\Microsoft\Windows\CertificateServicesClient\SystemTask 1.0 D:P(A;;FA;;;BA)(A;;FA;;;SY) $(@%SystemRoot%\system32\dimsjob.dll,-100) $(@%SystemRoot%\system32\dimsjob.dll,-101) $(@%SystemRoot%\system32\dimsjob.dll,-102) true <QueryList> <Query Id="0" Path="System"> <Select Path="System"> *[System[Provider[@Name='Microsoft-Windows-GroupPolicy'] and EventID=1502]] </Select> </Query> </QueryList> true PT10S PT8H true S-1-5-18 {58fb76b9-ac85-4e55-ac04-427593b1d060} SYSTEM Parallel false true PT1M 5 true PT0S true