<xsd:element name="uac_state" substitutionGroup="oval-def:state">
<xsd:annotation>
<xsd:documentation>The uac_state element specifies the different settings that are available under User Access Control. A user access control test will reference a specific instance of this state that defines the exact settings that need to be evaluated. Please refer to the individual elements in the schema for more details about what each represents.</xsd:documentation>
</xsd:annotation>
<xsd:complexType>
<xsd:complexContent>
<xsd:extension base="oval-def:StateType">
<xsd:sequence>
<xsd:element name="admin_approval_mode" type="oval-def:EntityStateBoolType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Admin Approval Mode for the Built-in Administrator account.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="uacsteadminapprovalmode" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:uac_state/win-def:admin_approval_mode">
<sch:assert test="@datatype='boolean'">
<sch:value-of select="../@id" /> - datatype attribute for the admin_approval_mode entity of a uac_state should be 'boolean'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="elevation_prompt_admin" type="oval-def:EntityStateStringType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Behavior of the elevation prompt for administrators in Admin Approval Mode.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="uacstebehaviorelevationadmin" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:uac_state/win-def:elevation_prompt_admin">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the elevation_prompt_admin entity of a uac_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="elevation_prompt_standard" type="oval-def:EntityStateStringType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Behavior of the elevation prompt for standard users.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="uacsteelevationpromptstandard" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:uac_state/win-def:elevation_prompt_standard">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the elevation_prompt_standard entity of a uac_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="detect_installations" type="oval-def:EntityStateBoolType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Detect application installations and prompt for elevation.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="uacstedetectinstallations" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:uac_state/win-def:detect_installations">
<sch:assert test="@datatype='boolean'">
<sch:value-of select="../@id" /> - datatype attribute for the detect_installations entity of a uac_state should be 'boolean'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="elevate_signed_executables" type="oval-def:EntityStateBoolType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Only elevate executables that are signed and validated.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="uacsteelevatesignedexecutables" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:uac_state/win-def:elevate_signed_executables">
<sch:assert test="@datatype='boolean'">
<sch:value-of select="../@id" /> - datatype attribute for the elevate_signed_executables entity of a uac_state should be 'boolean'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="elevate_uiaccess" type="oval-def:EntityStateBoolType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Only elevate UIAccess applications that are installed in secure locations.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="uacsteelevateuiaccess" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:uac_state/win-def:elevate_uiaccess">
<sch:assert test="@datatype='boolean'">
<sch:value-of select="../@id" /> - datatype attribute for the elevate_uiaccess entity of a uac_state should be 'boolean'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="run_admins_aam" type="oval-def:EntityStateBoolType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Run all administrators in Admin Approval Mode.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="uacsterunadminsaam" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:uac_state/win-def:run_admins_aam">
<sch:assert test="@datatype='boolean'">
<sch:value-of select="../@id" /> - datatype attribute for the run_admins_aam entity of a uac_state should be 'boolean'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="secure_desktop" type="oval-def:EntityStateBoolType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Switch to the secure desktop when prompting for elevation.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="uacstesecuredesktop" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:uac_state/win-def:secure_desktop">
<sch:assert test="@datatype='boolean'">
<sch:value-of select="../@id" /> - datatype attribute for the secure_desktop entity of a uac_state should be 'boolean'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="virtualize_write_failures" type="oval-def:EntityStateBoolType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Virtualize file and registry write failures to per-user locations.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="uacstevirtualizewritefailures" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:uac_state/win-def:virtualize_write_failures">
<sch:assert test="@datatype='boolean'">
<sch:value-of select="../@id" /> - datatype attribute for the virtualize_write_failures entity of a uac_state should be 'boolean'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
</xsd:sequence>
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
</xsd:element>
|