<?xml version="1.0" encoding="utf-8"?>
<!--  (c) 2006 Microsoft Corporation  -->
<policyDefinitions xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
  <policyNamespaces>
    <target prefix="credentialproviders" namespace="Microsoft.Policies.CredentialProviders" />
    <using prefix="windows" namespace="Microsoft.Policies.Windows" />
    <using prefix="logon" namespace="Microsoft.Policies.WindowsLogon" />
  </policyNamespaces>
  <resources minRequiredRevision="1.0" />
  <categories>
    <category name="Logon" displayName="$(string.Logon)">
      <parentCategory ref="logon:Logon" />
    </category>
  </categories>
  <policies>
    <policy name="DefaultLogonDomain" class="Machine" displayName="$(string.DefaultLogonDomain)" explainText="$(string.DefaultLogonDomain_Help)" presentation="$(presentation.DefaultLogonDomain)" key="Software\Microsoft\Windows\CurrentVersion\Policies\System">
      <parentCategory ref="logon:Logon" />
      <supportedOn ref="windows:SUPPORTED_WindowsVista" />
      <elements>
        <text id="DefaultLogonDomain_Message" valueName="DefaultLogonDomain" maxLength="4096" />
      </elements>
    </policy>
    <policy name="ExcludedCredentialProviders" class="Machine" displayName="$(string.ExcludedCredentialProviders)" explainText="$(string.ExcludedCredentialProviders_Help)" presentation="$(presentation.ExcludedCredentialProviders)" key="Software\Microsoft\Windows\CurrentVersion\Policies\System">
      <parentCategory ref="logon:Logon" />
      <supportedOn ref="windows:SUPPORTED_WindowsVista" />
      <elements>
        <text id="ExcludedCredentialProviders_Message" valueName="ExcludedCredentialProviders" maxLength="4096" />
      </elements>
    </policy>
    <policy name="AllowDomainPINLogon" class="Machine" displayName="$(string.AllowDomainPINLogon)" explainText="$(string.AllowDomainPINLogon_Help)" key="Software\Policies\Microsoft\Windows\System" valueName="AllowDomainPINLogon">
      <parentCategory ref="logon:Logon" />
      <supportedOn ref="windows:SUPPORTED_Windows8" />
      <enabledValue>
        <decimal value="1" />
      </enabledValue>
      <disabledValue>
        <decimal value="0" />
      </disabledValue>
    </policy>
    <policy name="BlockDomainPicturePassword" class="Machine" displayName="$(string.BlockDomainPicturePassword)" explainText="$(string.BlockDomainPicturePassword_Help)" key="Software\Policies\Microsoft\Windows\System" valueName="BlockDomainPicturePassword">
      <parentCategory ref="logon:Logon" />
      <supportedOn ref="windows:SUPPORTED_Windows8" />
      <enabledValue>
        <decimal value="1" />
      </enabledValue>
      <disabledValue>
        <decimal value="0" />
      </disabledValue>
    </policy>
    <policy name="AllowDomainDelayLock" class="Machine" displayName="$(string.AllowDomainDelayLock)" explainText="$(string.AllowDomainDelayLock_Help)" key="Software\Policies\Microsoft\Windows\System" valueName="AllowDomainDelayLock">
      <parentCategory ref="logon:Logon" />
      <supportedOn ref="windows:SUPPORTED_Windows8" />
      <enabledValue>
        <decimal value="1" />
      </enabledValue>
      <disabledValue>
        <decimal value="0" />
      </disabledValue>
    </policy>
    <policy name="DefaultCredentialProvider" class="Machine" displayName="$(string.DefaultCredentialProvider)" explainText="$(string.DefaultCredentialProvider_Help)" presentation="$(presentation.DefaultCredentialProvider)" key="Software\Policies\Microsoft\Windows\System">
      <parentCategory ref="logon:Logon" />
      <supportedOn ref="windows:SUPPORTED_Windows_10_0" />
      <elements>
        <text id="DefaultCredentialProvider_Message" valueName="DefaultCredentialProvider" maxLength="48" />
      </elements>
    </policy>
    <policy name="AllowSecurityKeySignIn" class="Machine" displayName="$(string.AllowSecurityKeySignIn)" explainText="$(string.AllowSecurityKeySignIn_Help)" key="Software\Policies\Microsoft\FIDO" valueName="EnableFIDODeviceLogon">
      <parentCategory ref="logon:Logon" />
      <supportedOn ref="windows:SUPPORTED_Windows_10_0_NOSERVER" />
      <enabledValue>
        <decimal value="1" />
      </enabledValue>
      <disabledValue>
        <decimal value="0" />
      </disabledValue>
    </policy>
  </policies>
</policyDefinitions>