MigXmlHelper.IsOSEarlierThan("NT","6.0.0.0") %CSIDL_APPDATA%\Microsoft\Protect [CREDHIST] %CSIDL_APPDATA%\Microsoft\Protect\* [Preferred] %PROFILESFOLDER%\LocalService\Application Data\Microsoft\Protect\* [*] %PROFILESFOLDER%\NetworkService\Application Data\Microsoft\Protect\* [*] MigXmlHelper.IsOSEarlierThan("NT","6.0.0.0") %CSIDL_APPDATA%\Microsoft\Protect\*[*]@*: rule to include the generated values under addObjects HKCU\Software\Microsoft\Windows NT\CurrentVersion\DPAPI\MigratedUsers\%USERSID%\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce [DPAPIKeyMig] @*: exclude the credhist and preferred files for migratable %CSIDL_APPDATA%\Microsoft\Protect [CREDHIST] %CSIDL_APPDATA%\Microsoft\Protect\* [Preferred] HKCU\Software\Microsoft\Windows NT\CurrentVersion\DPAPI\MigratedUsers\%USERSID%\UserDomain [%USERDOMAIN%] String 0000 HKCU\Software\Microsoft\Windows NT\CurrentVersion\DPAPI\MigratedUsers\%USERSID%\UserName [%USERNAME%] String 0000 HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce [DPAPIKeyMig] ExpandString 2500530079007300740065006d0052006f006f00740025005c00730079007300740065006d00330032005c00640070006100700069006d00690067002e0065007800650020002d00710075006900650074000000 Additional_Options\Windows_Core_Settings