Objects/{36FE9489-FE2B-42DF-835C-DEA226B1AC72}/Backup.xml

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="utf-8"?><!-- Copyright (c) Microsoft Corporation.  All rights reserved. --><GroupPolicyBackupScheme bkp:version="2.0" bkp:type="GroupPolicyBackupTemplate" xmlns:bkp="http://www.microsoft.com/GroupPolicy/GPOOperations" xmlns="http://www.microsoft.com/GroupPolicy/GPOOperations">
+    <GroupPolicyObject><SecurityGroups><Group bkp:Source="FromDACL"><Sid><![CDATA[S-1-5-21-1266561316-1341527384-1045670060-519]]></Sid><SamAccountName><![CDATA[Enterprise Admins]]></SamAccountName><Type><![CDATA[UniversalGroup]]></Type><NetBIOSDomainName><![CDATA[TESTME]]></NetBIOSDomainName><DnsDomainName><![CDATA[testme.local]]></DnsDomainName><UPN><![CDATA[Enterprise Admins@testme.local]]></UPN></Group><Group bkp:Source="FromDACL"><Sid><![CDATA[S-1-5-21-1266561316-1341527384-1045670060-512]]></Sid><SamAccountName><![CDATA[Domain Admins]]></SamAccountName><Type><![CDATA[GlobalGroup]]></Type><NetBIOSDomainName><![CDATA[TESTME]]></NetBIOSDomainName><DnsDomainName><![CDATA[testme.local]]></DnsDomainName><UPN><![CDATA[Domain Admins@testme.local]]></UPN></Group></SecurityGroups><FilePaths/><GroupPolicyCoreSettings><ID><![CDATA[{21B73D02-E040-4408-B9B9-A58163B18ED9}]]></ID><Domain><![CDATA[testme.local]]></Domain><SecurityDescriptor>01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 24 31 7e 4b 58 15 f6 4f ac a8 53 3e 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 24 31 7e 4b 58 15 f6 4f ac a8 53 3e 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 24 31 7e 4b 58 15 f6 4f ac a8 53 3e 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00</SecurityDescriptor><DisplayName><![CDATA[LME-WEC-Server]]></DisplayName><Options><![CDATA[1]]></Options><UserVersionNumber><![CDATA[65537]]></UserVersionNumber><MachineVersionNumber><![CDATA[65537]]></MachineVersionNumber><MachineExtensionGuids><![CDATA[[{00000000-0000-0000-0000-000000000000}{CC5746A9-9B74-4BE5-AE2E-64379C86E0E4}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{91FBB303-0CD5-4055-BF42-E512A681B325}{CC5746A9-9B74-4BE5-AE2E-64379C86E0E4}]]]></MachineExtensionGuids><UserExtensionGuids/><WMIFilter/></GroupPolicyCoreSettings> 
+        <GroupPolicyExtension bkp:ID="{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" bkp:DescName="Registry">
+            <FSObjectFile bkp:Path="%GPO_MACH_FSPATH%\registry.pol" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\registry.pol" bkp:Location="DomainSysvol\GPO\Machine\registry.pol"/>
+
+            <FSObjectFile bkp:Path="%GPO_FSPATH%\Adm\*.*" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Adm\*.*"/>
+        </GroupPolicyExtension>
+
+
+
+
+        <GroupPolicyExtension bkp:ID="{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" bkp:DescName="Security">
+            <FSObjectFile bkp:Path="%GPO_MACH_FSPATH%\microsoft\windows nt\SecEdit\GptTmpl.inf" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf" bkp:ReEvaluateFunction="SecurityValidateSettings" bkp:Location="DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf"/>
+        </GroupPolicyExtension>
+
+
+
+
+    <GroupPolicyExtension bkp:ID="{F15C46CD-82A0-4C2D-A210-5D0D3182A418}" bkp:DescName="Unknown Extension"><FSObjectFile bkp:Path="%GPO_MACH_FSPATH%\comment.cmtx" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\comment.cmtx" bkp:Location="DomainSysvol\GPO\Machine\comment.cmtx"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\microsoft" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\microsoft" bkp:Location="DomainSysvol\GPO\Machine\microsoft"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\microsoft\windows nt" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\microsoft\windows nt" bkp:Location="DomainSysvol\GPO\Machine\microsoft\windows nt"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\microsoft\windows nt\SecEdit" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\microsoft\windows nt\SecEdit" bkp:Location="DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Preferences" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\Preferences" bkp:Location="DomainSysvol\GPO\Machine\Preferences"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Preferences\Services" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\Preferences\Services" bkp:Location="DomainSysvol\GPO\Machine\Preferences\Services"/><FSObjectFile bkp:Path="%GPO_MACH_FSPATH%\Preferences\Services\Services.xml" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\Preferences\Services\Services.xml" bkp:Location="DomainSysvol\GPO\Machine\Preferences\Services\Services.xml"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Scripts" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\Scripts" bkp:Location="DomainSysvol\GPO\Machine\Scripts"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Scripts\Shutdown" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\Scripts\Shutdown" bkp:Location="DomainSysvol\GPO\Machine\Scripts\Shutdown"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Scripts\Startup" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{21B73D02-E040-4408-B9B9-A58163B18ED9}\Machine\Scripts\Startup" bkp:Location="DomainSysvol\GPO\Machine\Scripts\Startup"/></GroupPolicyExtension></GroupPolicyObject>
+</GroupPolicyBackupScheme>

Chapter 1 Files/Group Policy Objects/{36FE9489-FE2B-42DF-835C-DEA226B1AC72}/DomainSysvol/GPO/Machine/Preferences/Services/Services.xml

@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="utf-8"?>
+<NTServices clsid="{2CFB484A-4E96-4b5d-A0B6-093D2F91E6AE}"><NTService clsid="{AB6F0B67-341F-4e51-92F9-005FBFBA1A43}" name="Wecsvc" image="2" changed="2018-12-04 16:53:57" uid="{EABCB6BD-E7C0-4631-A2AB-501A06EDF628}"><Properties startupType="AUTOMATIC" serviceName="Wecsvc" serviceAction="START" timeout="30"/></NTService>
+</NTServices>

Chapter 1 Files/Group Policy Objects/{36FE9489-FE2B-42DF-835C-DEA226B1AC72}/DomainSysvol/GPO/Machine/comment.cmtx

@@ -0,0 +1,12 @@
+<?xml version='1.0' encoding='utf-8'?>
+<policyComments xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://www.microsoft.com/GroupPolicy/CommentDefinitions">
+  <policyNamespaces>
+    <using prefix="ns0" namespace="Microsoft.Policies.WindowsRemoteManagement"></using>
+  </policyNamespaces>
+  <comments>
+    <admTemplate></admTemplate>
+  </comments>
+  <resources minRequiredRevision="1.0">
+    <stringTable></stringTable>
+  </resources>
+</policyComments>

Chapter 1 Files/Group Policy Objects/{36FE9489-FE2B-42DF-835C-DEA226B1AC72}/bkupInfo.xml

@@ -0,0 +1 @@
+<BackupInst xmlns="http://www.microsoft.com/GroupPolicy/GPOOperations/Manifest"><GPOGuid><![CDATA[{21B73D02-E040-4408-B9B9-A58163B18ED9}]]></GPOGuid><GPODomain><![CDATA[testme.local]]></GPODomain><GPODomainGuid><![CDATA[{68e764d0-52a1-4ef3-b69e-5b92a3586ce0}]]></GPODomainGuid><GPODomainController><![CDATA[WIN-9RC3MUTOOI2.testme.local]]></GPODomainController><BackupTime><![CDATA[2019-04-04T15:59:00]]></BackupTime><ID><![CDATA[{36FE9489-FE2B-42DF-835C-DEA226B1AC72}]]></ID><Comment><![CDATA[LME-WEC-Server]]></Comment><GPODisplayName><![CDATA[LME-WEC-Server]]></GPODisplayName></BackupInst>

Chapter 1 Files/Group Policy Objects/{9C409013-05EC-4640-B27A-617EDE2FA837}/Backup.xml

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="utf-8"?><!-- Copyright (c) Microsoft Corporation.  All rights reserved. --><GroupPolicyBackupScheme bkp:version="2.0" bkp:type="GroupPolicyBackupTemplate" xmlns:bkp="http://www.microsoft.com/GroupPolicy/GPOOperations" xmlns="http://www.microsoft.com/GroupPolicy/GPOOperations">
+    <GroupPolicyObject><SecurityGroups><Group bkp:Source="FromDACL"><Sid><![CDATA[S-1-5-21-1266561316-1341527384-1045670060-519]]></Sid><SamAccountName><![CDATA[Enterprise Admins]]></SamAccountName><Type><![CDATA[UniversalGroup]]></Type><NetBIOSDomainName><![CDATA[TESTME]]></NetBIOSDomainName><DnsDomainName><![CDATA[testme.local]]></DnsDomainName><UPN><![CDATA[Enterprise Admins@testme.local]]></UPN></Group><Group bkp:Source="FromDACL"><Sid><![CDATA[S-1-5-21-1266561316-1341527384-1045670060-512]]></Sid><SamAccountName><![CDATA[Domain Admins]]></SamAccountName><Type><![CDATA[GlobalGroup]]></Type><NetBIOSDomainName><![CDATA[TESTME]]></NetBIOSDomainName><DnsDomainName><![CDATA[testme.local]]></DnsDomainName><UPN><![CDATA[Domain Admins@testme.local]]></UPN></Group></SecurityGroups><FilePaths/><GroupPolicyCoreSettings><ID><![CDATA[{416E7468-FB62-45A1-AB9D-91AE881F1814}]]></ID><Domain><![CDATA[testme.local]]></Domain><SecurityDescriptor>01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 24 31 7e 4b 58 15 f6 4f ac a8 53 3e 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 24 31 7e 4b 58 15 f6 4f ac a8 53 3e 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 24 31 7e 4b 58 15 f6 4f ac a8 53 3e 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00</SecurityDescriptor><DisplayName><![CDATA[LME-WEC-Client]]></DisplayName><Options><![CDATA[1]]></Options><UserVersionNumber><![CDATA[65537]]></UserVersionNumber><MachineVersionNumber><![CDATA[65537]]></MachineVersionNumber><MachineExtensionGuids><![CDATA[[{00000000-0000-0000-0000-000000000000}{79F92669-4224-476C-9C5C-6EFB4D87DF4A}{CC5746A9-9B74-4BE5-AE2E-64379C86E0E4}][{17D89FEC-5C44-4972-B12D-241CAEF74509}{79F92669-4224-476C-9C5C-6EFB4D87DF4A}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{91FBB303-0CD5-4055-BF42-E512A681B325}{CC5746A9-9B74-4BE5-AE2E-64379C86E0E4}]]]></MachineExtensionGuids><UserExtensionGuids/><WMIFilter/></GroupPolicyCoreSettings> 
+        <GroupPolicyExtension bkp:ID="{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" bkp:DescName="Registry">
+            <FSObjectFile bkp:Path="%GPO_MACH_FSPATH%\registry.pol" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\registry.pol" bkp:Location="DomainSysvol\GPO\Machine\registry.pol"/>
+
+            <FSObjectFile bkp:Path="%GPO_FSPATH%\Adm\*.*" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Adm\*.*"/>
+        </GroupPolicyExtension>
+
+
+
+
+        <GroupPolicyExtension bkp:ID="{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" bkp:DescName="Security">
+            <FSObjectFile bkp:Path="%GPO_MACH_FSPATH%\microsoft\windows nt\SecEdit\GptTmpl.inf" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf" bkp:ReEvaluateFunction="SecurityValidateSettings" bkp:Location="DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf"/>
+        </GroupPolicyExtension>
+
+
+
+
+    <GroupPolicyExtension bkp:ID="{F15C46CD-82A0-4C2D-A210-5D0D3182A418}" bkp:DescName="Unknown Extension"><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Applications" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\Applications" bkp:Location="DomainSysvol\GPO\Machine\Applications"/><FSObjectFile bkp:Path="%GPO_MACH_FSPATH%\comment.cmtx" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\comment.cmtx" bkp:Location="DomainSysvol\GPO\Machine\comment.cmtx"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\microsoft" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\microsoft" bkp:Location="DomainSysvol\GPO\Machine\microsoft"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\microsoft\windows nt" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\microsoft\windows nt" bkp:Location="DomainSysvol\GPO\Machine\microsoft\windows nt"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\microsoft\windows nt\SecEdit" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\microsoft\windows nt\SecEdit" bkp:Location="DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Preferences" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\Preferences" bkp:Location="DomainSysvol\GPO\Machine\Preferences"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Preferences\Groups" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\Preferences\Groups" bkp:Location="DomainSysvol\GPO\Machine\Preferences\Groups"/><FSObjectFile bkp:Path="%GPO_MACH_FSPATH%\Preferences\Groups\Groups.xml" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\Preferences\Groups\Groups.xml" bkp:Location="DomainSysvol\GPO\Machine\Preferences\Groups\Groups.xml"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Preferences\Services" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\Preferences\Services" bkp:Location="DomainSysvol\GPO\Machine\Preferences\Services"/><FSObjectFile bkp:Path="%GPO_MACH_FSPATH%\Preferences\Services\Services.xml" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\Preferences\Services\Services.xml" bkp:Location="DomainSysvol\GPO\Machine\Preferences\Services\Services.xml"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Scripts" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\Scripts" bkp:Location="DomainSysvol\GPO\Machine\Scripts"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Scripts\Shutdown" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\Scripts\Shutdown" bkp:Location="DomainSysvol\GPO\Machine\Scripts\Shutdown"/><FSObjectDir bkp:Path="%GPO_MACH_FSPATH%\Scripts\Startup" bkp:SourceExpandedPath="\\WIN-9RC3MUTOOI2.testme.local\sysvol\testme.local\Policies\{416E7468-FB62-45A1-AB9D-91AE881F1814}\Machine\Scripts\Startup" bkp:Location="DomainSysvol\GPO\Machine\Scripts\Startup"/></GroupPolicyExtension></GroupPolicyObject>
+</GroupPolicyBackupScheme>

Chapter 1 Files/Group Policy Objects/{9C409013-05EC-4640-B27A-617EDE2FA837}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml

@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Groups clsid="{3125E937-EB16-4b4c-9934-544FC6D24D26}"><Group clsid="{6D4A79E4-529C-4481-ABD0-F5BD7EA93BA7}" name="Event Log Readers (built-in)" image="2" changed="2018-09-03 20:15:54" uid="{8AF6E90E-FDC5-4496-9DBE-AECE8F068A32}"><Properties action="U" newName="" description="" deleteAllUsers="0" deleteAllGroups="0" removeAccounts="0" groupSid="S-1-5-32-573" groupName="Event Log Readers (built-in)"><Members><Member name="BUILTIN\NETWORK SERVICE" action="ADD" sid="S-1-5-20"/></Members></Properties></Group>
+</Groups>

Chapter 1 Files/Group Policy Objects/{9C409013-05EC-4640-B27A-617EDE2FA837}/DomainSysvol/GPO/Machine/Preferences/Services/Services.xml

@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="utf-8"?>
+<NTServices clsid="{2CFB484A-4E96-4b5d-A0B6-093D2F91E6AE}"><NTService clsid="{AB6F0B67-341F-4e51-92F9-005FBFBA1A43}" name="WinRM" image="2" changed="2018-10-29 14:53:58" uid="{1769D84F-7D74-4225-8338-EB3E555428AC}"><Properties startupType="AUTOMATIC" serviceName="WinRM" serviceAction="START" timeout="30"/></NTService>
+</NTServices>

Chapter 1 Files/Group Policy Objects/{9C409013-05EC-4640-B27A-617EDE2FA837}/DomainSysvol/GPO/Machine/comment.cmtx

@@ -0,0 +1,12 @@
+<?xml version='1.0' encoding='utf-8'?>
+<policyComments xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://www.microsoft.com/GroupPolicy/CommentDefinitions">
+  <policyNamespaces>
+    <using prefix="ns0" namespace="Microsoft.Policies.EventForwarding"></using>
+  </policyNamespaces>
+  <comments>
+    <admTemplate></admTemplate>
+  </comments>
+  <resources minRequiredRevision="1.0">
+    <stringTable></stringTable>
+  </resources>
+</policyComments>