<schema xmlns="http://purl.oclc.org/dsdl/schematron"
    xmlns:mssml="http://schemas.microsoft.com/sml/extensions/2007/03"
    xmlns:mssmlbpa="http://schemas.microsoft.com/sml/bpa/2008/02">

    <ns prefix="tns" uri="http://schemas.microsoft.com/bestpractices/models/ServerManager/AdRms/AdRmsComposite/2008/04" />

    <pattern>
        <rule context="/tns:AdRmsComposite/tns:ProvisioningInfo">
            <report mssml:severity="warning"
                    mssmlbpa:helpID="CheckADRMSProvisioned"
                    mssml:category="mssmlbpa:prerequisite mssmlbpa:advisory mssmlbpa:markupv2"
                    test="tns:IsProvisioned = 'false'">

                <mssmlbpa:helpTopic>http://go.microsoft.com/fwlink/?LinkId=219111</mssmlbpa:helpTopic>
                <mssmlbpa:title mssml:locid="CheckAdRmsProvisioned_Title"/>
                <mssmlbpa:problem mssml:locid="CheckAdRmsProvisioned_Problem"/>
                <mssmlbpa:impact mssml:locid="CheckAdRmsProvisioned_Impact"/>
                <mssmlbpa:resolution mssml:locid="CheckAdRmsProvisioned_Resolution"/>
            </report>
        </rule>
    </pattern>

    <pattern>
        <rule context="/tns:AdRmsComposite/tns:HttpsUrlInfo">
            <assert mssml:severity="warning"
                    mssmlbpa:helpID="CheckAdRmsSSLConnection"
                    mssml:category="mssmlbpa:security mssmlbpa:advisory mssmlbpa:markupv2"
                    test="tns:IsHttps = 'true'">
                <value-of select="tns:IntranetLicensingUrl"/>
                <mssmlbpa:helpTopic>http://go.microsoft.com/fwlink/?LinkId=163600</mssmlbpa:helpTopic>
                <mssmlbpa:title mssml:locid="CheckAdRmsSSLConnection_Title"/>
                <mssmlbpa:problem mssml:locid="CheckAdRmsSSLConnection_Problem"/>
                <mssmlbpa:impact mssml:locid="CheckAdRmsSSLConnection_Impact"/>
                <mssmlbpa:resolution mssml:locid="CheckAdRmsSSLConnection_Resolution"/>
           </assert>
            <report mssml:severity="info"
                    mssmlbpa:helpID="CheckAdRmsSSLConnection"
                    mssml:category="mssmlbpa:complaint mssmlbpa:markupv2"
                    test="tns:IsHttps = 'true'">
                <value-of select="tns:IntranetLicensingUrl"/>
                <mssmlbpa:helpTopic>http://go.microsoft.com/fwlink/?LinkId=163600</mssmlbpa:helpTopic>
                <mssmlbpa:title mssml:locid="CheckAdRmsSSLConnection_Title"/>
                <mssmlbpa:compliant mssml:locid="CheckAdRmsSSLConnection_Compliant"/>
            </report>
        </rule>
    </pattern>

    <pattern>
        <rule context="/tns:AdRmsComposite/tns:SuperUserEnablingInfo">
            <assert mssml:severity="warning"
                    mssmlbpa:helpID="CheckAdRmsSuperUserConfiguration"
                    mssml:category="mssmlbpa:security mssmlbpa:advisory mssmlbpa:markupv2"
                    test="tns:IsEnabledSuperUser = 'false'">
                <value-of select="tns:SuperUserGroupEmail"/>
                <mssmlbpa:helpTopic>http://go.microsoft.com/fwlink/?LinkId=163601</mssmlbpa:helpTopic>
                <mssmlbpa:title mssml:locid="CheckAdRmsSuperUserConfiguration_Title"/>
                <mssmlbpa:problem mssml:locid="CheckAdRmsSuperUserConfiguration_Problem"/>
                <mssmlbpa:impact mssml:locid="CheckAdRmsSuperUserConfiguration_Impact"/>
                <mssmlbpa:resolution mssml:locid="CheckAdRmsSuperUserConfiguration_Resolution"/>
           </assert>
            <report mssml:severity="info"
                    mssmlbpa:helpID="CheckAdRmsSuperUserConfiguration"
                    mssml:category="mssmlbpa:complaint mssmlbpa:markupv2"
                    test="tns:IsEnabledSuperUser = 'false'">
                <value-of select="tns:SuperUserGroupEmail"/>
                <mssmlbpa:helpTopic>http://go.microsoft.com/fwlink/?LinkId=163601</mssmlbpa:helpTopic>
                <mssmlbpa:title mssml:locid="CheckAdRmsSuperUserConfiguration_Title"/>
                <mssmlbpa:compliant mssml:locid="CheckAdRmsSuperUserConfiguration_Compliant"/>
            </report>
        </rule>
    </pattern>
</schema>