%CSIDL_APPDATA%\Microsoft\Protect [CREDHIST] %CSIDL_APPDATA%\Microsoft\Protect\* [Preferred] %CSIDL_APPDATA%\Microsoft\Protect\*[*] %SYSTEMROOT%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Protect\* [*] %SYSTEMROOT%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Protect\* [*] %SYSTEMROOT%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Protect\* [*] %SYSTEMROOT%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Protect\* [*] %CSIDL_APPDATA%\Microsoft\Protect\*[*]@*: rule to include the generated values under addObjects HKCU\Software\Microsoft\Windows NT\CurrentVersion\DPAPI\MigratedUsers\%USERSID%\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce [DPAPIKeyMig] @*: exclude the credhist and preferred files for migratable %CSIDL_APPDATA%\Microsoft\Protect [CREDHIST] %CSIDL_APPDATA%\Microsoft\Protect\* [Preferred] %CSIDL_APPDATA%\Microsoft\Protect\*[*] MigXmlHelper.IsUpgrade() Additional_Options\Windows_Core_Settings