<Task xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
  <RegistrationInfo>
    <URI>\Microsoft\Windows\CertificateServicesClient\UserTask</URI>
    <Version>1.0</Version>
    <SecurityDescriptor>D:P(A;;FA;;;BA)(A;;FA;;;SY)(A;;FR;;;IU)</SecurityDescriptor>
    <Source>$(@%SystemRoot%\system32\dimsjob.dll,-100)</Source>
    <Author>$(@%SystemRoot%\system32\dimsjob.dll,-101)</Author>
    <Description>$(@%SystemRoot%\system32\dimsjob.dll,-102)</Description>
  </RegistrationInfo>
  <Triggers>
    <EventTrigger id="5a33e62f-7fb9-41d8-bc94-4ac450677743">
      <Enabled>true</Enabled>
      <Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="System"&gt;&lt;Select Path="System"&gt;*[System[Provider[@Name='Microsoft-Windows-GroupPolicy'] and EventID=1503]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>
    </EventTrigger>
    <RegistrationTrigger>
      <Enabled>true</Enabled>
    </RegistrationTrigger>
    <LogonTrigger>
      <Repetition>
        <Interval>PT8H</Interval>
      </Repetition>
      <Enabled>true</Enabled>
    </LogonTrigger>
  </Triggers>
  <Principals>
    <Principal id="InteractiveUsers">
      <GroupId>S-1-5-4</GroupId>
    </Principal>
  </Principals>
  <Actions Context="InteractiveUsers">
    <ComHandler>
      <ClassId>{58fb76b9-ac85-4e55-ac04-427593b1d060}</ClassId>
      <Data>USER</Data>
    </ComHandler>
  </Actions>
  <Settings>
    <MultipleInstancesPolicy>Parallel</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
    <RunOnlyIfNetworkAvailable>true</RunOnlyIfNetworkAvailable>
    <RestartOnFailure>
      <Interval>PT1M</Interval>
      <Count>5</Count>
    </RestartOnFailure>
    <StartWhenAvailable>true</StartWhenAvailable>
    <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>
    <UseUnifiedSchedulingEngine>true</UseUnifiedSchedulingEngine>
  </Settings>
</Task>