<?xml version="1.0" encoding="utf-16"?>
<!--Version 2.2-->
<SCWKnowledgeBase>
  <Roles>
    <Role Status="Enabled"
          Type="Server"
          Name="AppServerFoundation">
      <DependsOn>
        <Roles>
          <Role Name="WAS"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="NetTcpPortSharing"/>
        <Service Name="idsvc"/>
        <Service Name="FontCache3.0.0.0"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="ASPNetState">
      <DependsOn>
        <Roles>
          <Role Name="Web"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="aspnet_state"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="ADFS">
      <Selected Value="TRUE"/>
      <DependsOn>
        <Roles>
          <Role Name="Web"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="ifssvc"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="ADRMServer">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="AdRmsLoggingService"/>
      </Services>
      <DependsOn>
        <Roles>
          <Role Name="Web"/>
        </Roles>
      </DependsOn>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="CertServer">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="CertSvc"/>
      </Services>
      <Firewall>
        <FirewallRule Id="microsoft-windows-certificateservices-certsvc-dcom-in"/>
        <FirewallRule Id="microsoft-windows-certificateservices-certsvc-rpc-epmap-in"/>
        <FirewallRule Id="microsoft-windows-certificateservices-certsvc-rpc-np-in"/>
        <FirewallRule Id="microsoft-windows-certificateservices-certsvc-rpc-tcp-in"/>
        <FirewallRule Id="microsoft-windows-certificateservices-certsvc-tcp-out"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="CertServerOCSP">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="OCSPSvc"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="DFSN">
      <Selected Value="TRUE"/>
      <DependsOn>
        <Roles>
          <Role Name="MSServer"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="DFS"/>
        <Service Name="RemoteRegistry"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="DFSR">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="DFSR"/>
      </Services>
      <Firewall>
        <FirewallRule Id="dfsr-dfsrsvc-in-tcp"/>
        <FirewallRule Id="dfsr-dfsrsvc-rpcss-in-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="DHCPServer">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="EventSystem"/>
        <Service Name="EventLog"/>
        <Service Name="DHCPServer"/>
      </Services>
      <Firewall>
        <FirewallRule Id="microsoft-windows-dhcp-clientsvc-dhcpv4-in"/>
        <FirewallRule Id="microsoft-windows-dhcp-clientsvc-dhcpv6-in"/>
        <FirewallRule Id="Microsoft-Windows-DHCP-Failover-TCP-In"/>
        <FirewallRule Id="Microsoft-Windows-DHCP-Failover-TCP-Out"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="DNSServer">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="DNS"/>
      </Services>
      <Firewall>
        <FirewallRule Id="dnssrv-dns-tcp-in"/>
        <FirewallRule Id="dnssrv-dns-udp-in"/>
        <FirewallRule Id="dnssrv-tcp-out"/>
        <FirewallRule Id="dnssrv-udp-out"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="DomainController">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsDC"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <DependsOn>
        <Roles>
          <Role Name="MSServer"/>
          <Role Name="DFSN"/>
          <Role Name="DFSR"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="kdc"/>
        <Service Name="NTDS"/>
        <Service Name="IsmServ"/>
        <Service Name="Netlogon"/>
        <Service Name="LanmanWorkstation"/>
        <Service Name="lmhosts"/>
        <Service Name="W32Time"/>
        <Service Name="Dnscache"/>
      </Services>
      <Firewall>
        <FirewallRule Id="adds-icmp4-in"/>
        <FirewallRule Id="adds-icmp4-out"/>
        <FirewallRule Id="adds-icmp6-in"/>
        <FirewallRule Id="adds-icmp6-out"/>
        <FirewallRule Id="adds-ldap-tcp-in"/>
        <FirewallRule Id="adds-ldap-udp-in"/>
        <FirewallRule Id="adds-ldapgc-tcp-in"/>
        <FirewallRule Id="adds-ldapgcsec-tcp-in"/>
        <FirewallRule Id="adds-ldapsec-tcp-in"/>
        <FirewallRule Id="adds-nb-datagram-udp-in"/>
        <FirewallRule Id="adds-np-tcp-in"/>
        <FirewallRule Id="adds-np-udp-in"/>
        <FirewallRule Id="adds-rpc-tcp-in"/>
        <FirewallRule Id="adds-rpcepmap-tcp-in"/>
        <FirewallRule Id="adds-tcp-out"/>
        <FirewallRule Id="adds-udp-out"/>
        <FirewallRule Id="w32time-ntp-udp-in"/>
        <FirewallRule Id="adds-kerberos-password-tcp-in"/>
        <FirewallRule Id="adds-kerberos-password-udp-in"/>
        <FirewallRule Id="adds-kerberos-tcp-in"/>
        <FirewallRule Id="adds-kerberos-udp-in"/>
        <FirewallRule Id="corenet-gp-lsass-out-tcp"/>
        <FirewallRule Id="corenet-gp-np-out-tcp"/>
        <FirewallRule Id="corenet-gp-out-tcp"/>
        <FirewallRule Id="netlogon-namedpipe-in"/>
	<FirewallRule Id="netlogon-tcp-rpc-in"/>
        <FirewallRule Id="fps-icmp4-erq-out"/>
        <FirewallRule Id="fps-icmp6-erq-out"/>
        <FirewallRule Id="fps-nb_datagram-out-udp-noscope"/>
        <FirewallRule Id="fps-nb_name-out-udp-noscope"/>
        <FirewallRule Id="fps-nb_session-out-tcp-noscope"/>
        <FirewallRule Id="fps-smb-out-tcp-noscope"/>
        <FirewallRule Id="corenet-dns-out-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="FailoverCluster">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="ClusSvc"/>
        <Service Name="RemoteRegistry"/>
        <Service Name="LanmanServer"/>
      </Services>
      <Firewall>
        <FirewallRule Id="failovercluster-cprepsrv-tcp-in"/>
        <FirewallRule Id="failovercluster-dcom-tcp-in"/>
        <FirewallRule Id="failovercluster-eventlog-tcp-in"/>
        <FirewallRule Id="failovercluster-services-tcp-in"/>
        <FirewallRule Id="failovercluster-smb-tcp-in"/>
        <FirewallRule Id="failovercluster-winmgmt-tcp-in"/>
        <FirewallRule Id="failoverclustering-clussvc-tcp-in"/>
        <FirewallRule Id="failoverclustering-clussvc-tcp-out"/>
        <FirewallRule Id="failoverclustering-clussvcrpc-tcp-in"/>
        <FirewallRule Id="failoverclustering-icmpv4-er-out"/>
        <FirewallRule Id="failoverclustering-icmpv4-erq-in"/>
        <FirewallRule Id="failoverclustering-icmpv6-er-out"/>
        <FirewallRule Id="failoverclustering-icmpv6-erq-in"/>
        <FirewallRule Id="failoverclustering-netft-udp-in"/>
        <FirewallRule Id="failoverclustering-netft-udp-out"/>
        <FirewallRule Id="failoverclustering-icmpv4-er-in"/>
        <FirewallRule Id="failoverclustering-icmpv4-erq-out"/>
        <FirewallRule Id="failoverclustering-icmpv6-er-in"/>
        <FirewallRule Id="failoverclustering-icmpv6-erq-out"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="Fax">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="Fax"/>
        <Service Name="TapiSrv"/>
        <Service Name="Spooler"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="FSRM">
      <DependsOn>
        <Roles>
          <Role Name="VSCopy"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="SrmSvc"/>
        <Service Name="SrmReports"/>
        <!--<Service Name="WMI"/>-->
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="FTPServer">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="IISADMIN"/>
        <Service Name="MSFTPSVC"/>
      </Services>
      <Firewall>
        <FirewallRule Id="iis-webserverrole-ftp-in-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="InternetPrinting">
      <DependsOn>
        <Roles>
          <Role Name="Web"/>
          <Role Name="MiddleTier"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="Spooler"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="iSCSI">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="MSiSCSI"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="iSNS">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="MSiSNS"/>
      </Services>
      <Firewall>
        <FirewallRule Id="microsoft-windows-isns_service-tcp-in"/>
        <FirewallRule Id="microsoft-windows-isns_service-tcp-out"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="LPD">
      <DependsOn>
        <Roles>
          <Role Name="Print"/>
        </Roles>
      </DependsOn>
      <Selected Value="DEFAULT"/>
      <Services>
        <Service Name="LPDSVC"/>
      </Services>
      <Firewall>
        <FirewallRule Id="lpdprinterserver-tcp-in"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="MiddleTier">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="COMSysApp"/>
        <Service Name="MSDTC"/>
        <Service Name="SENS"/>
        <Service Name="KtmRm"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="MSMQActivation">
      <DependsOn>
        <Roles>
          <Role Name="WAS"/>
          <Role Name="AppServerFoundation"/>
          <Role Name="MSMQ"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="NetMsmqActivator"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="MSServer">
      <Selected Value="CUSTOM"
                FunctionName="SvcAPIsNonAdminFileSharesExist"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <Services>
        <Service Name="LanmanServer"/>
      </Services>
      <Firewall>
        <FirewallRule Id="fps-icmp4-erq-in"/>
        <FirewallRule Id="fps-icmp6-erq-in"/>
        <FirewallRule Id="fps-nb_datagram-in-udp-noscope"/>
        <FirewallRule Id="fps-nb_name-in-udp-noscope"/>
        <FirewallRule Id="fps-nb_session-in-tcp-noscope"/>
        <FirewallRule Id="fps-rpcss-in-tcp-noscope"/>
        <FirewallRule Id="fps-smb-in-tcp-noscope"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="MSMQ">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="MSMQ"/>
      </Services>
      <Firewall>
        <FirewallRule Id="msmq-in-tcp"/>
        <FirewallRule Id="msmq-in-udp"/>
        <FirewallRule Id="msmq-out-tcp"/>
        <FirewallRule Id="msmq-out-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="NFS">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="nfssvc"/>
        <Service Name="nfsclnt"/>
      </Services>
      <Firewall>
        <FirewallRule Id="microsoft-windows-nfs-clientcore-nfsclnt-tcp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-clientcore-nfsclnt-tcp-out"/>
        <FirewallRule Id="microsoft-windows-nfs-clientcore-nfsclnt-udp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-clientcore-nfsclnt-udp-out"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-mount-tcp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-mount-udp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nfs-tcp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nfs-tcp-out"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nfs-udp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nfs-udp-out"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nlm-tcp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nlm-udp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nsm-tcp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nsm-udp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-openportmapper-portmap-tcp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-openportmapper-portmap-tcp-out"/>
        <FirewallRule Id="microsoft-windows-nfs-openportmapper-portmap-udp-in"/>
        <FirewallRule Id="microsoft-windows-nfs-openportmapper-portmap-udp-out"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="NPActivation">
      <DependsOn>
        <Roles>
          <Role Name="WAS"/>
          <Role Name="AppServerFoundation"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="NetPipeActivator"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="NPS">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="IAS"/>
        <Service Name="EapHost"/>
        <Service Name="LanmanWorkstation"/>
      </Services>
      <Firewall>
        <FirewallRule Id="nps-npssvc-in-udp-1645"/>
        <FirewallRule Id="nps-npssvc-in-udp-1646"/>
        <FirewallRule Id="nps-npssvc-in-udp-1812"/>
        <FirewallRule Id="nps-npssvc-in-udp-1813"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="Print">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisDoPrintSharesExist"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <DependsOn>
        <Roles>
          <Role Name="MSServer"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="Spooler"/>
      </Services>
      <Firewall>
        <FirewallRule Id="fps-spoolsvc-in-tcp-noscope"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="PSYNC">
      <Selected Value="FALSE"/>
      <DependsOn>
        <Roles>
          <Role Name="DomainController"/>
        </Roles>
      </DependsOn>
      <Firewall>
        <FirewallRule Id="psync-lsass-tcp-in"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="RemoteCOM+">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsRemoteCOMPlusEnabled"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <DependsOn>
        <Roles>
          <Role Name="MiddleTier"/>
        </Roles>
      </DependsOn>
      <Firewall>
        <FirewallRule Id="complusnetworkaccess-dcom-in"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="RemoteDTC">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsRemoteDTCEnabled"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <DependsOn>
        <Roles>
          <Role Name="MiddleTier"/>
        </Roles>
      </DependsOn>
      <Firewall>
        <FirewallRule Id="msdtc-in-tcp"/>
        <FirewallRule Id="msdtc-out-tcp"/>
        <FirewallRule Id="msdtc-rpcss-in-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="RemoteSCWEngine">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="RemoteRegistry"/>
      </Services>
      <Firewall>
        <FirewallRule Id="SCW-Remote-Operations-For-Scshost-RPC"/>
        <FirewallRule Id="SCW-Remote-Operations-For-Scshost-RPC-EndPointMapper"/>
        <FirewallRule Id="SCW-Remote-Operations-For-Svchost-TCP"/>
        <FirewallRule Id="SCW-Remote-Operations-For-System-TCP"/>
        <FirewallRule Id="SCW-Remote-Operations-For-System-UDP"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="RRASx32">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsRemoteAccessRunning"
                DLLPath="scwhlp.dll"/>
      <Services>
        <Service Name="RemoteAccess"/>
        <Service Name="rqs"/>
        <Service Name="RasMan"/>
        <Service Name="SstpSvc"/>
        <Service Name="TapiSrv"/>
      </Services>
      <Firewall>
        <FirewallRule Id="rras-l2tp-in-udp"/>
        <FirewallRule Id="rras-l2tp-out-udp"/>
        <FirewallRule Id="rras-pptp-in-tcp"/>
        <FirewallRule Id="rras-pptp-out-tcp"/>
        <FirewallRule Id="rras-gre-in"/>
        <FirewallRule Id="rras-gre-out"/>
        <FirewallRule Id="sstp-in-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="RRASx64">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsRemoteAccessRunning"
                DLLPath="scwhlp.dll"/>
      <Services>
        <Service Name="RemoteAccess"/>
        <Service Name="rqs"/>
        <Service Name="RasMan"/>
        <Service Name="SstpSvc"/>
        <Service Name="TapiSrv"/>
        <Service Name="IASJet"/>
      </Services>
      <Firewall>
        <FirewallRule Id="rras-l2tp-in-udp"/>
        <FirewallRule Id="rras-l2tp-out-udp"/>
        <FirewallRule Id="rras-pptp-in-tcp"/>
        <FirewallRule Id="rras-pptp-out-tcp"/>
        <FirewallRule Id="rras-gre-in"/>
        <FirewallRule Id="rras-gre-out"/>
        <FirewallRule Id="sstp-in-tcp"/>
        <FirewallRule Id="rqs-in-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="SMTP">
      <Selected Value="TRUE"/>
      <DependsOn>
        <Roles>
          <Role Name="Web"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="IISADMIN"/>
        <Service Name="SMTPSVC"/>
      </Services>
      <Firewall>
        <FirewallRule Id="smtpsvc-service-in-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="SNIS">
      <Selected Value="TRUE"/>
      <DependsOn>
        <Roles>
          <Role Name="DomainController"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="NisSvc"/>
      </Services>
      <Firewall>
        <FirewallRule Id="nis-server-in-rpc-epmap"/>
        <FirewallRule Id="nis-server-in-rpc-tcp"/>
        <FirewallRule Id="nis-server-in-rpc-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="SNMP">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="SNMP"/>
      </Services>
      <Firewall>
        <FirewallRule Id="snmp-in-udp-noscope"/>
        <FirewallRule Id="snmp-in-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="SNMPTrap">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="SNMPTRAP"/>
      </Services>
      <Firewall>
        <FirewallRule Id="snmptrap-in-udp-noscope"/>
        <FirewallRule Id="snmptrap-in-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="TcpActivation">
      <DependsOn>
        <Roles>
          <Role Name="WAS"/>
          <Role Name="AppServerFoundation"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="NetTcpActivator"/>
      </Services>
      <Firewall>
        <FirewallRule Id="wcf-nettcpactivator-in-tcp-32bit"/>
        <FirewallRule Id="wcf-nettcpactivator-in-tcp-64bit"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="Timewarp">
      <Selected Value="FALSE"/>
      <DependsOn>
        <Roles>
          <Role Name="MSServer"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="swprv"/>
        <Service Name="VSS"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="TelnetServer">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="TlntSvr"/>
        <Service Name="seclogon"/>
        <Service Name="LanmanWorkstation"/>
      </Services>
      <Firewall>
        <FirewallRule Id="telnetserver-tlntsvr-tcp-in"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="TerminalServer">
      <Satisfiable FunctionName="SvcapisIsAppModeTS"
                   DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="TermService"/>
        <Service Name="SessionEnv"/>
        <Service Name="UmRdpService"/>
        <Service Name="LanmanServer"/>
        <Service Name="LanmanWorkstation"/>
        <Service Name="lmhosts"/>
      </Services>
      <Firewall>
        <FirewallRule Id="remotedesktop-in-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="TSGateway">
      <Selected Value="TRUE"/>
      <DependsOn>
        <Roles>
          <Role Name="Web"/>
          <Role Name="NPS"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="TSGateway"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="TSLicense">
      <Selected Value="TRUE"/>
      <DependsOn>
        <Roles>
          <Role Name="TerminalServer"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="TermServLicensing"/>
        <Service Name="RemoteRegistry"/>
        <Service Name="LanmanWorkstation"/>
        <Service Name="lmhosts"/>
      </Services>
      <Firewall>
        <FirewallRule Id="termservlicensing-in-tcp"/>
        <FirewallRule Id="termservlicensing-np-in-tcp"/>
        <FirewallRule Id="termservlicensing-rpcss-in-tcp"/>
        <FirewallRule Id="termservlicensing-wmi-dcom-in-tcp"/>
        <FirewallRule Id="termservlicensing-wmi-in-tcp"/>
        <FirewallRule Id="termservlicensing-wmi-out-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="TSSession">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="RemoteRegistry"/>
        <Service Name="Tssdis"/>
        <Service Name="tscpubrpc" />
      </Services>
      <Firewall>
        <FirewallRule Id="sessiondirectoryservice-in-tcp"/>
        <FirewallRule Id="sessiondirectoryservice-np-in-tcp"/>
        <FirewallRule Id="sessiondirectoryservice-rpcss-in-tcp"/>
        <FirewallRule Id="sessiondirectoryservice-wmi-dcom-in-tcp"/>
        <FirewallRule Id="tsCPubRPC-WMI-ASync-In-TCP"/>
        <FirewallRule Id="tsCPubRPC-WMI-DCOM-In-TCP"/>
        <FirewallRule Id="tsCPubRPC-WMI-In-TCP"/>
        <FirewallRule Id="tsCPubRPC-WMI-Out-TCP"/>
        <FirewallRule Id="tsCPubRPC-RPC-In-TCP"/>
        <FirewallRule Id="sessiondirectoryservice-wmi-in-tcp"/>
        <FirewallRule Id="sessiondirectoryservice-wmi-out-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="VSCopy">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="swprv"/>
        <Service Name="VSS"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="WAS">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="WAS"/>
        <Service Name="AppHostSvc"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="WDS">
      <Selected Value="TRUE"/>
      <DependsOn>
        <Roles>
          <Role Name="MSServer"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="WDSServer"/>
        <Service Name="RemoteRegistry"/>
      </Services>
      <Firewall>
        <FirewallRule Id="wds-np-in-tcp"/>
        <FirewallRule Id="wds-rpc-in-tcp"/>
        <FirewallRule Id="wds-rpcss-in-tcp"/>
        <FirewallRule Id="wds-wdsserver-in-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="Web">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="AppHostSvc"/>
        <Service Name="W3SVC"/>
      </Services>
      <Firewall>
        <FirewallRule Id="iis-webserverrole-http-in-tcp"/>
        <FirewallRule Id="iis-webserverrole-https-in-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="WEC">
      <Selected Value="DEFAULT"/>
      <DependsOn>
        <Roles>
          <Role Name="WinRM"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="Wecsvc"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="WinRM">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="WinRM"/>
      </Services>
      <Firewall>
        <FirewallRule Id="winrm-http-in-tcp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="WINS">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="WINS"/>
        <Service Name="RemoteRegistry"/>
      </Services>
      <Firewall>
        <FirewallRule Id="wins-service-in-tcp"/>
        <FirewallRule Id="wins-service-in-udp"/>
        <FirewallRule Id="wins-service-in-nb-name-udp"/>
        <FirewallRule Id="wins-service-out-tcp"/>
        <FirewallRule Id="wins-service-out-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="WSBackup">
      <Selected Value="TRUE"/>
      <DependsOn>
        <Roles>
          <Role Name="VSCopy"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="wbengine"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="WSS3">
      <DependsOn>
        <Roles>
          <Role Name="Web"/>
          <Role Name="WAS"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="SPAdmin"/>
        <Service Name="SPTimerV3"/>
        <Service Name="SPSearch"/>
        <Service Name="SPTrace"/>
        <Service Name="IISADMIN"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Server"
          Name="WSRM">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="wsrm"/>
        <Service Name="MSSQL$MICROSOFT##SSEE"/>
      </Services>
    </Role>

    <!--==============================================
        Client Roles
================================================-->

    <Role Status="Enabled"
          Type="Client"
          Name="BITS">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="BITS"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="DNSClient">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsUsingDNS"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <Services>
        <Service Name="Dnscache"/>
      </Services>
      <Firewall>
        <FirewallRule Id="corenet-dns-out-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="DomainMember">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsDomainMember"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <DependsOn>
        <Roles>
          <Role Name="MSClient"/>
          <Role Name="TimeSync"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="Netlogon"/>
      </Services>
      <Firewall>
        <FirewallRule Id="corenet-gp-lsass-out-tcp"/>
        <FirewallRule Id="corenet-gp-np-out-tcp"/>
        <FirewallRule Id="corenet-gp-out-tcp"/>
        <FirewallRule Id="netlogon-namedpipe-in"/>
        <FirewallRule Id="netlogon-tcp-rpc-in"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="LLMNR-DNS">
      <Selected Value="FALSE"/>
      <DependsOn>
        <Roles>
          <Role Name="DNSClient"/>
        </Roles>
      </DependsOn>
      <Firewall>
        <FirewallRule Id="netdis-llmnr-in-udp"/>
        <FirewallRule Id="netdis-llmnr-out-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="LinkLayer">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="lltdsvc"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="MSClient">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="LanmanWorkstation"/>
        <Service Name="lmhosts"/>
      </Services>
      <Firewall>
        <FirewallRule Id="fps-icmp4-erq-out"/>
        <FirewallRule Id="fps-icmp6-erq-out"/>
        <FirewallRule Id="fps-nb_datagram-out-udp-noscope"/>
        <FirewallRule Id="fps-nb_name-out-udp-noscope"/>
        <FirewallRule Id="fps-nb_session-out-tcp-noscope"/>
        <FirewallRule Id="fps-smb-out-tcp-noscope"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="NAPClient">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="napagent"/>
        <Service Name="hkmsvc"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="NetworkDiscovery">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="fdPHost"/>
        <Service Name="FDResPub"/>
        <Service Name="LanmanServer"/>
        <Service Name="LanmanWorkstation"/>
        <Service Name="SSDPSRV"/>
        <Service Name="upnphost"/>
        <Service Name="Dnscache"/>
      </Services>
      <Firewall>
        <FirewallRule Id="netdis-fdphost-in-udp"/>
        <FirewallRule Id="netdis-fdphost-out-udp"/>
        <FirewallRule Id="netdis-fdrespub-wsd-in-udp"/>
        <FirewallRule Id="netdis-fdrespub-wsd-out-udp"/>
        <FirewallRule Id="netdis-wsdevnt-in-tcp"/>
        <FirewallRule Id="netdis-wsdevnt-out-tcp"/>
        <FirewallRule Id="netdis-wsdevnts-in-tcp"/>
        <FirewallRule Id="netdis-wsdevnts-out-tcp"/>
        <FirewallRule Id="netdis-nb_datagram-in-udp"/>
        <FirewallRule Id="netdis-nb_datagram-out-udp"/>
        <FirewallRule Id="netdis-nb_name-in-udp"/>
        <FirewallRule Id="netdis-nb_name-out-udp"/>
        <FirewallRule Id="netdis-ssdpsrv-in-udp"/>
        <FirewallRule Id="netdis-ssdpsrv-out-udp"/>
        <FirewallRule Id="netdis-upnp-out-tcp"/>
        <FirewallRule Id="netdis-upnphost-in-tcp"/>
        <FirewallRule Id="netdis-upnphost-out-tcp"/>
        <FirewallRule Id="netdis-llmnr-in-udp"/>
        <FirewallRule Id="netdis-llmnr-out-udp"/>
      </Firewall>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="PnP-X">
      <DependsOn>
        <Roles>
          <Role Name="NetworkDiscovery"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="IPBusEnum"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="RASClient">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="RasMan"/>
        <Service Name="TapiSrv"/>
        <Service Name="SstpSvc"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="SubmitPrint">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="Spooler"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="TimeSync">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="W32Time"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Type="Client"
          Name="WindowsUpdate">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="wuauserv"/>
      </Services>
    </Role>
    <Role Status="Enabled"
          Name="WebDAV"
          Type="Client">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="WebClient"/>
      </Services>
    </Role>
    <!-- 
// Note on WINS Client:
// In NetBIOS Name Service environments (whether they be broadcast or unicast based), systems need to be able to 
// defend their names against conflicting registrations and arbitrary name release requests.
// In order to accomplish this in WINS environments, the system needs to be able to respond to inbound unicast
// name queries from WINS servers. These responses are provided by the server service.
-->
    <Role Status="Enabled"
          Type="Client"
          Name="WINSClient">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsWINSClient"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <Services>
        <Service Name="LanmanServer"/>
        <Service Name="lmhosts"/>
      </Services>
      <Firewall>
        <FirewallRule Id="wins-service-in-nb-name-udp"/>
      </Firewall>
    </Role>
  </Roles>

  <Tasks>
    <Task Name=".NETv2.0">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="clr_optimization_v2.0.50727_32"/>
      </Services>
    </Task>
    <Task Name=".NETv2.0-X64">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="clr_optimization_v2.0.50727_64"/>
      </Services>
    </Task>
    <Task Name=".NETv2.0-I64">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="clr_optimization_v2.0.50727_I64"/>
      </Services>
    </Task>
    <Task Name=".NETv3.0">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="FontCache3.0.0.0"/>
      </Services>
    </Task>
    <Task Name="ADRMServerWID">
      <DependsOn>
        <Roles>
          <Role Name="ADRMServer"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="MSSQL$MICROSOFT##SSEE"/>
      </Services>
    </Task>
    <Task Name="AeLookupSVC">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="AeLookupSvc"/>
      </Services>
    </Task>
    <Task Name="AppDeploy">
      <DependsOn>
        <Roles>
          <Role Name="DomainMember"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="AppMgmt"/>
        <Service Name="msiserver"/>
        <Service Name="Dnscache"/>
      </Services>
    </Task>
    <Task Name="Audio">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="Audiosrv"/>
        <Service Name="AudioEndpointBuilder"/>
        <Service Name="MMCSS"/>
      </Services>
    </Task>
    <Task Name="BITSPeerCaching">
      <DependsOn>
        <Roles>
          <Role Name="BITS"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="bitssvc-in-tcp"/>
        <FirewallRule Id="bitssvc-out-tcp"/>
        <FirewallRule Id="bitssvc-rpc-in-tcp"/>
        <FirewallRule Id="bitssvc-rpcss-in-tcp"/>
        <FirewallRule Id="bitssvc-wsd-in-udp"/>
        <FirewallRule Id="bitssvc-wsd-out-udp"/>
      </Firewall>
    </Task>
    <Task Name="BrowserServer">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="Browser"/>
        <Service Name="LanmanServer"/>
        <Service Name="LanmanWorkstation"/>
      </Services>
      <Firewall>
        <FirewallRule Id="fps-nb_datagram-in-udp-noscope"/>
        <FirewallRule Id="fps-nb_name-in-udp-noscope"/>
        <FirewallRule Id="fps-nb_datagram-out-udp-noscope"/>
        <FirewallRule Id="fps-nb_name-out-udp-noscope"/>
      </Firewall>
    </Task>
    <Task Name="EMS">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsUsingEMSHeadless"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <Services>
        <Service Name="sacsvr"/>
      </Services>
    </Task>
    <Task Name="ErrorReporting">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="WerSvc"/>
        <Service Name="wercplsupport"/>
      </Services>
    </Task>
    <Task Name="CSC">
      <DependsOn>
        <Roles>
          <Role Name="MSClient"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="CscService"/>
      </Services>
    </Task>
    <Task Name="Diagnostic">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="WdiServiceHost"/>
        <Service Name="WdiSystemHost"/>
        <Service Name="DPS"/>
      </Services>
    </Task>
    <Task Name="FRS">
      <DependsOn>
        <Roles Logic="OR">
          <Role Name="DomainController"/>
          <Role Name="DFSN"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="NtFrs"/>
      </Services>
      <Firewall>
        <FirewallRule Id="ntfrs-ntfrssvc-in-tcp"/>
        <FirewallRule Id="ntfrs-ntfrssvc-rpcss-in-tcp"/>
      </Firewall>
    </Task>
    <Task Name="ICS">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="SharedAccess"/>
        <Service Name="ALG"/>
      </Services>
    </Task>
    <Task Name="IndexingService">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="CISVC"/>
      </Services>
    </Task>
    <Task Name="Install">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="msiserver"/>
      </Services>
    </Task>
    <Task Name="IPsec">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsUsingIPsec"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <Services>
        <Service Name="PolicyAgent"/>
      </Services>
    </Task>
    <Task Name="ISvcDetect">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="UI0Detect"/>
      </Services>
    </Task>
    <Task Name="KMS">
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="sppsvc-in-tcp"/>
      </Firewall>
    </Task>
    <Task Name="LinkTracking">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="TrkWks"/>
      </Services>
    </Task>
    <Task Name="LPR">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="Spooler"/>
      </Services>
    </Task>
    <Task Name="MailBasedRepl">
      <DependsOn>
        <Roles>
          <Role Name="DomainController"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="IISADMIN"/>
        <Service Name="SMTPSVC"/>
      </Services>
      <Firewall>
        <FirewallRule Id="smtpsvc-service-in-tcp"/>
      </Firewall>
    </Task>
    <Task Name="MSFCPRS">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="FCRegSvc"/>
      </Services>
    </Task>
    <Task Name="MSMQHTTP">
      <DependsOn>
        <Roles>
          <Role Name="WEB"/>
          <Role Name="WAS"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
    </Task>
    <Task Name="MSMQTriggers">
      <DependsOn>
        <Roles>
          <Role Name="MSMQ"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="MSMQTriggers"/>
      </Services>
    </Task>
    <Task Name="MQDS">
      <DependsOn>
        <Roles>
          <Role Name="MSMQ"/>
          <Role Name="DomainController"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="MQDSSVC"/>
      </Services>
      <Firewall>
        <FirewallRule Id="msmqdssvc-in-tcp"/>
        <FirewallRule Id="msmqdssvc-in-udp"/>
        <FirewallRule Id="msmqdssvc-out-tcp"/>
        <FirewallRule Id="msmqdssvc-out-udp"/>
      </Firewall>
    </Task>
    <Task Name="MQMS">
      <DependsOn>
        <Roles>
          <Role Name="MSMQ"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Firewall>
        <FirewallRule Id="msmq-pgm-in"/>
        <FirewallRule Id="msmq-pgm-out"/>
      </Firewall>
    </Task>
    <Task Name="PDE">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="WPDBusEnum"/>
      </Services>
    </Task>
    <Task Name="PerfMonCollector">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="pla"/>
      </Services>
    </Task>
    <Task Name="PNRP">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="p2pimsvc"/>
        <Service Name="PNRPAutoReg"/>
        <Service Name="PNRPsvc"/>
      </Services>
      <Firewall>
        <FirewallRule Id="microsoft-windows-peertopeerpnrp-pnrpsvc-udp-in"/>
      </Firewall>
    </Task>
    <Task Name="QWAVE">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="QWAVE"/>
      </Services>
    </Task>
    <Task Name="RasAuto">
      <DependsOn>
        <Roles>
          <Role Name="RASClient"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="RasAuto"/>
      </Services>
    </Task>
    <Task Name="RemoteAssistance">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="SSDPSRV"/>
        <Service Name="upnphost"/>
      </Services>
      <Firewall>
        <FirewallRule Id="remoteassistance-dcom-in-tcp-noscope"/>
        <FirewallRule Id="remoteassistance-in-tcp-edgescope"/>
        <FirewallRule Id="remoteassistance-out-tcp"/>
        <FirewallRule Id="remoteassistance-raserver-in-tcp-noscope"/>
        <FirewallRule Id="remoteassistance-raserver-out-tcp-noscope"/>
        <FirewallRule Id="remoteassistance-ssdpsrv-in-udp"/>
        <FirewallRule Id="remoteassistance-ssdpsrv-out-udp"/>
        <FirewallRule Id="remoteassistance-upnp-out-tcp"/>
        <FirewallRule Id="remoteassistance-upnphost-in-tcp"/>
        <FirewallRule Id="remoteassistance-upnphost-out-tcp"/>
      </Firewall>
    </Task>
    <Task Name="RSM">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="NtmsSvc"/>
      </Services>
      <Firewall>
        <FirewallRule Id="microsoft-windows-removablestoragemanagement-client-dcom-in"/>
        <FirewallRule Id="microsoft-windows-removablestoragemanagement-client-rpcss-tcp-in"/>
        <FirewallRule Id="microsoft-windows-removablestoragemanagement-server-dcom-in"/>
        <FirewallRule Id="microsoft-windows-removablestoragemanagement-server-rpcss-tcp-in"/>
      </Firewall>
    </Task>
    <Task Name="RPCLocator">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="RpcLocator"/>
      </Services>
    </Task>
    <Task Name="RSoPPlanning">
      <DependsOn>
        <Roles>
          <Role Name="DomainController"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="RSoPProv"/>
      </Services>
    </Task>
    <Task Name="SecLogon">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="seclogon"/>
      </Services>
    </Task>
    <Task Name="SmartCard">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="SCardSvr"/>
        <Service Name="SCPolicySvc"/>
        <Service Name="CertPropSvc"/>
      </Services>
    </Task>
    <Task Name="SMfS-X32">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="clr_optimization_v2.0.50727_32"/>
        <Service Name="LanmanServer"/>
      </Services>
      <Firewall>
        <FirewallRule Id="rvm-rpcss-in-tcp"/>
        <FirewallRule Id="rvm-vds-in-tcp"/>
        <FirewallRule Id="rvm-vdsldr-in-tcp"/>
      </Firewall>
    </Task>
    <Task Name="SMfS-X64">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="clr_optimization_v2.0.50727_32"/>
        <Service Name="clr_optimization_v2.0.50727_64"/>
        <Service Name="LanmanServer"/>
      </Services>
      <Firewall>
        <FirewallRule Id="rvm-rpcss-in-tcp"/>
        <FirewallRule Id="rvm-vds-in-tcp"/>
        <FirewallRule Id="rvm-vdsldr-in-tcp"/>
      </Firewall>
    </Task>
    <Task Name="SNMPWMI">
      <DependsOn>
        <Roles>
          <Role Name="SNMPTrap"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
    </Task>
    <Task Name="TPM">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="TBS"/>
      </Services>
    </Task>
    <Task Name="TSPrinterRedirection">
      <DependsOn>
        <Roles>
          <Role Name="TerminalServer"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="LanmanWorkstation"/>
        <Service Name="lmhosts"/>
        <Service Name="Spooler"/>
      </Services>
    </Task>
    <Task Name="WCS">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="WcsPlugInService"/>
      </Services>
    </Task>
    <Task Name="WIDVSSBackup">
      <DependsOn>
        <Roles>
          <Role Name="VSCopy"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="SQLWriter"/>
      </Services>
    </Task>
    <Task Name="WinHTTPProxy">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="Dhcp"/>
        <Service Name="WinHttpAutoProxySvc"/>
      </Services>
    </Task>
    <Task Name="WiredAutoConfig">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="dot3svc"/>
        <Service Name="EapHost"/>
      </Services>
    </Task>
    <Task Name="WMIPerformanceAdapter">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="wmiApSrv"/>
      </Services>
    </Task>
    <Task Name="WSS3Backup">
      <DependsOn>
        <Roles>
          <Role Name="WSS3"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="SPWriter"/>
        <Service Name="SQLWriter"/>
        <Service Name="swprv"/>
        <Service Name="VSS"/>
      </Services>
    </Task>
    <Task Name="WSS3WID">
      <DependsOn>
        <Roles>
          <Role Name="WSS3"/>
        </Roles>
      </DependsOn>
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="MSSQL$MICROSOFT##SSEE"/>
      </Services>
    </Task>
    <Task Name="WSS">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="WSearch"/>
      </Services>
    </Task>
    <Task Name="WUDF">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="wudfsvc"/>
      </Services>
    </Task>

    <!--==============================================
        Remote Admin Tasks
================================================-->


    <Task Type="RemoteAdmin"
          Name="RemoteCertServerOCSPAdmin">
      <DependsOn>
        <Roles>
          <Role Name="CertServerOCSP"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="microsoft-windows-certificateservices-ocspsvc-rpc-tcp-in"/>
        <FirewallRule Id="microsoft-windows-onlinerevocationservices-ocspsvc-dcom-in"/>
        <FirewallRule Id="microsoft-windows-onlinerevocationservices-ocspsvc-tcp-out"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteAdminEventLogSvc">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="RemoteRegistry"/>
      </Services>
      <Firewall>
        <FirewallRule Id="remoteeventlogsvc-in-tcp"/>
        <FirewallRule Id="remoteeventlogsvc-np-in-tcp"/>
        <FirewallRule Id="remoteeventlogsvc-rpcss-in-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteAdminFirewall">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="PolicyAgent"/>
      </Services>
      <Firewall>
        <FirewallRule Id="remotefwadmin-in-tcp"/>
        <FirewallRule Id="remotefwadmin-rpcss-in-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteNPSAdmin">
      <DependsOn>
        <Roles>
          <Role Name="NPS"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="IAS"/>
      </Services>
      <Firewall>
        <FirewallRule Id="nps-npssvc-in-dcom"/>
        <FirewallRule Id="nps-npssvc-in-rpc"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteAdminRRAS">
      <DependsOn>
        <Roles Logic="OR">
          <Role Name="RRASx32"/>
          <Role Name="RRASx64"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="remrras-in-rpc"/>
        <FirewallRule Id="remrras-in-dcom"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteAdminSchedule">
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="remotetask-in-tcp"/>
        <FirewallRule Id="remotetask-rpcss-in-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteAdminTelnet">
      <DependsOn>
        <Roles>
          <Role Name="TelnetServer"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="RemoteRegistry"/>
      </Services>
      <Firewall>
        <FirewallRule Id="telnetserver-tlntadmn-dcom-in"/>
        <FirewallRule Id="telnetserver-tlntadmn-np-in"/>
        <FirewallRule Id="telnetserver-tlntadmn-rpc-in"/>
        <FirewallRule Id="telnetserver-tlntadmn-rpcss-epmap-in"/>
      </Firewall>
    </Task>
    <Task
      Type="RemoteAdmin"
      Name="RemoteAdminVDS">
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="rvm-rpcss-in-tcp"/>
        <FirewallRule Id="rvm-vds-in-tcp"/>
        <FirewallRule Id="rvm-vdsldr-in-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteAdminWEB">
      <DependsOn>
        <Roles>
          <Role Name="WEB"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="WMSvc"/>
      </Services>
      <Firewall>
        <FirewallRule Id="iis-webserverrole-wmsvc-in-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteAdminWINS">
      <DependsOn>
        <Roles>
          <Role Name="WINS"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="wins-service-in-np"/>
        <FirewallRule Id="wins-service-in-rpc"/>
        <FirewallRule Id="wins-service-in-rpcss-epmap"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteAdminWSBackup">
      <Selected Value="FALSE"/>
      <DependsOn>
        <Roles>
          <Role Name="WSBackup"/>
        </Roles>
      </DependsOn>
      <Firewall>
        <FirewallRule Id="windowsserverbackup-wbengine-in-tcp-noscope"/>
        <FirewallRule Id="windowsserverbackup-wbengine-rpcss-in-tcp-noscope"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteDesktop">
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="TermService"/>
        <Service Name="SessionEnv"/>
        <Service Name="UmRdpService"/>
      </Services>
      <Firewall>
        <FirewallRule Id="remotedesktop-in-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteDFSRAdmin">
      <DependsOn>
        <Roles>
          <Role Name="DFSR"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="dfsmgmt-in-tcp"/>
        <FirewallRule Id="dfsmgmt-dcom-in-tcp"/>
        <FirewallRule Id="dfsmgmt-smb-in-tcp"/>
        <FirewallRule Id="dfsmgmt-wmi-in-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteDHCPAdmin">
      <DependsOn>
        <Roles>
          <Role Name="DHCPServer"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="microsoft-windows-dhcp-clientsvc-rpc-tcp-in"/>
        <FirewallRule Id="microsoft-windows-dhcp-clientsvc-rpcss-tcp-in"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteDNSAdmin">
      <DependsOn>
        <Roles>
          <Role Name="DNSServer"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="dnssrv-rpc-tcp-in"/>
        <FirewallRule Id="dnssrv-rpcepmap-tcp-in"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="FSRMRemoteAdmin">
      <Selected Value="FALSE"/>
      <DependsOn>
        <Roles>
          <Role Name="FSRM"/>
        </Roles>
      </DependsOn>
      <Services>
        <Service Name="RemoteRegistry"/>
      </Services>
      <Firewall>
        <FirewallRule Id="fsrm-remoteregistry-in (rpc)"/>
        <FirewallRule Id="fsrm-rpcss-in (rpc-epmap)"/>
        <FirewallRule Id="fsrm-srmreports-in (rpc)"/>
        <FirewallRule Id="fsrm-srmsvc-in (rpc)"/>
        <FirewallRule Id="fsrm-system-in (tcp-445)"/>
        <FirewallRule Id="fsrm-task-scheduler-in (rpc)"/>
        <FirewallRule Id="fsrm-wmi-async-in-tcp"/>
        <FirewallRule Id="fsrm-wmi-winmgmt-in-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteNFSAdmin">
      <DependsOn>
        <Roles>
          <Role Name="NFS"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="LanmanServer"/>
        <Service Name="RemoteRegistry"/>
      </Services>
      <Firewall>
        <FirewallRule Id="microsoft-windows-nfs-servercore-remoteregistry-in"/>
        <FirewallRule Id="microsoft-windows-nfs-clientcore-remoteregistry-in"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteNLBAdmin">
      <Selected Value="CUSTOM"
                FunctionName="SvcapisIsPartofNLBCluster"
                DLLPath="%SystemRoot%\System32\scwhlp.dll"/>
      <Firewall>
        <FirewallRule Id="networkloadbalancing-dcom-tcp-in"/>
        <FirewallRule Id="networkloadbalancing-rpcss-tcp-in"/>
        <FirewallRule Id="networkloadbalancing-winmgmt-tcp-in"/>
        <FirewallRule Id="networkloadbalancing-icmpv4-du-in"/>
        <FirewallRule Id="networkloadbalancing-icmpv4-er-in"/>
        <FirewallRule Id="networkloadbalancing-icmpv4-erq-out"/>
        <FirewallRule Id="networkloadbalancing-icmpv4-er-out"/>
        <FirewallRule Id="networkloadbalancing-icmpv4-erq-in"/>
        <FirewallRule Id="networkloadbalancing-icmpv6-du-in"/>
        <FirewallRule Id="networkloadbalancing-icmpv6-er-in"/>
        <FirewallRule Id="networkloadbalancing-icmpv6-erq-out"/>
        <FirewallRule Id="networkloadbalancing-icmpv6-er-out"/>
        <FirewallRule Id="networkloadbalancing-icmpv6-erq-in"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteWindowsAdministration">
      <Selected Value="FALSE"/>
      <Services>
        <!-- <Service Name="lanmanserver"/> -->
        <Service Name="RemoteRegistry"/>
      </Services>
      <Firewall>
        <FirewallRule Id="remoteadmin-in-tcp"/>
        <FirewallRule Id="remoteadmin-np-in-tcp"/>
        <FirewallRule Id="remoteadmin-rpcss-in-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="RemoteWMI">
      <Selected Value="FALSE"/>
      <Firewall>
        <FirewallRule Id="wmi-async-in-tcp"/>
        <FirewallRule Id="wmi-rpcss-in-tcp"/>
        <FirewallRule Id="wmi-winmgmt-in-tcp"/>
        <FirewallRule Id="wmi-winmgmt-out-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="TSRemoteAdmin">
      <DependsOn>
        <Roles>
          <Role Name="TerminalServer"/>
        </Roles>
      </DependsOn>
      <Selected Value="FALSE"/>
      <Services>
        <Service Name="LanmanServer"/>
        <Service Name="RemoteRegistry"/>
      </Services>
      <Firewall>
        <FirewallRule Id="termservice-in-tcp"/>
        <FirewallRule Id="termservice-np-in-tcp"/>
        <FirewallRule Id="termservice-rpcss-in-tcp"/>
        <FirewallRule Id="termservice-wmi-dcom-in-tcp"/>
        <FirewallRule Id="termservice-wmi-in-tcp"/>
        <FirewallRule Id="termservice-wmi-out-tcp"/>
      </Firewall>
    </Task>
    <Task Type="RemoteAdmin"
          Name="WSRMRemote">
      <Selected Value="FALSE"/>
      <DependsOn>
        <Roles>
          <Role Name="WSRM"/>
        </Roles>
      </DependsOn>
      <Firewall>
        <FirewallRule Id="wsrmservice-dcom-in"/>
        <FirewallRule Id="wsrmservice-dcomclient-in"/>
      </Firewall>
    </Task>
    <Task Name="SimpTcp">
      <Selected Value="TRUE"/>
      <Services>
        <Service Name="SimpTcp"/>
      </Services>
    </Task>
  </Tasks>

  <Services>
    <Service Name="AeLookupSvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="ALG">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="AppMgmt">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="AudioEndpointBuilder">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="Audiosrv">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="BITS">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="Browser">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="CertPropSvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="clr_optimization_v2.0.50727_32">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="clr_optimization_v2.0.50727_64">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="clr_optimization_v2.0.50727_I64">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="ClusSvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="COMSysApp">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="CscService">
      <Optional>FALSE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="DHCPServer">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
      <Cluster_Startup_Default>Ignored</Cluster_Startup_Default>
    </Service>
    <Service Name="DNS">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="Dnscache">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="dot3svc">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="DPS">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="EapHost">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="FCRegSvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="fdPHost">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="FDResPub">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="hkmsvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="IPBusEnum">
      <Optional>FALSE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="KeyIso">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="KtmRm">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="LanmanServer">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="LanmanWorkstation">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="lltdsvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="lmhosts">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="LPDSVC">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="MMCSS">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="MSDTC">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="MSiSCSI">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="msiserver">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="napagent">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="Netlogon">
      <Optional>FALSE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="pla">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="PolicyAgent">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="RasAuto">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="RasMan">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="RemoteAccess">
      <Optional>FALSE</Optional>
      <Startup_Default>Disabled</Startup_Default>
    </Service>
    <Service Name="RemoteRegistry">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="RpcLocator">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="RSoPProv">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="sacsvr">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="SCardSvr">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SCPolicySvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="seclogon">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SENS">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SessionEnv">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SharedAccess">
      <Optional>FALSE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="SNMPTRAP">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="Spooler">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SrmSvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SrmReports">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="SSDPSRV">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="swprv">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="TapiSrv">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="TBS">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="TermService">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="TrkWks">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="upnphost">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="UI0Detect">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="UmRdpService">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="VSS">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="W32Time">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="WcsPlugInService">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="WdiServiceHost">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="WdiSystemHost">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="Wecsvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="wercplsupport">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="WerSvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="WinHttpAutoProxySvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="WinRM">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="wmiApSrv">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="WPDBusEnum">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="wuauserv">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="wudfsvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>

    <!--===============================================
                Optional Services
=================================================-->

    <Service Name="AdRmsLoggingService">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="AppHostSvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="aspnet_state">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="CertSvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="CISVC">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="DFS">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
      <Cluster_Startup_Default>Ignored</Cluster_Startup_Default>
    </Service>
    <Service Name="DFSR">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="Fax">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="FontCache3.0.0.0">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="IAS">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="IASJet">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="idsvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="IISADMIN">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="ifssvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="IsmServ">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="kdc">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="MSFTPSVC">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
      <Cluster_Startup_Default>Ignored</Cluster_Startup_Default>
    </Service>
    <Service Name="MSiSNS">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="MSMQ">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="MSMQTriggers">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="MQDSSVC">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="MSSQL$MICROSOFT##SSEE">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="NetMsmqActivator">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="NetPipeActivator">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="NetTcpActivator">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="NetTcpPortSharing">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="NisSvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="nfssvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="nfsclnt">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="NTDS">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="NtFrs">
      <Optional>TRUE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="NtmsSvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="OCSPSvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="p2pimsvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="PNRPAutoReg">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="PNRPsvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="QWAVE">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="rqs">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="SimpTcp">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SMTPSVC">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
      <Cluster_Startup_Default>Ignored</Cluster_Startup_Default>
    </Service>
    <Service Name="SPAdmin">
      <Optional>TRUE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="SPTimerV3">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SPSearch">
      <Optional>TRUE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="SPTrace">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SPWriter">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="SQLWriter">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SNMP">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="SstpSvc">
      <Optional>FALSE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="TlntSvr">
      <Optional>TRUE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="TermServLicensing">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="TSGateway">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="Tssdis">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="WAS">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
      <Cluster_Startup_Default>Ignored</Cluster_Startup_Default>
    </Service>
    <Service Name="wbengine">
      <Optional>TRUE</Optional>
      <Startup_Default>Manual</Startup_Default>
    </Service>
    <Service Name="WDSServer">
      <Optional>TRUE</Optional>
      <Startup_Default>Ignored</Startup_Default>
    </Service>
    <Service Name="WebClient">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="WINS">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
      <Cluster_Startup_Default>Ignored</Cluster_Startup_Default>
    </Service>
    <Service Name="W3SVC">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="WMSvc">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="WSearch">
      <Optional>FALSE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
    <Service Name="wsrm">
      <Optional>TRUE</Optional>
      <Startup_Default>Automatic</Startup_Default>
    </Service>
  </Services>

  <Firewall>
    <FirewallRules>
      <FirewallRule Id="bitssvc-in-tcp"
                    Name="@firewallapi.dll,-28262"
                    Description="@firewallapi.dll,-28265"
                    Group="@firewallapi.dll,-28252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="2178"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="bitssvc-out-tcp"
                    Name="@firewallapi.dll,-28266"
                    Description="@firewallapi.dll,-28269"
                    Group="@firewallapi.dll,-28252"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="2178"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="bitssvc-rpc-in-tcp"
                    Name="@firewallapi.dll,-28270"
                    Description="@firewallapi.dll,-28273"
                    Group="@firewallapi.dll,-28252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="bits"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="bitssvc-rpcss-in-tcp"
                    Name="@firewallapi.dll,-28274"
                    Description="@firewallapi.dll,-28277"
                    Group="@firewallapi.dll,-28252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="bitssvc-wsd-in-udp"
                    Name="@firewallapi.dll,-28254"
                    Description="@firewallapi.dll,-28257"
                    Group="@firewallapi.dll,-28252"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="bits"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3702"/>
        </LocalPorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="bitssvc-wsd-out-udp"
                    Name="@firewallapi.dll,-28258"
                    Description="@firewallapi.dll,-28261"
                    Group="@firewallapi.dll,-28252"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="bits"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="3702"/>
        </RemotePorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="dnssrv-dns-tcp-in"
                    Name="@dns.exe,-1001"
                    Description="@dns.exe,-1007"
                    Group="@dns.exe,-1012"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\dns.exe"
                    Service="dns"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="53"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="dnssrv-dns-udp-in"
                    Name="@dns.exe,-1002"
                    Description="@dns.exe,-1008"
                    Group="@dns.exe,-1012"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\dns.exe"
                    Service="dns"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="53"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="dnssrv-rpc-tcp-in"
                    Name="@dns.exe,-1003"
                    Description="@dns.exe,-1009"
                    Group="@dns.exe,-1012"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\dns.exe"
                    Service="dns"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="dnssrv-rpcepmap-tcp-in"
                    Name="@dns.exe,-1000"
                    Description="@dns.exe,-1006"
                    Group="@dns.exe,-1012"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="dnssrv-tcp-out"
                    Name="@dns.exe,-1004"
                    Description="@dns.exe,-1010"
                    Group="@dns.exe,-1012"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\dns.exe"
                    Service="dns"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="dnssrv-udp-out"
                    Name="@dns.exe,-1005"
                    Description="@dns.exe,-1011"
                    Group="@dns.exe,-1012"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\dns.exe"
                    Service="dns"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="corenet-dns-out-udp"
                    Name="@firewallapi.dll,-25405"
                    Description="@firewallapi.dll,-25406"
                    Group="@firewallapi.dll,-25000"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="dnscache"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="53"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="corenet-gp-lsass-out-tcp"
                    Name="@firewallapi.dll,-25407"
                    Description="@firewallapi.dll,-25408"
                    Group="@firewallapi.dll,-25000"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <Profiles>
          <Profile Type="Domain"/>
        </Profiles>
      </FirewallRule>
      <FirewallRule Id="corenet-gp-np-out-tcp"
                    Name="@firewallapi.dll,-25401"
                    Description="@firewallapi.dll,-25401"
                    Group="@firewallapi.dll,-25000"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <Profiles>
          <Profile Type="Domain"/>
        </Profiles>
        <RemotePorts>
          <Port Value="445"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="corenet-gp-out-tcp"
                    Name="@firewallapi.dll,-25403"
                    Description="@firewallapi.dll,-25404"
                    Group="@firewallapi.dll,-25000"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <Profiles>
          <Profile Type="Domain"/>
        </Profiles>
      </FirewallRule>
      <FirewallRule Id="netlogon-namedpipe-in"
                    Name="@netlogon.dll,-1003"
                    Description="@netlogon.dll,-1006"
                    Group="@netlogon.dll,-1010"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="False"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="netlogon-tcp-rpc-in"
                    Name="@netlogon.dll,-1008"
                    Description="@netlogon.dll,-1009"
                    Group="@netlogon.dll,-1010"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="False"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-dhcp-clientsvc-dhcpv4-in"
                    Name="@%systemroot%\system32\dhcpssvc.dll,-202"
                    Description="@%systemroot%\system32\dhcpssvc.dll,-203"
                    Group="@%systemroot%\system32\dhcpssvc.dll,-208"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="dhcpserver"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="67"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-dhcp-clientsvc-dhcpv6-in"
                    Name="@%systemroot%\system32\dhcpssvc.dll,-204"
                    Description="@%systemroot%\system32\dhcpssvc.dll,-205"
                    Group="@%systemroot%\system32\dhcpssvc.dll,-208"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="dhcpserver"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="547"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-dhcp-clientsvc-rpc-tcp-in"
                    Name="@%systemroot%\system32\dhcpssvc.dll,-206"
                    Description="@%systemroot%\system32\dhcpssvc.dll,-207"
                    Group="@%systemroot%\system32\dhcpssvc.dll,-211"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="dhcpserver"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-dhcp-clientsvc-rpcss-tcp-in"
                    Name="@%systemroot%\system32\dhcpssvc.dll,-209"
                    Description="@%systemroot%\system32\dhcpssvc.dll,-210"
                    Group="@%systemroot%\system32\dhcpssvc.dll,-211"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="Microsoft-Windows-DHCP-Failover-TCP-In"
                    Name="@%systemroot%\system32\dhcpssvc.dll,-218"
                    Description="@%systemroot%\system32\dhcpssvc.dll,-219"
                    Group="@%systemroot%\system32\dhcpssvc.dll,-211"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="dhcpserver"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="647"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="Microsoft-Windows-DHCP-Failover-TCP-Out"
                    Name="@%systemroot%\system32\dhcpssvc.dll,-220"
                    Description="@%systemroot%\system32\dhcpssvc.dll,-221"
                    Group="@%systemroot%\system32\dhcpssvc.dll,-211"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="dhcpserver"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="647"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="fps-icmp4-erq-in"
                    Name="@firewallapi.dll,-28543"
                    Description="@firewallapi.dll,-28547"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Inbound"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="8"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="fps-icmp4-erq-out"
                    Name="@firewallapi.dll,-28544"
                    Description="@firewallapi.dll,-28547"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Outbound"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="8"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="fps-icmp6-erq-in"
                    Name="@firewallapi.dll,-28545"
                    Description="@firewallapi.dll,-28547"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Inbound"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="128"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="fps-icmp6-erq-out"
                    Name="@firewallapi.dll,-28546"
                    Description="@firewallapi.dll,-28547"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Outbound"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="128"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="fps-nb_datagram-in-udp-noscope"
                    Name="@firewallapi.dll,-28527"
                    Description="@firewallapi.dll,-28530"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="138"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="fps-nb_datagram-out-udp-noscope"
                    Name="@firewallapi.dll,-28531"
                    Description="@firewallapi.dll,-28534"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="138"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="fps-nb_name-in-udp-noscope"
                    Name="@firewallapi.dll,-28519"
                    Description="@firewallapi.dll,-28522"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="137"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="fps-nb_name-out-udp-noscope"
                    Name="@firewallapi.dll,-28523"
                    Description="@firewallapi.dll,-28526"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="137"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="fps-nb_session-in-tcp-noscope"
                    Name="@firewallapi.dll,-28503"
                    Description="@firewallapi.dll,-28506"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="139"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="fps-nb_session-out-tcp-noscope"
                    Name="@firewallapi.dll,-28507"
                    Description="@firewallapi.dll,-28510"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="139"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="fps-rpcss-in-tcp-noscope"
                    Name="@firewallapi.dll,-28539"
                    Description="@firewallapi.dll,-28542"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="fps-smb-in-tcp-noscope"
                    Name="@firewallapi.dll,-28511"
                    Description="@firewallapi.dll,-28514"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="fps-smb-out-tcp-noscope"
                    Name="@firewallapi.dll,-28515"
                    Description="@firewallapi.dll,-28518"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="445"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="fps-spoolsvc-in-tcp-noscope"
                    Name="@firewallapi.dll,-28535"
                    Description="@firewallapi.dll,-28538"
                    Group="@firewallapi.dll,-28502"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\spoolsv.exe"
                    Service="spooler"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="msdtc-in-tcp"
                    Name="@firewallapi.dll,-33503"
                    Description="@firewallapi.dll,-33506"
                    Group="@firewallapi.dll,-33502"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\msdtc.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msdtc-out-tcp"
                    Name="@firewallapi.dll,-33507"
                    Description="@firewallapi.dll,-33510"
                    Group="@firewallapi.dll,-33502"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\msdtc.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msdtc-rpcss-in-tcp"
                    Name="@firewallapi.dll,-33513"
                    Description="@firewallapi.dll,-33514"
                    Group="@firewallapi.dll,-33502"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="wmi-async-in-tcp"
                    Name="@firewallapi.dll,-34256"
                    Description="@firewallapi.dll,-34257"
                    Group="@firewallapi.dll,-34251"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\wbem\unsecapp.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="wmi-rpcss-in-tcp"
                    Name="@firewallapi.dll,-34252"
                    Description="@firewallapi.dll,-34253"
                    Group="@firewallapi.dll,-34251"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wmi-winmgmt-in-tcp"
                    Name="@firewallapi.dll,-34254"
                    Description="@firewallapi.dll,-34255"
                    Group="@firewallapi.dll,-34251"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="wmi-winmgmt-out-tcp"
                    Name="@firewallapi.dll,-34258"
                    Description="@firewallapi.dll,-34259"
                    Group="@firewallapi.dll,-34251"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="winrm-http-in-tcp"
                    Name="@firewallapi.dll,-30253"
                    Description="@firewallapi.dll,-30256"
                    Group="@firewallapi.dll,-30252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="80"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="sppsvc-in-tcp"
                    Name="@firewallapi.dll,-28003"
                    Description="@firewallapi.dll,-28006"
                    Group="@firewallapi.dll,-28002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\sppsvc.exe"
                    Service="sppsvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1688"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="remotefwadmin-in-tcp"
                    Name="@firewallapi.dll,-30003"
                    Description="@firewallapi.dll,-30006"
                    Group="@firewallapi.dll,-30002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="policyagent"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="remotefwadmin-rpcss-in-tcp"
                    Name="@firewallapi.dll,-30007"
                    Description="@firewallapi.dll,-30010"
                    Group="@firewallapi.dll,-30002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="snmptrap-in-udp"
                    Name="@snmptrap.exe,-7"
                    Description="@snmptrap.exe,-8"
                    Group="@snmptrap.exe,-3"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\snmptrap.exe"
                    Service="snmptrap"
                    Enabled="True"
                    Action="AllowConnections">
        <Profiles>
          <Profile Type="Private"/>
          <Profile Type="Public"/>
        </Profiles>
        <LocalPorts>
          <Port Value="162"/>
        </LocalPorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="snmptrap-in-udp-noscope"
                    Name="@snmptrap.exe,-7"
                    Description="@snmptrap.exe,-8"
                    Group="@snmptrap.exe,-3"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\snmptrap.exe"
                    Service="snmptrap"
                    Enabled="True"
                    Action="AllowConnections">
        <Profiles>
          <Profile Type="Domain"/>
        </Profiles>
        <LocalPorts>
          <Port Value="162"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="dfsr-dfsrsvc-in-tcp"
                    Name="@dfsrress.dll,-526"
                    Description="@dfsrress.dll,-528"
                    Group="@dfsrress.dll,-525"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\dfsrs.exe"
                    Service="dfsr"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="dfsr-dfsrsvc-rpcss-in-tcp"
                    Name="@dfsrress.dll,-530"
                    Description="@dfsrress.dll,-531"
                    Group="@dfsrress.dll,-525"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="dfsmgmt-dcom-in-tcp"
                    Name="@dfsres.dll,-6004"
                    Description="@dfsres.dll,-6005"
                    Group="@dfsres.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="dfsmgmt-in-tcp"
                    Name="@dfsres.dll,-6002"
                    Description="@dfsres.dll,-6003"
                    Group="@dfsres.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\dfsfrshost.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="dfsmgmt-smb-in-tcp"
                    Name="@dfsres.dll,-6008"
                    Description="@dfsres.dll,-6009"
                    Group="@dfsres.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="dfsmgmt-wmi-in-tcp"
                    Name="@dfsres.dll,-6006"
                    Description="@dfsres.dll,-6007"
                    Group="@dfsres.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-isns_service-tcp-in"
                    Name="@isnssrv.dll,-5002"
                    Description="@isnssrv.dll,-5003"
                    Group="@isnssrv.dll,-5004"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="msisns"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3205"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-isns_service-tcp-out"
                    Name="@isnssrv.dll,-6002"
                    Description="@isnssrv.dll,-6003"
                    Group="@isnssrv.dll,-5004"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="msisns"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="smtpsvc-service-in-tcp"
                    Name="@%windir%\system32\inetsrv\smtpsetup.exe,-3"
                    Description="@%windir%\system32\inetsrv\smtpsetup.exe,-4"
                    Group="@%windir%\system32\inetsrv\smtpsetup.exe,-1"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%windir%\system32\inetsrv\inetinfo.exe"
                    Service="smtpsvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="25"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="snmp-in-udp"
                    Name="@snmp.exe,-8"
                    Description="@snmp.exe,-10"
                    Group="@snmp.exe,-3"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\snmp.exe"
                    Service="snmp"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="161"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="snmp-in-udp-noscope"
                    Name="@snmp.exe,-8"
                    Description="@snmp.exe,-10"
                    Group="@snmp.exe,-3"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\snmp.exe"
                    Service="snmp"
                    Enabled="True"
                    Action="AllowConnections">
        <Profiles>
          <Profile Type="Domain"/>
        </Profiles>
        <LocalPorts>
          <Port Value="161"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="telnetserver-tlntadmn-dcom-in"
                    Name="@tlntsvr.exe,-126"
                    Description="@tlntsvr.exe,-127"
                    Group="@tlntsvr.exe,-128"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="telnetserver-tlntadmn-np-in"
                    Name="@tlntsvr.exe,-122"
                    Description="@tlntsvr.exe,-123"
                    Group="@tlntsvr.exe,-128"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="telnetserver-tlntadmn-rpc-in"
                    Name="@tlntsvr.exe,-129"
                    Description="@tlntsvr.exe,-130"
                    Group="@tlntsvr.exe,-128"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\tlntsvr.exe"
                    Service="tlntsvr"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="telnetserver-tlntadmn-rpcss-epmap-in"
                    Name="@tlntsvr.exe,-124"
                    Description="@tlntsvr.exe,-125"
                    Group="@tlntsvr.exe,-128"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="telnetserver-tlntsvr-tcp-in"
                    Name="@tlntsvr.exe,-120"
                    Description="@tlntsvr.exe,-121"
                    Group="@tlntsvr.exe,-119"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\tlntsvr.exe"
                    Service="tlntsvr"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="23"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wds-np-in-tcp"
                    Name="@wdssrv.dll,-1009"
                    Description="@wdssrv.dll,-1010"
                    Group="@wdssrv.dll,-1001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wds-rpc-in-tcp"
                    Name="@wdssrv.dll,-1005"
                    Description="@wdssrv.dll,-1006"
                    Group="@wdssrv.dll,-1001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="wdsserver"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="wds-rpcss-in-tcp"
                    Name="@wdssrv.dll,-1003"
                    Description="@wdssrv.dll,-1004"
                    Group="@wdssrv.dll,-1001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="wds-wdsserver-in-udp"
                    Name="@wdssrv.dll,-1007"
                    Description="@wdssrv.dll,-1008"
                    Group="@wdssrv.dll,-1001"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="wdsserver"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="iis-webserverrole-ftp-in-tcp"
                    Name="@%windir%\system32\inetsrv\iisres.dll,-30504"
                    Description="@%windir%\system32\inetsrv\iisres.dll,-30514"
                    Group="@%windir%\system32\inetsrv\iisres.dll,-30505"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%windir%\system32\inetsrv\inetinfo.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="21"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="ntfrs-ntfrssvc-in-tcp"
                    Name="@ntfrsres.dll,-526"
                    Description="@ntfrsres.dll,-528"
                    Group="@ntfrsres.dll,-525"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\ntfrs.exe"
                    Service="ntfrs"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="ntfrs-ntfrssvc-rpcss-in-tcp"
                    Name="@ntfrsres.dll,-530"
                    Description="@ntfrsres.dll,-531"
                    Group="@ntfrsres.dll,-525"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="nis-server-in-rpc-epmap"
                    Name="@%windir%\idmu\nis\nissvc.dll,-103"
                    Description="@%windir%\idmu\nis\nissvc.dll,-104"
                    Group="@%windir%\idmu\nis\nissvc.dll,-100"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="111"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="nis-server-in-rpc-tcp"
                    Name="@%windir%\idmu\nis\nissvc.dll,-101"
                    Description="@%windir%\idmu\nis\nissvc.dll,-105"
                    Group="@%windir%\idmu\nis\nissvc.dll,-100"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="nissvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="nis-server-in-rpc-udp"
                    Name="@%windir%\idmu\nis\nissvc.dll,-108"
                    Description="@%windir%\idmu\nis\nissvc.dll,-102"
                    Group="@%windir%\idmu\nis\nissvc.dll,-100"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="nissvc"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="psync-lsass-tcp-in"
                    Name="@pswdsync.dll,-230"
                    Description="@pswdsync.dll,-229"
                    Group="@pswdsync.dll,-228"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="6677"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="netdis-fdphost-in-udp"
                    Name="@firewallapi.dll,-32785"
                    Description="@firewallapi.dll,-32788"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="fdphost"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3702"/>
        </LocalPorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="netdis-fdphost-out-udp"
                    Name="@firewallapi.dll,-32789"
                    Description="@firewallapi.dll,-32792"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="fdphost"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="3702"/>
        </RemotePorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="netdis-fdrespub-wsd-in-udp"
                    Name="@firewallapi.dll,-32809"
                    Description="@firewallapi.dll,-32810"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="fdrespub"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3702"/>
        </LocalPorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="netdis-fdrespub-wsd-out-udp"
                    Name="@firewallapi.dll,-32811"
                    Description="@firewallapi.dll,-32812"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="fdrespub"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="3702"/>
        </RemotePorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="netdis-llmnr-in-udp"
                    Name="@firewallapi.dll,-32801"
                    Description="@firewallapi.dll,-32804"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="dnscache"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="5355"/>
        </LocalPorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="netdis-llmnr-out-udp"
                    Name="@firewallapi.dll,-32805"
                    Description="@firewallapi.dll,-32808"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="dnscache"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="5355"/>
        </RemotePorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="netdis-nb_datagram-in-udp"
                    Name="@firewallapi.dll,-32777"
                    Description="@firewallapi.dll,-32780"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="138"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="netdis-nb_datagram-out-udp"
                    Name="@firewallapi.dll,-32781"
                    Description="@firewallapi.dll,-32784"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="138"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="netdis-nb_name-in-udp"
                    Name="@firewallapi.dll,-32769"
                    Description="@firewallapi.dll,-32772"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="137"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="netdis-nb_name-out-udp"
                    Name="@firewallapi.dll,-32773"
                    Description="@firewallapi.dll,-32776"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="137"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="netdis-wsdevnt-in-tcp"
                    Name="@firewallapi.dll,-32817"
                    Description="@firewallapi.dll,-32818"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="5357"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="netdis-wsdevnt-out-tcp"
                    Name="@firewallapi.dll,-32819"
                    Description="@firewallapi.dll,-32820"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="5357"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="netdis-wsdevnts-in-tcp"
                    Name="@firewallapi.dll,-32813"
                    Description="@firewallapi.dll,-32814"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="5358"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="netdis-wsdevnts-out-tcp"
                    Name="@firewallapi.dll,-32815"
                    Description="@firewallapi.dll,-32816"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="5358"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="iis-webserverrole-http-in-tcp"
                    Name="@%windir%\system32\inetsrv\iisres.dll,-30500"
                    Description="@%windir%\system32\inetsrv\iisres.dll,-30510"
                    Group="@%windir%\system32\inetsrv\iisres.dll,-30501"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="80"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="iis-webserverrole-https-in-tcp"
                    Name="@%windir%\system32\inetsrv\iisres.dll,-30502"
                    Description="@%windir%\system32\inetsrv\iisres.dll,-30512"
                    Group="@%windir%\system32\inetsrv\iisres.dll,-30503"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="443"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wins-service-in-nb-name-udp"
                    Name="@%systemroot%\system32\winsevnt.dll,-10009"
                    Description="@%systemroot%\system32\winsevnt.dll,-10010"
                    Group="@%systemroot%\system32\winsevnt.dll,-10000"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="137"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wins-service-in-np"
                    Name="@%systemroot%\system32\winsevnt.dll,-30005"
                    Description="@%systemroot%\system32\winsevnt.dll,-30006"
                    Group="@%systemroot%\system32\winsevnt.dll,-30000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wins-service-in-rpc"
                    Name="@%systemroot%\system32\winsevnt.dll,-30001"
                    Description="@%systemroot%\system32\winsevnt.dll,-30002"
                    Group="@%systemroot%\system32\winsevnt.dll,-30000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\wins.exe"
                    Service="wins"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="wins-service-in-rpcss-epmap"
                    Name="@%systemroot%\system32\winsevnt.dll,-30003"
                    Description="@%systemroot%\system32\winsevnt.dll,-30004"
                    Group="@%systemroot%\system32\winsevnt.dll,-30000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="wins-service-in-tcp"
                    Name="@%systemroot%\system32\winsevnt.dll,-10001"
                    Description="@%systemroot%\system32\winsevnt.dll,-10002"
                    Group="@%systemroot%\system32\winsevnt.dll,-10000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\wins.exe"
                    Service="wins"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="42"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wins-service-in-udp"
                    Name="@%systemroot%\system32\winsevnt.dll,-10005"
                    Description="@%systemroot%\system32\winsevnt.dll,-10006"
                    Group="@%systemroot%\system32\winsevnt.dll,-10000"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\wins.exe"
                    Service="wins"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="42"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wins-service-out-tcp"
                    Name="@%systemroot%\system32\winsevnt.dll,-10003"
                    Description="@%systemroot%\system32\winsevnt.dll,-10004"
                    Group="@%systemroot%\system32\winsevnt.dll,-10000"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\wins.exe"
                    Service="wins"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="wins-service-out-udp"
                    Name="@%systemroot%\system32\winsevnt.dll,-10007"
                    Description="@%systemroot%\system32\winsevnt.dll,-10008"
                    Group="@%systemroot%\system32\winsevnt.dll,-10000"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\wins.exe"
                    Service="wins"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-peertopeerpnrp-pnrpsvc-udp-in"
                    Name="@%systemroot%\system32\p2psvc.dll,-8008"
                    Description="@%systemroot%\system32\p2psvc.dll,-8009"
                    Group="@%systemroot%\system32\p2psvc.dll,-8010"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="pnrpsvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3540"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="remotedesktop-in-tcp"
                    Name="@firewallapi.dll,-28753"
                    Description="@firewallapi.dll,-28756"
                    Group="@firewallapi.dll,-28752"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3389"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="tsCPubRPC-WMI-ASync-In-TCP"
                    Name="@FirewallAPI.dll,-34257"
                    Description="@FirewallAPI.dll,-34257"
                    Group="@FirewallAPI.dll,-34257"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Enabled="True"
                    Action="AllowConnections">
      </FirewallRule>
      <FirewallRule Id="tsCPubRPC-WMI-DCOM-In-TCP"
                    Name="@firewallapi.dll,-33035"
                    Description="@firewallapi.dll,-33036"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
       <FirewallRule Id="tsCPubRPC-WMI-In-TCP"
                    Name="@FirewallAPI.dll,-34253"
                    Description="@FirewallAPI.dll,-34253"
                    Group="@FirewallAPI.dll,-34253"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
       </FirewallRule>
      <FirewallRule Id="tsCPubRPC-WMI-Out-TCP"
                   Name="@FirewallAPI.dll,-34259"
                   Description="@FirewallAPI.dll,-34259"
                   Group="@FirewallAPI.dll,-34259"
                   ProtocolKeyword="TCP"
                   Direction="Outbound"
                   Program="%systemroot%\system32\svchost.exe"
                   Enabled="True"
                   Action="AllowConnections">
      </FirewallRule>
      <FirewallRule Id="tsCPubRPC-RPC-In-TCP"
                   Name="@TSCPUBSvr.dll,-122"
                   Description="@TSCPUBSvr.dll,-122"
                   Group="@TSCPUBSvr.dll,-122"
                   ProtocolKeyword="TCP"
                   Direction="Inbound"
                   Program="%systemroot%\system32\svchost.exe"
                   Enabled="True"
                   Action="AllowConnections">
        <LocalPorts>
          <Port Value="5504"/>
        </LocalPorts>
      </FirewallRule>       
      <FirewallRule Id="termservice-in-tcp"
                    Name="@appserver-setup.exe,-110"
                    Description="@appserver-setup.exe,-111"
                    Group="@appserver-setup.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="termservice"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="termservice-np-in-tcp"
                    Name="@appserver-setup.exe,-114"
                    Description="@appserver-setup.exe,-115"
                    Group="@appserver-setup.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="termservice-rpcss-in-tcp"
                    Name="@appserver-setup.exe,-112"
                    Description="@appserver-setup.exe,-113"
                    Group="@appserver-setup.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="termservice-wmi-dcom-in-tcp"
                    Name="@appserver-setup.exe,-116"
                    Description="@appserver-setup.exe,-117"
                    Group="@appserver-setup.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="termservice-wmi-in-tcp"
                    Name="@appserver-setup.exe,-118"
                    Description="@appserver-setup.exe,-119"
                    Group="@appserver-setup.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="termservice-wmi-out-tcp"
                    Name="@appserver-setup.exe,-120"
                    Description="@appserver-setup.exe,-121"
                    Group="@appserver-setup.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="termservlicensing-in-tcp"
                    Name="@lserver.dll,-122"
                    Description="@lserver.dll,-123"
                    Group="@lserver.dll,-121"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="termservlicensing"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="termservlicensing-np-in-tcp"
                    Name="@lserver.dll,-126"
                    Description="@lserver.dll,-127"
                    Group="@lserver.dll,-121"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="termservlicensing-rpcss-in-tcp"
                    Name="@lserver.dll,-124"
                    Description="@lserver.dll,-125"
                    Group="@lserver.dll,-121"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="termservlicensing-wmi-dcom-in-tcp"
                    Name="@lserver.dll,-128"
                    Description="@lserver.dll,-129"
                    Group="@lserver.dll,-121"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="termservlicensing-wmi-in-tcp"
                    Name="@lserver.dll,-130"
                    Description="@lserver.dll,-131"
                    Group="@lserver.dll,-121"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="termservlicensing-wmi-out-tcp"
                    Name="@lserver.dll,-132"
                    Description="@lserver.dll,-133"
                    Group="@lserver.dll,-121"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="sessiondirectoryservice-in-tcp"
                    Name="@tssdis.exe,-110"
                    Description="@tssdis.exe,-111"
                    Group="@tssdis.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\tssdis.exe"
                    Service="tssdis"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="sessiondirectoryservice-np-in-tcp"
                    Name="@tssdis.exe,-114"
                    Description="@tssdis.exe,-115"
                    Group="@tssdis.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="sessiondirectoryservice-rpcss-in-tcp"
                    Name="@tssdis.exe,-112"
                    Description="@tssdis.exe,-113"
                    Group="@tssdis.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="sessiondirectoryservice-wmi-dcom-in-tcp"
                    Name="@tssdis.exe,-116"
                    Description="@tssdis.exe,-117"
                    Group="@tssdis.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="sessiondirectoryservice-wmi-in-tcp"
                    Name="@tssdis.exe,-118"
                    Description="@tssdis.exe,-119"
                    Group="@tssdis.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="sessiondirectoryservice-wmi-out-tcp"
                    Name="@tssdis.exe,-120"
                    Description="@tssdis.exe,-121"
                    Group="@tssdis.exe,-109"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="remoteassistance-dcom-in-tcp-noscope"
                    Name="@firewallapi.dll,-33035"
                    Description="@firewallapi.dll,-33036"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="remoteassistance-in-tcp-edgescope"
                    Name="@firewallapi.dll,-33003"
                    Description="@firewallapi.dll,-33006"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\msra.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="remoteassistance-out-tcp"
                    Name="@firewallapi.dll,-33007"
                    Description="@firewallapi.dll,-33010"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\msra.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="remoteassistance-raserver-in-tcp-noscope"
                    Name="@firewallapi.dll,-33011"
                    Description="@firewallapi.dll,-33014"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\raserver.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="remoteassistance-raserver-out-tcp-noscope"
                    Name="@firewallapi.dll,-33015"
                    Description="@firewallapi.dll,-33018"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\raserver.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="remoteassistance-ssdpsrv-in-udp"
                    Name="@firewallapi.dll,-33019"
                    Description="@firewallapi.dll,-33022"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="ssdpsrv"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1900"/>
        </LocalPorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="remoteassistance-ssdpsrv-out-udp"
                    Name="@firewallapi.dll,-33023"
                    Description="@firewallapi.dll,-33026"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="ssdpsrv"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="1900"/>
        </RemotePorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="remoteassistance-upnp-out-tcp"
                    Name="@firewallapi.dll,-33037"
                    Description="@firewallapi.dll,-33038"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="upnphost"
                    Enabled="True"
                    Action="AllowConnections">
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="remoteassistance-upnphost-in-tcp"
                    Name="@firewallapi.dll,-33027"
                    Description="@firewallapi.dll,-33030"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="2869"/>
        </LocalPorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="remoteassistance-upnphost-out-tcp"
                    Name="@firewallapi.dll,-33031"
                    Description="@firewallapi.dll,-33034"
                    Group="@firewallapi.dll,-33002"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="wsrmservice-dcom-in"
                    Name="@wsrm.exe,-113"
                    Description="@wsrm.exe,-114"
                    Group="@wsrm.exe,-100"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wsrmservice-dcomclient-in"
                    Name="@wsrm.exe,-111"
                    Description="@wsrm.exe,-112"
                    Group="@wsrm.exe,-100"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\wsrm.exe"
                    Service="wsrm"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="SCW-Remote-Operations-For-Scshost-RPC"
                    Name="@scwcmd.exe,-8001"
                    Description="@scwcmd.exe,-8002"
                    Group="@scwcmd.exe,-8000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\scshost.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="SCW-Remote-Operations-For-Scshost-RPC-EndPointMapper"
                    Name="@scwcmd.exe,-8003"
                    Description="@scwcmd.exe,-8004"
                    Group="@scwcmd.exe,-8000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\scshost.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="SCW-Remote-Operations-For-Svchost-TCP"
                    Name="@scwcmd.exe,-8005"
                    Description="@scwcmd.exe,-8006"
                    Group="@scwcmd.exe,-8000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>

      <FirewallRule Id="SCW-Remote-Operations-For-System-TCP"
                    Name="@scwcmd.exe,-8007"
                    Description="@scwcmd.exe,-8008"
                    Group="@scwcmd.exe,-8000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="139"/>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="SCW-Remote-Operations-For-System-UDP"
                    Name="@scwcmd.exe,-8009"
                    Description="@scwcmd.exe,-8010"
                    Group="@scwcmd.exe,-8000"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="137"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="iis-webserverrole-wmsvc-in-tcp"
                    Name="@%windir%\system32\inetsrv\iisres.dll,-30506"
                    Description="@%windir%\system32\inetsrv\iisres.dll,-30516"
                    Group="@%windir%\system32\inetsrv\iisres.dll,-30507"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="8172"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-dcom-tcp-in"
                    Name="@nlbcfg.dll,-10013"
                    Description="@nlbcfg.dll,-10014"
                    Group="@nlbcfg.dll,-10000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-rpcss-tcp-in"
                    Name="@nlbcfg.dll,-10005"
                    Description="@nlbcfg.dll,-10006"
                    Group="@nlbcfg.dll,-10000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-winmgmt-tcp-in"
                    Name="@nlbcfg.dll,-10007"
                    Description="@nlbcfg.dll,-10008"
                    Group="@nlbcfg.dll,-10000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="networkloadbalancing-icmpv4-er-out"
                    Name="@nlbcfg.dll,-10009"
                    Description="@nlbcfg.dll,-10010"
                    Group="@nlbcfg.dll,-10000"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="0"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-icmpv4-erq-in"
                    Name="@nlbcfg.dll,-10001"
                    Description="@nlbcfg.dll,-10002"
                    Group="@nlbcfg.dll,-10000"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="8"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-icmpv6-er-out"
                    Name="@nlbcfg.dll,-10011"
                    Description="@nlbcfg.dll,-10012"
                    Group="@nlbcfg.dll,-10000"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="129"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-icmpv6-erq-in"
                    Name="@nlbcfg.dll,-10003"
                    Description="@nlbcfg.dll,-10004"
                    Group="@nlbcfg.dll,-10000"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="128"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-icmpv4-du-in"
                    Name="@nlbmgr.exe,-60009"
                    Description="@nlbmgr.exe,-60010"
                    Group="@nlbmgr.exe,-60000"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="3"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-icmpv4-er-in"
                    Name="@nlbmgr.exe,-60005"
                    Description="@nlbmgr.exe,-60006"
                    Group="@nlbmgr.exe,-60000"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="0"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-icmpv4-erq-out"
                    Name="@nlbmgr.exe,-60001"
                    Description="@nlbmgr.exe,-60002"
                    Group="@nlbmgr.exe,-60000"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="8"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-icmpv6-du-in"
                    Name="@nlbmgr.exe,-60011"
                    Description="@nlbmgr.exe,-60012"
                    Group="@nlbmgr.exe,-60000"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="1"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-icmpv6-er-in"
                    Name="@nlbmgr.exe,-60007"
                    Description="@nlbmgr.exe,-60008"
                    Group="@nlbmgr.exe,-60000"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="129"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="networkloadbalancing-icmpv6-erq-out"
                    Name="@nlbmgr.exe,-60003"
                    Description="@nlbmgr.exe,-60004"
                    Group="@nlbmgr.exe,-60000"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="128"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-clientcore-nfsclnt-tcp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9102"
                    Description="@%windir%\system32\nfsrc.dll,-9122"
                    Group="@%windir%\system32\nfsrc.dll,-9001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\nfsclnt.exe"
                    Service="nfsclnt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-nfs-clientcore-nfsclnt-tcp-out"
                    Name="@%windir%\system32\nfsrc.dll,-9103"
                    Description="@%windir%\system32\nfsrc.dll,-9123"
                    Group="@%windir%\system32\nfsrc.dll,-9001"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\nfsclnt.exe"
                    Service="nfsclnt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-nfs-clientcore-nfsclnt-udp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9100"
                    Description="@%windir%\system32\nfsrc.dll,-9120"
                    Group="@%windir%\system32\nfsrc.dll,-9001"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\nfsclnt.exe"
                    Service="nfsclnt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-nfs-clientcore-nfsclnt-udp-out"
                    Name="@%windir%\system32\nfsrc.dll,-9101"
                    Description="@%windir%\system32\nfsrc.dll,-9121"
                    Group="@%windir%\system32\nfsrc.dll,-9001"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\nfsclnt.exe"
                    Service="nfsclnt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-nfs-clientcore-remoteregistry-in"
                    Name="@%windir%\system32\nfsrc.dll,-9700"
                    Description="@%windir%\system32\nfsrc.dll,-9701"
                    Group="@%windir%\system32\nfsrc.dll,-9004"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-mount-tcp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9302"
                    Description="@%windir%\system32\nfsrc.dll,-9322"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1048"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-mount-udp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9300"
                    Description="@%windir%\system32\nfsrc.dll,-9320"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1048"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nfs-tcp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9202"
                    Description="@%windir%\system32\nfsrc.dll,-9222"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="2049"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nfs-tcp-out"
                    Name="@%windir%\system32\nfsrc.dll,-9203"
                    Description="@%windir%\system32\nfsrc.dll,-9223"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nfs-udp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9200"
                    Description="@%windir%\system32\nfsrc.dll,-9220"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="2049"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nfs-udp-out"
                    Name="@%windir%\system32\nfsrc.dll,-9201"
                    Description="@%windir%\system32\nfsrc.dll,-9221"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nlm-tcp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9402"
                    Description="@%windir%\system32\nfsrc.dll,-9422"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1047"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nlm-udp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9400"
                    Description="@%windir%\system32\nfsrc.dll,-9420"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1047"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nsm-tcp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9502"
                    Description="@%windir%\system32\nfsrc.dll,-9522"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1039"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-servercore-nfssvc-nsm-udp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9500"
                    Description="@%windir%\system32\nfsrc.dll,-9520"
                    Group="@%windir%\system32\nfsrc.dll,-9002"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1039"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-servercore-remoteregistry-in"
                    Name="@%windir%\system32\nfsrc.dll,-9702"
                    Description="@%windir%\system32\nfsrc.dll,-9703"
                    Group="@%windir%\system32\nfsrc.dll,-9005"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-openportmapper-portmap-tcp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9602"
                    Description="@%windir%\system32\nfsrc.dll,-9622"
                    Group="@%windir%\system32\nfsrc.dll,-9003"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="111"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-openportmapper-portmap-tcp-out"
                    Name="@%windir%\system32\nfsrc.dll,-9603"
                    Description="@%windir%\system32\nfsrc.dll,-9623"
                    Group="@%windir%\system32\nfsrc.dll,-9003"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-nfs-openportmapper-portmap-udp-in"
                    Name="@%windir%\system32\nfsrc.dll,-9600"
                    Description="@%windir%\system32\nfsrc.dll,-9620"
                    Group="@%windir%\system32\nfsrc.dll,-9003"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="111"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-nfs-openportmapper-portmap-udp-out"
                    Name="@%windir%\system32\nfsrc.dll,-9601"
                    Description="@%windir%\system32\nfsrc.dll,-9621"
                    Group="@%windir%\system32\nfsrc.dll,-9003"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="remotetask-in-tcp"
                    Name="@firewallapi.dll,-33253"
                    Description="@firewallapi.dll,-33256"
                    Group="@firewallapi.dll,-33252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="schedule"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="remotetask-rpcss-in-tcp"
                    Name="@firewallapi.dll,-33257"
                    Description="@firewallapi.dll,-33260"
                    Group="@firewallapi.dll,-33252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="netdis-ssdpsrv-in-udp"
                    Name="@firewallapi.dll,-32753"
                    Description="@firewallapi.dll,-32756"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="ssdpsrv"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1900"/>
        </LocalPorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="netdis-ssdpsrv-out-udp"
                    Name="@firewallapi.dll,-32757"
                    Description="@firewallapi.dll,-32760"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="ssdpsrv"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="1900"/>
        </RemotePorts>
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="netdis-upnp-out-tcp"
                    Name="@firewallapi.dll,-32821"
                    Description="@firewallapi.dll,-32822"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="upnphost"
                    Enabled="True"
                    Action="AllowConnections">
        <RemoteAddresses DefaultGateway="False"
                         WINSServers="False"
                         DHCPServers="False"
                         DNSServers="False"
                         LocalSubnet="True"/>
      </FirewallRule>
      <FirewallRule Id="netdis-upnphost-in-tcp"
                    Name="@firewallapi.dll,-32761"
                    Description="@firewallapi.dll,-32764"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="2869"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="netdis-upnphost-out-tcp"
                    Name="@firewallapi.dll,-32765"
                    Description="@firewallapi.dll,-32768"
                    Group="@firewallapi.dll,-32752"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="failovercluster-cprepsrv-tcp-in"
                    Name="@cprepsrv.dll,-1023"
                    Description="@cprepsrv.dll,-1024"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\cprepsrv.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="failovercluster-dcom-tcp-in"
                    Name="@cprepsrv.dll,-1037"
                    Description="@cprepsrv.dll,-1038"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="failovercluster-eventlog-tcp-in"
                    Name="@cprepsrv.dll,-1025"
                    Description="@cprepsrv.dll,-1026"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="eventlog"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="failovercluster-services-tcp-in"
                    Name="@cprepsrv.dll,-1027"
                    Description="@cprepsrv.dll,-1028"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\services.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="failovercluster-smb-tcp-in"
                    Name="@cprepsrv.dll,-1021"
                    Description="@cprepsrv.dll,-1022"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="failovercluster-winmgmt-tcp-in"
                    Name="@cprepsrv.dll,-1019"
                    Description="@cprepsrv.dll,-1020"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="failoverclustering-clussvc-tcp-in"
                    Name="@cprepsrv.dll,-1005"
                    Description="@cprepsrv.dll,-1006"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\cluster\clussvc.exe"
                    Service="clussvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3343"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-clussvc-tcp-out"
                    Name="@cprepsrv.dll,-1007"
                    Description="@cprepsrv.dll,-1008"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\cluster\clussvc.exe"
                    Service="clussvc"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="3343"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-clussvcrpc-tcp-in"
                    Name="@cprepsrv.dll,-1013"
                    Description="@cprepsrv.dll,-1014"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\cluster\clussvc.exe"
                    Service="clussvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-icmpv4-er-out"
                    Name="@cprepsrv.dll,-1031"
                    Description="@cprepsrv.dll,-1032"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="0"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-icmpv4-erq-in"
                    Name="@cprepsrv.dll,-1029"
                    Description="@cprepsrv.dll,-1030"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="8"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-icmpv6-er-out"
                    Name="@cprepsrv.dll,-1035"
                    Description="@cprepsrv.dll,-1036"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="129"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-icmpv6-erq-in"
                    Name="@cprepsrv.dll,-1033"
                    Description="@cprepsrv.dll,-1034"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="128"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-netft-udp-in"
                    Name="@cprepsrv.dll,-1009"
                    Description="@cprepsrv.dll,-1010"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3343"/>
        </LocalPorts>
        <RemotePorts>
          <Port Value="3343"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-netft-udp-out"
                    Name="@cprepsrv.dll,-1011"
                    Description="@cprepsrv.dll,-1012"
                    Group="@cprepsrv.dll,-1000"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3343"/>
        </LocalPorts>
        <RemotePorts>
          <Port Value="3343"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-icmpv4-er-in"
                    Name="@cprepsrv.dll,-2003"
                    Description="@cprepsrv.dll,-2004"
                    Group="@cprepsrv.dll,-2000"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="0"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-icmpv4-erq-out"
                    Name="@cprepsrv.dll,-2001"
                    Description="@cprepsrv.dll,-2002"
                    Group="@cprepsrv.dll,-2000"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="8"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-icmpv6-er-in"
                    Name="@cprepsrv.dll,-2009"
                    Description="@cprepsrv.dll,-2010"
                    Group="@cprepsrv.dll,-2000"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="129"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="failoverclustering-icmpv6-erq-out"
                    Name="@cprepsrv.dll,-2007"
                    Description="@cprepsrv.dll,-2008"
                    Group="@cprepsrv.dll,-2000"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="128"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="lpdprinterserver-tcp-in"
                    Name="@%systemroot%\system32\lpdsvc.dll,-500"
                    Description="@%systemroot%\system32\lpdsvc.dll,-10500"
                    Group="@%systemroot%\system32\lpdsvc.dll,-500"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="lpdsvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="515"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="msmq-in-tcp"
                    Name="@mqutil.dll,-6102"
                    Description="@mqutil.dll,-6102"
                    Group="@mqutil.dll,-6102"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\mqsvc.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msmq-in-udp"
                    Name="@mqutil.dll,-6102"
                    Description="@mqutil.dll,-6102"
                    Group="@mqutil.dll,-6102"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\mqsvc.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msmq-out-tcp"
                    Name="@mqutil.dll,-6102"
                    Description="@mqutil.dll,-6102"
                    Group="@mqutil.dll,-6102"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\mqsvc.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msmq-out-udp"
                    Name="@mqutil.dll,-6102"
                    Description="@mqutil.dll,-6102"
                    Group="@mqutil.dll,-6102"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\mqsvc.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msmqdssvc-in-tcp"
                    Name="@mqutil.dll,-6008"
                    Description="@mqutil.dll,-6008"
                    Group="@mqutil.dll,-6008"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\mqdssvc.exe"
                    Service="mqdssvc"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msmqdssvc-in-udp"
                    Name="@mqutil.dll,-6008"
                    Description="@mqutil.dll,-6008"
                    Group="@mqutil.dll,-6008"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\mqdssvc.exe"
                    Service="mqdssvc"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msmqdssvc-out-tcp"
                    Name="@mqutil.dll,-6008"
                    Description="@mqutil.dll,-6008"
                    Group="@mqutil.dll,-6008"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\mqdssvc.exe"
                    Service="mqdssvc"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msmqdssvc-out-udp"
                    Name="@mqutil.dll,-6008"
                    Description="@mqutil.dll,-6008"
                    Group="@mqutil.dll,-6008"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\mqdssvc.exe"
                    Service="mqdssvc"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msmq-pgm-in"
                    Name="@mqutil.dll,-6102"
                    Description="@mqutil.dll,-6102"
                    Group="@mqutil.dll,-6102"
                    ProtocolKeyword="PGM"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="msmq-pgm-out"
                    Name="@mqutil.dll,-6102"
                    Description="@mqutil.dll,-6102"
                    Group="@mqutil.dll,-6102"
                    ProtocolKeyword="PGM"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-certificateservices-certsvc-dcom-in"
                    Name="@%systemroot%\system32\certsrv.exe,-55"
                    Description="@%systemroot%\system32\certsrv.exe,-56"
                    Group="@%systemroot%\system32\certsrv.exe,-61"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-certificateservices-certsvc-rpc-epmap-in"
                    Name="@%systemroot%\system32\certsrv.exe,-57"
                    Description="@%systemroot%\system32\certsrv.exe,-58"
                    Group="@%systemroot%\system32\certsrv.exe,-61"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-certificateservices-certsvc-rpc-np-in"
                    Name="@%systemroot%\system32\certsrv.exe,-51"
                    Description="@%systemroot%\system32\certsrv.exe,-52"
                    Group="@%systemroot%\system32\certsrv.exe,-61"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-certificateservices-certsvc-rpc-tcp-in"
                    Name="@%systemroot%\system32\certsrv.exe,-53"
                    Description="@%systemroot%\system32\certsrv.exe,-54"
                    Group="@%systemroot%\system32\certsrv.exe,-61"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\certsrv.exe"
                    Service="certsvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-certificateservices-certsvc-tcp-out"
                    Name="@%systemroot%\system32\certsrv.exe,-59"
                    Description="@%systemroot%\system32\certsrv.exe,-60"
                    Group="@%systemroot%\system32\certsrv.exe,-61"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\certsrv.exe"
                    Service="certsvc"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-certificateservices-ocspsvc-rpc-tcp-in"
                    Name="@%systemroot%\system32\ocspsvc.exe,-117"
                    Description="@%systemroot%\system32\ocspsvc.exe,-118"
                    Group="@%systemroot%\system32\ocspsvc.exe,-111"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\ocspsvc.exe"
                    Service="ocspsvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-onlinerevocationservices-ocspsvc-dcom-in"
                    Name="@%systemroot%\system32\ocspsvc.exe,-113"
                    Description="@%systemroot%\system32\ocspsvc.exe,-114"
                    Group="@%systemroot%\system32\ocspsvc.exe,-111"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-onlinerevocationservices-ocspsvc-tcp-out"
                    Name="@%systemroot%\system32\ocspsvc.exe,-115"
                    Description="@%systemroot%\system32\ocspsvc.exe,-116"
                    Group="@%systemroot%\system32\ocspsvc.exe,-111"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\ocspsvc.exe"
                    Service="ocspsvc"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="microsoft-windows-removablestoragemanagement-client-dcom-in"
                    Name="@%systemroot%\system32\rsmsink.exe,-711"
                    Description="@%systemroot%\system32\rsmsink.exe,-712"
                    Group="@%systemroot%\system32\rsmsink.exe,-700"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\rsmsink.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-removablestoragemanagement-client-rpcss-tcp-in"
                    Name="@%systemroot%\system32\rsmsink.exe,-713"
                    Description="@%systemroot%\system32\rsmsink.exe,-714"
                    Group="@%systemroot%\system32\rsmsink.exe,-700"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\rsmsink.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-removablestoragemanagement-server-dcom-in"
                    Name="@%systemroot%\system32\ntmssvc.dll,-611"
                    Description="@%systemroot%\system32\ntmssvc.dll,-612"
                    Group="@%systemroot%\system32\ntmssvc.dll,-600"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="ntmssvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="microsoft-windows-removablestoragemanagement-server-rpcss-tcp-in"
                    Name="@%systemroot%\system32\ntmssvc.dll,-613"
                    Description="@%systemroot%\system32\ntmssvc.dll,-614"
                    Group="@%systemroot%\system32\ntmssvc.dll,-600"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wcf-nettcpactivator-in-tcp-32bit"
                    Name="@%systemroot%\microsoft.net\framework\v3.0\windows communication foundation\servicemodelevents.dll,-2000"
                    Description="@%systemroot%\microsoft.net\framework\v3.0\windows communication foundation\servicemodelevents.dll,-2001"
                    Group="@%systemroot%\microsoft.net\framework\v3.0\windows communication foundation\servicemodelevents.dll,-2002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe"
                    Service="nettcpactivator"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="808"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="wcf-nettcpactivator-in-tcp-64bit"
                    Name="@%systemroot%\microsoft.net\framework64\v3.0\windows communication foundation\servicemodelevents.dll,-2000"
                    Description="@%systemroot%\microsoft.net\framework64\v3.0\windows communication foundation\servicemodelevents.dll,-2001"
                    Group="@%systemroot%\microsoft.net\framework64\v3.0\windows communication foundation\servicemodelevents.dll,-2002"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\microsoft.net\framework64\v3.0\windows communication foundation\smsvchost.exe"
                    Service="nettcpactivator"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="808"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="fsrm-remoteregistry-in (rpc)"
                    Name="@srm.dll,-6006"
                    Description="@srm.dll,-6007"
                    Group="@srm.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="remoteregistry"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="fsrm-rpcss-in (rpc-epmap)"
                    Name="@srm.dll,-6014"
                    Description="@srm.dll,-6015"
                    Group="@srm.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="fsrm-srmreports-in (rpc)"
                    Name="@srm.dll,-6012"
                    Description="@srm.dll,-6013"
                    Group="@srm.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\srmhost.exe"
                    Service="srmreports"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="fsrm-srmsvc-in (rpc)"
                    Name="@srm.dll,-6010"
                    Description="@srm.dll,-6011"
                    Group="@srm.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="srmsvc"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="fsrm-system-in (tcp-445)"
                    Name="@srm.dll,-6016"
                    Description="@srm.dll,-6017"
                    Group="@srm.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="fsrm-task-scheduler-in (rpc)"
                    Name="@srm.dll,-6008"
                    Description="@srm.dll,-6009"
                    Group="@srm.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="schedule"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="fsrm-wmi-async-in-tcp"
                    Name="@srm.dll,-6002"
                    Description="@srm.dll,-6003"
                    Group="@srm.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\wbem\unsecapp.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="fsrm-wmi-winmgmt-in-tcp"
                    Name="@srm.dll,-6004"
                    Description="@srm.dll,-6005"
                    Group="@srm.dll,-6001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="winmgmt"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="complusnetworkaccess-dcom-in"
                    Name="@svrmgrnc.dll,-481"
                    Description="@svrmgrnc.dll,-482"
                    Group="@svrmgrnc.dll,-480"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="remoteadmin-in-tcp"
                    Name="@firewallapi.dll,-29753"
                    Description="@firewallapi.dll,-29756"
                    Group="@firewallapi.dll,-29752"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="*"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="remoteadmin-np-in-tcp"
                    Name="@firewallapi.dll,-29757"
                    Description="@firewallapi.dll,-29760"
                    Group="@firewallapi.dll,-29752"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="remoteadmin-rpcss-in-tcp"
                    Name="@firewallapi.dll,-29765"
                    Description="@firewallapi.dll,-29768"
                    Group="@firewallapi.dll,-29752"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="windowsserverbackup-wbengine-in-tcp-noscope"
                    Name="@wbengine.exe,-107"
                    Description="@wbengine.exe,-109"
                    Group="@wbengine.exe,-106"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\wbengine.exe"
                    Service="wbengine"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="windowsserverbackup-wbengine-rpcss-in-tcp-noscope"
                    Name="@wbengine.exe,-108"
                    Description="@wbengine.exe,-110"
                    Group="@wbengine.exe,-106"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="rvm-rpcss-in-tcp"
                    Name="@firewallapi.dll,-34506"
                    Description="@firewallapi.dll,-34507"
                    Group="@firewallapi.dll,-34501"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="rvm-vds-in-tcp"
                    Name="@firewallapi.dll,-34502"
                    Description="@firewallapi.dll,-34503"
                    Group="@firewallapi.dll,-34501"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\vds.exe"
                    Service="vds"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="rvm-vdsldr-in-tcp"
                    Name="@firewallapi.dll,-34504"
                    Description="@firewallapi.dll,-34505"
                    Group="@firewallapi.dll,-34501"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\vdsldr.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="remoteeventlogsvc-in-tcp"
                    Name="@firewallapi.dll,-29253"
                    Description="@firewallapi.dll,-29256"
                    Group="@firewallapi.dll,-29252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="eventlog"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="remoteeventlogsvc-np-in-tcp"
                    Name="@firewallapi.dll,-29257"
                    Description="@firewallapi.dll,-29260"
                    Group="@firewallapi.dll,-29252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="remoteeventlogsvc-rpcss-in-tcp"
                    Name="@firewallapi.dll,-29265"
                    Description="@firewallapi.dll,-29268"
                    Group="@firewallapi.dll,-29252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="nps-npssvc-in-dcom"
                    Name="@ias.dll,-1109"
                    Description="@ias.dll,-1110"
                    Group="@ias.dll,-1100"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="135"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="nps-npssvc-in-rpc"
                    Name="@ias.dll,-1111"
                    Description="@ias.dll,-1112"
                    Group="@ias.dll,-1100"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\iashost.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="nps-npssvc-in-udp-1645"
                    Name="@ias.dll,-1101"
                    Description="@ias.dll,-1102"
                    Group="@ias.dll,-1100"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1645"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="nps-npssvc-in-udp-1646"
                    Name="@ias.dll,-1103"
                    Description="@ias.dll,-1104"
                    Group="@ias.dll,-1100"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1646"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="nps-npssvc-in-udp-1812"
                    Name="@ias.dll,-1105"
                    Description="@ias.dll,-1106"
                    Group="@ias.dll,-1100"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1812"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="nps-npssvc-in-udp-1813"
                    Name="@ias.dll,-1107"
                    Description="@ias.dll,-1108"
                    Group="@ias.dll,-1100"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1813"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="rras-gre-in"
                    Name="@firewallapi.dll,-33769"
                    Description="@firewallapi.dll,-33772"
                    Group="@firewallapi.dll,-33752"
                    ProtocolKeyword="GRE"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="rras-gre-out"
                    Name="@firewallapi.dll,-33773"
                    Description="@firewallapi.dll,-33776"
                    Group="@firewallapi.dll,-33752"
                    ProtocolKeyword="GRE"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="rras-l2tp-in-udp"
                    Name="@firewallapi.dll,-33753"
                    Description="@firewallapi.dll,-33756"
                    Group="@firewallapi.dll,-33752"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1701"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="rras-l2tp-out-udp"
                    Name="@firewallapi.dll,-33757"
                    Description="@firewallapi.dll,-33760"
                    Group="@firewallapi.dll,-33752"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="1701"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="rras-pptp-in-tcp"
                    Name="@firewallapi.dll,-33765"
                    Description="@firewallapi.dll,-33768"
                    Group="@firewallapi.dll,-33752"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="1723"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="rras-pptp-out-tcp"
                    Name="@firewallapi.dll,-33761"
                    Description="@firewallapi.dll,-33764"
                    Group="@firewallapi.dll,-33752"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <RemotePorts>
          <Port Value="1723"/>
        </RemotePorts>
      </FirewallRule>
      <FirewallRule Id="sstp-in-tcp"
                    Name="@sstpsvc.dll,-35002"
                    Description="@sstpsvc.dll,-35003"
                    Group="@sstpsvc.dll,-35001"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="443"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="remrras-in-dcom"
                    Name="@remrras.exe,-253"
                    Description="@remrras.exe,-304"
                    Group="@remrras.exe,-252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="remrras-in-rpc"
                    Name="@remrras.exe,-303"
                    Description="@remrras.exe,-254"
                    Group="@remrras.exe,-252"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\remrras.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="rqs-in-tcp"
                    Name="@rqs.exe,-203"
                    Description="@rqs.exe,-204"
                    Group="@rqs.exe,-202"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\rqs.exe"
                    Service="rqs"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="7250"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-icmp4-in"
                    Name="@ntdsmsg.dll,-1027"
                    Description="@ntdsmsg.dll,-1028"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Inbound"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="8"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="adds-icmp4-out"
                    Name="@ntdsmsg.dll,-1029"
                    Description="@ntdsmsg.dll,-1030"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="ICMP_V4"
                    Direction="Outbound"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="8"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="adds-icmp6-in"
                    Name="@ntdsmsg.dll,-1031"
                    Description="@ntdsmsg.dll,-1032"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Inbound"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="128"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="adds-icmp6-out"
                    Name="@ntdsmsg.dll,-1033"
                    Description="@ntdsmsg.dll,-1034"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="ICMP_V6"
                    Direction="Outbound"
                    Enabled="True"
                    Action="AllowConnections">
        <ICMPs>
          <ICMP Type="128"
                Code="*"/>
        </ICMPs>
      </FirewallRule>
      <FirewallRule Id="adds-ldap-tcp-in"
                    Name="@ntdsmsg.dll,-1002"
                    Description="@ntdsmsg.dll,-1015"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="389"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-ldap-udp-in"
                    Name="@ntdsmsg.dll,-1003"
                    Description="@ntdsmsg.dll,-1016"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="389"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-ldapgc-tcp-in"
                    Name="@ntdsmsg.dll,-1005"
                    Description="@ntdsmsg.dll,-1018"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3268"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-ldapgcsec-tcp-in"
                    Name="@ntdsmsg.dll,-1006"
                    Description="@ntdsmsg.dll,-1019"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="3269"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-ldapsec-tcp-in"
                    Name="@ntdsmsg.dll,-1004"
                    Description="@ntdsmsg.dll,-1017"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="636"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-nb-datagram-udp-in"
                    Name="@ntdsmsg.dll,-1011"
                    Description="@ntdsmsg.dll,-1024"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="138"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-np-tcp-in"
                    Name="@ntdsmsg.dll,-1010"
                    Description="@ntdsmsg.dll,-1023"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-np-udp-in"
                    Name="@ntdsmsg.dll,-1009"
                    Description="@ntdsmsg.dll,-1022"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="system"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="445"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-rpc-tcp-in"
                    Name="@ntdsmsg.dll,-1000"
                    Description="@ntdsmsg.dll,-1013"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="DynamicRPC"/>
      </FirewallRule>
      <FirewallRule Id="adds-rpcepmap-tcp-in"
                    Name="@ntdsmsg.dll,-1001"
                    Description="@ntdsmsg.dll,-1014"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Service="rpcss"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts SpecialPorts="RPCEndPointMapper"/>
      </FirewallRule>
      <FirewallRule Id="adds-tcp-out"
                    Name="@ntdsmsg.dll,-1007"
                    Description="@ntdsmsg.dll,-1020"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="TCP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="adds-udp-out"
                    Name="@ntdsmsg.dll,-1008"
                    Description="@ntdsmsg.dll,-1021"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="UDP"
                    Direction="Outbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections"/>
      <FirewallRule Id="w32time-ntp-udp-in"
                    Name="@ntdsmsg.dll,-1012"
                    Description="@ntdsmsg.dll,-1025"
                    Group="@ntdsmsg.dll,-1026"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\svchost.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="123"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-kerberos-password-tcp-in"
                    Name="@kdcsvc.dll,-1002"
                    Description="@kdcsvc.dll,-1006"
                    Group="@kdcsvc.dll,-1008"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="464"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-kerberos-password-udp-in"
                    Name="@kdcsvc.dll,-1003"
                    Description="@kdcsvc.dll,-1007"
                    Group="@kdcsvc.dll,-1008"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="464"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-kerberos-tcp-in"
                    Name="@kdcsvc.dll,-1000"
                    Description="@kdcsvc.dll,-1004"
                    Group="@kdcsvc.dll,-1008"
                    ProtocolKeyword="TCP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="88"/>
        </LocalPorts>
      </FirewallRule>
      <FirewallRule Id="adds-kerberos-udp-in"
                    Name="@kdcsvc.dll,-1001"
                    Description="@kdcsvc.dll,-1005"
                    Group="@kdcsvc.dll,-1008"
                    ProtocolKeyword="UDP"
                    Direction="Inbound"
                    Program="%systemroot%\system32\lsass.exe"
                    Enabled="True"
                    Action="AllowConnections">
        <LocalPorts>
          <Port Value="88"/>
        </LocalPorts>
      </FirewallRule>
    </FirewallRules>
  </Firewall>
</SCWKnowledgeBase>
