---

**********************
Windows PowerShell transcript start
Start time: 20261021093739
Username: POLYMER\ad
RunAs User: POLYMER\ad
Configuration Name: 
Machine: PL-WS-000188 (Microsoft Windows NT 10.0.19045.0)
Host Application: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .\winlog.ps1 -RunAsAdministrator
Process ID: 10368
PSVersion: 5.1.19041.6456
PSEdition: Desktop
PSCompatibleVersions: 1.0, 2.0, 3.0, 4.0, 5.0, 5.1.19041.6456
BuildVersion: 10.0.19041.6456
CLRVersion: 4.0.30319.42000
WSManStackVersion: 3.0
PSRemotingProtocolVersion: 2.3
SerializationVersion: 1.1.0.1
**********************

========== 1. Питание ==========
























========== 2. Заставка текущего пользователя ==========

========== 3. Тайм-аут бездействия ==========
Обнаружен тайм-аут 900 секунд.
Параметр не изменён автоматически: проверьте доменную GPO.

========== 4. Применение политик ==========
Updating policy...

Computer Policy update has completed successfully.
Updating policy...

User Policy update has completed successfully.

========== 5. Проверка схемы и сна ==========
GUID схемы питания: 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c  (Высокая производительность)
GUID схемы питания: 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c  (Высокая производительность)В данной системе доступны следующие состояния спящего режима:
    Ждущий режим (S3)

Следующие состояния спящего режима недоступны в данной системе:
    Ждущий режим (S1)
        Системное встроенное ПО не поддерживает этот ждущий режим.

    Ждущий режим (S2)
        Системное встроенное ПО не поддерживает этот ждущий режим.

    Гибернация
        Режим гибернации не включен.

    Ждущий режим (простой S0 для пониженного энергопотребления)
        Системное встроенное ПО не поддерживает этот ждущий режим.

    Гибридный спящий режим
        Режим гибернации недоступен.

    Быстрый запуск
        Режим гибернации недоступен.

========== 6. Проверка тайм-аутов ==========
GUID схемы питания: 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c  (Высокая производительность)
  Псевдоним GUID: SCHEME_MIN
  GUID подгруппы: 238c9fa8-0aad-41ed-83f4-97be242c8f20  (Сон)
    Псевдоним GUID: SUB_SLEEP
    GUID настройки питания: 29f6c1db-86da-48c5-9fdb-f2b67b1f44da  (Сон после)
      Псевдоним GUID: STANDBYIDLE
      Минимальная возможная настройка: 0x00000000
      Максимальная возможная настройка: 0xffffffff
      Инкремент возможных настроек: 0x00000001
      Единицы возможных настроек: Сек.
    Текущий индекс настройки питания от сети: 0x00000000
    Текущий индекс настройки питания от батарей: 0x00000000

    GUID настройки питания: 94ac6d29-73ce-41a6-809f-6363ba21b47e  (Разрешить гибридный спящий режим)
      Псевдоним GUID: HYBRIDSLEEP
      Индекс возможной настройки: 000
      Понятное имя возможной настройки: Выкл
      Индекс возможной настройки: 001
      Понятное имя возможной настройки: Вкл
    Текущий индекс настройки питания от сети: 0x00000001
    Текущий индекс настройки питания от батарей: 0x00000001

    GUID настройки питания: 9d7815a6-7ee4-497e-8888-515a05f02364  (Гибернация после)
      Псевдоним GUID: HIBERNATEIDLE
      Минимальная возможная настройка: 0x00000000
      Максимальная возможная настройка: 0xffffffff
      Инкремент возможных настроек: 0x00000001
      Единицы возможных настроек: Сек.
    Текущий индекс настройки питания от сети: 0x00000000
    Текущий индекс настройки питания от батарей: 0x00000000

    GUID настройки питания: bd3b718a-0680-4d9d-8ab2-e1d2b4ac806d  (Разрешить таймеры пробуждения)
      Псевдоним GUID: RTCWAKE
      Индекс возможной настройки: 000
      Понятное имя возможной настройки: Отключить
      Индекс возможной настройки: 001
      Понятное имя возможной настройки: Включить
      Индекс возможной настройки: 002
      Понятное имя возможной настройки: Только важные таймеры пробуждения
    Текущий индекс настройки питания от сети: 0x00000000
    Текущий индекс настройки питания от батарей: 0x00000000
GUID схемы питания: 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c  (Высокая производительность)
  Псевдоним GUID: SCHEME_MIN
  GUID подгруппы: 0012ee47-9041-4b5d-9b77-535fba8b1442  (Жесткий диск)
    Псевдоним GUID: SUB_DISK
    GUID настройки питания: 6738e2c4-e8a5-4a42-b16a-e040e769756e  (Отключать жесткий диск через)
      Псевдоним GUID: DISKIDLE
      Минимальная возможная настройка: 0x00000000
      Максимальная возможная настройка: 0xffffffff
      Инкремент возможных настроек: 0x00000001
      Единицы возможных настроек: Сек.
    Текущий индекс настройки питания от сети: 0x00000000
    Текущий индекс настройки питания от батарей: 0x00000000
GUID схемы питания: 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c  (Высокая производительность)
  Псевдоним GUID: SCHEME_MIN
  GUID подгруппы: 7516b95f-f776-4464-8c53-06167f40cc99  (Экран)
    Псевдоним GUID: SUB_VIDEO
    GUID настройки питания: 3c0bc021-c8a8-4e07-a973-6b14cbcb2b7e  (Отключать экран через)
      Псевдоним GUID: VIDEOIDLE
      Минимальная возможная настройка: 0x00000000
      Максимальная возможная настройка: 0xffffffff
      Инкремент возможных настроек: 0x00000001
      Единицы возможных настроек: Сек.
    Текущий индекс настройки питания от сети: 0x00000000
    Текущий индекс настройки питания от батарей: 0x00000000

    GUID настройки питания: aded5e82-b909-4619-9949-f5d71dac0bcb  (Яркость экрана)
      Минимальная возможная настройка: 0x00000000
      Максимальная возможная настройка: 0x00000064
      Инкремент возможных настроек: 0x00000001
      Единицы возможных настроек: %
    Текущий индекс настройки питания от сети: 0x00000064
    Текущий индекс настройки питания от батарей: 0x00000064

    GUID настройки питания: f1fbfde2-a960-4165-9f88-50667911ce96  (Уровень яркости экрана в режиме уменьшенной яркости)
      Минимальная возможная настройка: 0x00000000
      Максимальная возможная настройка: 0x00000064
      Инкремент возможных настроек: 0x00000001
      Единицы возможных настроек: %
    Текущий индекс настройки питания от сети: 0x00000032
    Текущий индекс настройки питания от батарей: 0x00000032

    GUID настройки питания: fbd9aa66-9553-4097-ba44-ed6e9d65eab8  (Включить адаптивную регулировку яркости)
      Псевдоним GUID: ADAPTBRIGHT
      Индекс возможной настройки: 000
      Понятное имя возможной настройки: Выкл
      Индекс возможной настройки: 001
      Понятное имя возможной настройки: Вкл
    Текущий индекс настройки питания от сети: 0x00000000
    Текущий индекс настройки питания от батарей: 0x00000000
Неправильные параметры - используйте параметр "/?" для получения справки
GUID схемы питания: 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c  (Высокая производительность)
  Псевдоним GUID: SCHEME_MIN
  GUID подгруппы: 501a4d13-42af-4429-9fd1-a8218c268e20  (PCI Express)
    Псевдоним GUID: SUB_PCIEXPRESS
    GUID настройки питания: ee12f906-d277-404b-b6da-e5fa1a576df5  (Управление питанием состояния связи)
      Псевдоним GUID: ASPM
      Индекс возможной настройки: 000
      Понятное имя возможной настройки: Откл.
      Индекс возможной настройки: 001
      Понятное имя возможной настройки: Умеренное энергосбережение
      Индекс возможной настройки: 002
      Понятное имя возможной настройки: Максимальное энергосбережение
    Текущий индекс настройки питания от сети: 0x00000000
    Текущий индекс настройки питания от батарей: 0x00000000
GUID схемы питания: 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c  (Высокая производительность)
  Псевдоним GUID: SCHEME_MIN
  GUID подгруппы: 4f971e89-eebd-4455-a8de-9e59040e7347  (Кнопки питания и крышка)
    Псевдоним GUID: SUB_BUTTONS
    GUID настройки питания: a7066653-8d6c-40a8-910e-a1f54b84c7e5  (Кнопка питания меню "Пуск")
      Псевдоним GUID: UIBUTTON_ACTION
      Индекс возможной настройки: 000
      Понятное имя возможной настройки: Сон
      Индекс возможной настройки: 001
      Понятное имя возможной настройки: Гибернация
      Индекс возможной настройки: 002
      Понятное имя возможной настройки: Завершение работы
    Текущий индекс настройки питания от сети: 0x00000000
    Текущий индекс настройки питания от батарей: 0x00000000

========== 7. Проверка запросов питания ==========
DISPLAY:
Нет.

SYSTEM:
[DRIVER] \FileSystem\rdbss
Файл был открыт из сети. Имя файла: [\pl-sr-dc1.titan-polymer.local\sysvol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\User\Preferences\Drives\Drives.xml] Идентификатор процесса: [9100]
[DRIVER] \FileSystem\rdbss
Файл был открыт из сети. Имя файла: [\pl-sr-dc1.titan-polymer.local\sysvol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\User\Preferences\Drives\Drives.xml] Идентификатор процесса: [9100]
[DRIVER] \FileSystem\rdbss
Файл был открыт из сети. Имя файла: [\pl-sr-dc1.titan-polymer.local\sysvol\titan-polymer.local\Policies\{FE824831-B287-4719-BD16-0D0B2D6B577E}\User\Preferences\Drives\Drives.xml] Идентификатор процесса: [9100]
[DRIVER] \FileSystem\rdbss
Файл был открыт из сети. Имя файла: [\pl-sr-dc1.titan-polymer.local\sysvol\titan-polymer.local\Policies\{05BF67B3-34B0-443F-9FAD-C67F5CBC5969}\User\Preferences\Drives\Drives.xml] Идентификатор процесса: [9100]

AWAYMODE:
Нет.

ВЫПОЛНЕНИЕ:
Нет.

PERFBOOST:
Нет.

ACTIVELOCKSCREEN:
Нет.

========== 8. Проверка блокировки ==========


InactivityTimeoutSecs : 900





ScreenSaveActive    : 0
ScreenSaverIsSecure : 0
ScreenSaveTimeOut   : 0
PSPath              : Microsoft.PowerShell.Core\Registry::HKEY_CURRENT_USER\Control Panel\Desktop
PSParentPath        : Microsoft.PowerShell.Core\Registry::HKEY_CURRENT_USER\Control Panel
PSChildName         : Desktop
PSDrive             : HKCU
PSProvider          : Microsoft.PowerShell.Core\Registry




========== 9. Проверка обновлений Windows ==========

Name      Status StartType
----      ------ ---------
UsoSvc   Running Automatic
wuauserv Running    Manual


HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU - отдельные параметры не заданы

HKLM:\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings


ActiveHoursEnd                                   : 17
ActiveHoursStart                                 : 8
AllowAutoWindowsUpdateDownloadOverMeteredNetwork : 0
ExcludeWUDriversInQualityUpdate                  : 0
FlightCommitted                                  : 0
IsExpedited                                      : 0
LastToastAction                                  : 178
UxOption                                         : 0
InsiderProgramEnabled                            : 0
SmartActiveHoursSuggestionState                  : 0
SmartActiveHoursTimestamp                        : 134294119076535481
SmartActiveHoursStart                            : 8
SmartActiveHoursEnd                              : 17
PSPath                                           : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings
PSParentPath                                     : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX
PSChildName                                      : Settings
PSDrive                                          : HKLM
PSProvider                                       : Microsoft.PowerShell.Core\Registry




========== 10. Последние перезагрузки ==========


TimeCreated  : 20.10.2026 18:22:27
Id           : 6005
ProviderName : EventLog
Message      : Запущена служба журнала событий.

TimeCreated  : 20.10.2026 18:18:15
Id           : 6006
ProviderName : EventLog
Message      : Служба журнала событий остановлена.

TimeCreated  : 20.10.2026 18:18:01
Id           : 1074
ProviderName : User32
Message      : The process C:\Windows\system32\svchost.exe (PL-WS-000188) has initiated the Перезапустить of computer PL-WS-000188 on behalf of user NT AUTHORITY\СИСТЕМА for the following reason: Операционная система: Установка пакета обновления (Запланирован
                Reason Code: 0x80020010
                Shutdown Type: Перезапустить
                Comment:

TimeCreated  : 20.10.2026 9:56:57
Id           : 6005
ProviderName : EventLog
Message      : Запущена служба журнала событий.

TimeCreated  : 20.10.2026 9:56:43
Id           : 6006
ProviderName : EventLog
Message      : Служба журнала событий остановлена.

TimeCreated  : 20.10.2026 9:56:41
Id           : 1074
ProviderName : User32
Message      : The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-M3CPKGJ) has initiated the Перезапустить of computer PL-WS-000188 on behalf of user DESKTOP-M3CPKGJ\ad for the following reason: Другое (Незапланированное)
                Reason Code: 0x0
                Shutdown Type: Перезапустить
                Comment:

TimeCreated  : 19.10.2026 17:03:56
Id           : 6005
ProviderName : EventLog
Message      : Запущена служба журнала событий.

TimeCreated  : 19.10.2026 17:03:37
Id           : 6006
ProviderName : EventLog
Message      : Служба журнала событий остановлена.

TimeCreated  : 19.10.2026 17:03:32
Id           : 1074
ProviderName : User32
Message      : The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-M3CPKGJ) has initiated the Перезапустить of computer DESKTOP-M3CPKGJ on behalf of user DESKTOP-M3CPKGJ\ad for the following reason: Другое (Незапланированное)
                Reason Code: 0x0
                Shutdown Type: Перезапустить
                Comment:

TimeCreated  : 19.10.2026 15:00:30
Id           : 6005
ProviderName : EventLog
Message      : Запущена служба журнала событий.

TimeCreated  : 19.10.2026 15:00:14
Id           : 6006
ProviderName : EventLog
Message      : Служба журнала событий остановлена.

TimeCreated  : 19.10.2026 15:00:09
Id           : 1074
ProviderName : User32
Message      : The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-M3CPKGJ) has initiated the Перезапустить of computer DESKTOP-M3CPKGJ on behalf of user DESKTOP-M3CPKGJ\ad for the following reason: Другое (Незапланированное)
                Reason Code: 0x0
                Shutdown Type: Перезапустить
                Comment:

TimeCreated  : 19.10.2026 14:39:24
Id           : 6005
ProviderName : EventLog
Message      : Запущена служба журнала событий.

TimeCreated  : 19.10.2026 14:39:05
Id           : 6006
ProviderName : EventLog
Message      : Служба журнала событий остановлена.

TimeCreated  : 19.10.2026 14:38:56
Id           : 1074
ProviderName : User32
Message      : The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-M3CPKGJ) has initiated the Перезапустить of computer DESKTOP-M3CPKGJ on behalf of user DESKTOP-M3CPKGJ\ad for the following reason: Другое (Незапланированное)
                Reason Code: 0x0
                Shutdown Type: Перезапустить
                Comment:




========== 11. Отчёт групповых политик ==========

Отчёт: C:\ProgramData\AlwaysOn-gpresult.html

========== 12. Завершение ==========
Настройка и диагностика завершены.
Журнал: C:\ProgramData\AlwaysOn-setup.log
Обновления Windows не отключались.
Доменная политика может переопределять локальные параметры.
**********************
Windows PowerShell transcript end
End time: 20261021093756
**********************

<script id="data-island" type="application/xml"><xml id="RsopDataIslands"><MainSection xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <Label Name="ComponentStatus_EventDescription">
    <ValueText>Описание события</ValueText>
  </Label>
  <Label Name="ComponentStatus_EventTime">
    <ValueText>Время события</ValueText>
  </Label>
  <Label Name="ComponentStatus_DomainControllerName">
    <ValueText>Имя контроллера домена</ValueText>
  </Label>
  <Label Name="ComponentStatus_EventXml">
    <ValueText>XML события</ValueText>
  </Label>
  <Label Name="ComponentStatus_EventId">
    <ValueText>Код события</ValueText>
  </Label>
  <Label Name="ComponentStatus_EventDetails">
    <ValueText>Сведения о событии</ValueText>
  </Label>
  <Label Name="ComponentStatus_ExtensionsProcessed">
    <ValueText>Обработаны следующие расширения:</ValueText>
  </Label>
  <Label Name="ComponentStatus_ExtensionName">
    <ValueText>Имя</ValueText>
  </Label>
  <Label Name="ComponentStatus_SlowLinkThreshold">
    <ValueText>Порог медленного соединения</ValueText>
  </Label>
  <Label Name="ComponentStatus_LoopbackMode">
    <ValueText>Режим замыкания на себя</ValueText>
  </Label>
  <Label Name="ComponentStatus_ProcessingTrigger">
    <ValueText>Триггер обработки</ValueText>
  </Label>
  <Label Name="Warning_DataNotFound">
    <ValueText>Данные не найдены</ValueText>
  </Label>
  <Label Name="ComponentStatus_DomainControllerIP">
    <ValueText>IP-адрес контроллера домена</ValueText>
  </Label>
  <Label Name="ComponentStatus_RefreshMessage">
    <ValueText>Обновление политики выполнено, время завершения:</ValueText>
  </Label>
  <Label Name="ComponentStatus_Details">
    <ValueText>Подробно</ValueText>
  </Label>
  <Label Name="ComponentStatus_TotalProcessingTime">
    <ValueText>Всего</ValueText>
  </Label>
  <Label Name="ComponentStatus_LinkSpeed">
    <ValueText>Скорость линии</ValueText>
  </Label>
  <Label Name="ComponentStatus_UserProcessingDetails">
    <ValueText>Сведения об обработке пользователя</ValueText>
  </Label>
  <Label Name="ComponentStatus_ComputerProcessingDetails">
    <ValueText>Сведения об обработке компьютера</ValueText>
  </Label>
  <Label Name="ComponentStatus_TimeTaken">
    <ValueText>Заняло времени</ValueText>
  </Label>
  <Label Name="ComponentStatus_ProcessingType">
    <ValueText>Тип обработки</ValueText>
  </Label>
  <Label Name="ComponentStatus_GPEvents">
    <ValueText>События групповой политики</ValueText>
  </Label>
  <ComputerPolicySection>
    <PolicyEventsDetails>
      <SinglePassEventsDetails ActivityId="{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}" ProcessingTrigger="Вручную" ProcessingAppMode="Фоновый" LinkSpeedInKbps="28675 кбит/с" SlowLinkThresholdInKbps="500 кбит/с" DomainControllerName="pl-sr-dc1.titan-polymer.local" DomainControllerIPAddress="192.168.70.23" PolicyProcessingMode="Нет" PolicyElapsedTime="519 мс" ErrorCount="0" WarningCount="0">
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4004&lt;/EventID&gt;&lt;Version&gt;1&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2659542Z'/&gt;&lt;EventRecordID&gt;220285&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyActivityId'&gt;{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}&lt;/Data&gt;&lt;Data Name='PrincipalSamName'&gt;POLYMER\PL-WS-000188$&lt;/Data&gt;&lt;Data Name='IsMachine'&gt;1&lt;/Data&gt;&lt;Data Name='IsDomainJoined'&gt;true&lt;/Data&gt;&lt;Data Name='IsBackgroundProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsAsyncProcessing'&gt;false&lt;/Data&gt;&lt;Data Name='IsServiceRestart'&gt;false&lt;/Data&gt;&lt;Data Name='ReasonForSyncProcessing'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4004</EventId>
          <EventDescription>Starting manual processing of policy for computer POLYMER\PL-WS-000188$. 
Activity id: {8cb7dbe4-26fb-42a4-8242-0e0dd992e008}</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5340&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2675953Z'/&gt;&lt;EventRecordID&gt;220286&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyApplicationMode'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5340</EventId>
          <EventDescription>The Group Policy processing mode is Background.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2693861Z'/&gt;&lt;EventRecordID&gt;220287&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4114&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Attempting to retrieve the account information.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2694032Z'/&gt;&lt;EventRecordID&gt;220288&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4117&lt;/Data&gt;&lt;Data Name='Parameter'&gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system call to get account information. 
</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2795633Z'/&gt;&lt;EventRecordID&gt;220289&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4118&lt;/Data&gt;&lt;Data Name='Parameter'&gt;CN=PL-WS-000188,CN=Computers,DC=titan-polymer,DC=local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system call to get account information completed. 
CN=PL-WS-000188,CN=Computers,DC=titan-polymer,DC=local
The call completed in 0 milliseconds.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2795677Z'/&gt;&lt;EventRecordID&gt;220290&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4115&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Retrieved account information.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4326&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2797128Z'/&gt;&lt;EventRecordID&gt;220291&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4326</EventId>
          <EventDescription>Group Policy is trying to discover the Domain Controller information.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2797139Z'/&gt;&lt;EventRecordID&gt;220292&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4096&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Retrieving Domain Controller details.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2826981Z'/&gt;&lt;EventRecordID&gt;220293&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4119&lt;/Data&gt;&lt;Data Name='Parameter'&gt;pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making LDAP calls to connect and bind to Active Directory. 
pl-sr-dc1.titan-polymer.local</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2886399Z'/&gt;&lt;EventRecordID&gt;220294&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;16&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4120&lt;/Data&gt;&lt;Data Name='Parameter'&gt;pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The LDAP call to connect and bind to Active Directory completed. 
pl-sr-dc1.titan-polymer.local
The call completed in 16 milliseconds.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5308&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2886476Z'/&gt;&lt;EventRecordID&gt;220295&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DCName'&gt;pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;Data Name='DCIPAddress'&gt;192.168.70.23&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5308</EventId>
          <EventDescription>Domain Controller details: 
	Domain Controller Name : pl-sr-dc1.titan-polymer.local
	Domain Controller IP Address : 192.168.70.23</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5326&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2886507Z'/&gt;&lt;EventRecordID&gt;220296&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DCDiscoveryTimeInMilliSeconds'&gt;16&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5326</EventId>
          <EventDescription>Group Policy successfully discovered the Domain Controller in 16 milliseconds.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5309&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2901714Z'/&gt;&lt;EventRecordID&gt;220297&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='MachineRole'&gt;2&lt;/Data&gt;&lt;Data Name='NetworkName'&gt;titan-polymer.local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5309</EventId>
          <EventDescription>Computer details: 
	Computer role : 2
	Network name : titan-polymer.local</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5310&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2901736Z'/&gt;&lt;EventRecordID&gt;220298&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PrincipalCNName'&gt;CN=PL-WS-000188,CN=Computers,DC=titan-polymer,DC=local&lt;/Data&gt;&lt;Data Name='PrincipalDomainName'&gt;titan-polymer.local&lt;/Data&gt;&lt;Data Name='DCName'&gt;\\pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;Data Name='DCDomainName'&gt;titan-polymer.local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5310</EventId>
          <EventDescription>Account details: 
	Account Name : CN=PL-WS-000188,CN=Computers,DC=titan-polymer,DC=local
	Account Domain Name : titan-polymer.local
	DC Name : \\pl-sr-dc1.titan-polymer.local
	DC Domain Name : titan-polymer.local</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5311&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2934821Z'/&gt;&lt;EventRecordID&gt;220299&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyProcessingMode'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5311</EventId>
          <EventDescription>The loopback policy processing mode is "No loopback mode".</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4126&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2934834Z'/&gt;&lt;EventRecordID&gt;220300&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;true&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4126</EventId>
          <EventDescription>Group Policy receiving applicable GPOs from the domain controller.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4257&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.2949284Z'/&gt;&lt;EventRecordID&gt;220301&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;true&lt;/Data&gt;&lt;Data Name='IsBackgroundProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsAsyncProcessing'&gt;true&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4257</EventId>
          <EventDescription>Starting to download policies.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5327&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.3776905Z'/&gt;&lt;EventRecordID&gt;220302&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='NetworkBandwidthInKbps'&gt;3584423&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5327</EventId>
          <EventDescription>Estimated network bandwidth on one of the connections: 3584423 kbps.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5314&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.3788824Z'/&gt;&lt;EventRecordID&gt;220303&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='BandwidthInkbps'&gt;28675&lt;/Data&gt;&lt;Data Name='IsSlowLink'&gt;false&lt;/Data&gt;&lt;Data Name='ThresholdInkbps'&gt;500&lt;/Data&gt;&lt;Data Name='PolicyApplicationMode'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='LinkDescription'&gt;%%4113&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5314</EventId>
          <EventDescription>A fast link was detected. The Estimated bandwidth is 28675 kbps. The slow link threshold is 500 kbps.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.3789253Z'/&gt;&lt;EventRecordID&gt;220304&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4131&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\sysvol\titan-polymer.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system calls to access specified file. 
\\titan-polymer.local\sysvol\titan-polymer.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.3903163Z'/&gt;&lt;EventRecordID&gt;220305&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4132&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\sysvol\titan-polymer.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system calls to access specified file completed. 
\\titan-polymer.local\sysvol\titan-polymer.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini
The call completed in 0 milliseconds.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5257&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.3903581Z'/&gt;&lt;EventRecordID&gt;220306&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;true&lt;/Data&gt;&lt;Data Name='PolicyDownloadTimeElapsedInMilliseconds'&gt;94&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5257</EventId>
          <EventDescription>Successfully completed downloading policies.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4216&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.3909486Z'/&gt;&lt;EventRecordID&gt;220307&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;true&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4216</EventId>
          <EventDescription>Starting to save policies to the local datastore.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5216&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4411708Z'/&gt;&lt;EventRecordID&gt;220308&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;true&lt;/Data&gt;&lt;Data Name='SaveToCacheTimeElapsedInMilliseconds'&gt;62&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5216</EventId>
          <EventDescription>Successfully saved policies to the local datastore.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5126&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4411728Z'/&gt;&lt;EventRecordID&gt;220309&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;true&lt;/Data&gt;&lt;Data Name='IsBackgroundProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsAsyncProcessing'&gt;false&lt;/Data&gt;&lt;Data Name='NumberOfGPOsDownloaded'&gt;1&lt;/Data&gt;&lt;Data Name='NumberOfGPOsApplicable'&gt;0&lt;/Data&gt;&lt;Data Name='GPODownloadTimeElapsedInMilliseconds'&gt;156&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5126</EventId>
          <EventDescription>Group Policy successfully got applicable GPOs from the domain controller.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5312&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4414787Z'/&gt;&lt;EventRecordID&gt;220310&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DescriptionString'&gt;Default Domain Policy
&lt;/Data&gt;&lt;Data Name='GPOInfoList'&gt;&amp;lt;GPO ID="{31B2F340-016D-11D2-945F-00C04FB984F9}"&amp;gt;&amp;lt;Name&amp;gt;Default Domain Policy&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;1900573&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;LDAP://DC=titan-polymer,DC=local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;\\titan-polymer.local\sysvol\titan-polymer.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine&amp;lt;/FSPath&amp;gt;&amp;lt;Extensions&amp;gt;[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]&amp;lt;/Extensions&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5312</EventId>
          <EventDescription>List of applicable Group Policy objects: 

Default Domain Policy
</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5313&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4415133Z'/&gt;&lt;EventRecordID&gt;220311&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DescriptionString'&gt;Local Group Policy
	Не применяется (пусто)
&lt;/Data&gt;&lt;Data Name='GPOInfoList'&gt;&amp;lt;GPO ID="Local Group Policy"&amp;gt;&amp;lt;Name&amp;gt;Local Group Policy&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;0&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;Local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;C:\Windows\System32\GroupPolicy\Machine&amp;lt;/FSPath&amp;gt;&amp;lt;Reason&amp;gt;NOTAPPLIED-EMPTY&amp;lt;/Reason&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5313</EventId>
          <EventDescription>The following Group Policy objects were not applicable because they were filtered out : 

Local Group Policy
	Не применяется (пусто)
</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4637379Z'/&gt;&lt;EventRecordID&gt;220312&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4161&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Checking for Group Policy client extensions that are not part of the system.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4638338Z'/&gt;&lt;EventRecordID&gt;220313&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4163&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Service configuration update to standalone is not required and will be skipped.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4638343Z'/&gt;&lt;EventRecordID&gt;220314&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4165&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Finished checking for non-system extensions.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4016&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4640097Z'/&gt;&lt;EventRecordID&gt;220315&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='CSEExtensionId'&gt;{35378eac-683f-11d2-a89a-00c04fbbcfa2}&lt;/Data&gt;&lt;Data Name='CSEExtensionName'&gt;Реестр&lt;/Data&gt;&lt;Data Name='IsExtensionAsyncProcessing'&gt;false&lt;/Data&gt;&lt;Data Name='IsGPOListChanged'&gt;true&lt;/Data&gt;&lt;Data Name='GPOListStatusString'&gt;%%4102&lt;/Data&gt;&lt;Data Name='DescriptionString'&gt;Default Domain Policy
&lt;/Data&gt;&lt;Data Name='ApplicableGPOList'&gt;&amp;lt;GPO ID="{31B2F340-016D-11D2-945F-00C04FB984F9}"&amp;gt;&amp;lt;Name&amp;gt;Default Domain Policy&amp;lt;/Name&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4016</EventId>
          <EventDescription>Starting Реестр Extension Processing. 

List of applicable Group Policy objects: (Changes were detected.)

Default Domain Policy
</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5016&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;2&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4843339Z'/&gt;&lt;EventRecordID&gt;220316&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='CSEElaspedTimeInMilliSeconds'&gt;15&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='CSEExtensionName'&gt;Реестр&lt;/Data&gt;&lt;Data Name='CSEExtensionId'&gt;{35378eac-683f-11d2-a89a-00c04fbbcfa2}&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5016</EventId>
          <EventDescription>Completed Реестр Extension Processing in 15 milliseconds.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4016&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.4981209Z'/&gt;&lt;EventRecordID&gt;220317&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='CSEExtensionId'&gt;{827d319e-6eac-11d2-a4ea-00c04f79f83a}&lt;/Data&gt;&lt;Data Name='CSEExtensionName'&gt;Security&lt;/Data&gt;&lt;Data Name='IsExtensionAsyncProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsGPOListChanged'&gt;true&lt;/Data&gt;&lt;Data Name='GPOListStatusString'&gt;%%4102&lt;/Data&gt;&lt;Data Name='DescriptionString'&gt;Default Domain Policy
&lt;/Data&gt;&lt;Data Name='ApplicableGPOList'&gt;&amp;lt;GPO ID="{31B2F340-016D-11D2-945F-00C04FB984F9}"&amp;gt;&amp;lt;Name&amp;gt;Default Domain Policy&amp;lt;/Name&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4016</EventId>
          <EventDescription>Starting Security Extension Processing. 

List of applicable Group Policy objects: (Changes were detected.)

Default Domain Policy
</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5016&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;2&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.7723264Z'/&gt;&lt;EventRecordID&gt;220318&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='CSEElaspedTimeInMilliSeconds'&gt;281&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='CSEExtensionName'&gt;Security&lt;/Data&gt;&lt;Data Name='CSEExtensionId'&gt;{827d319e-6eac-11d2-a4ea-00c04f79f83a}&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5016</EventId>
          <EventDescription>Completed Security Extension Processing in 281 milliseconds.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;1502&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x8000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.7838720Z'/&gt;&lt;EventRecordID&gt;65562&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;System&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='SupportInfo1'&gt;1&lt;/Data&gt;&lt;Data Name='SupportInfo2'&gt;4427&lt;/Data&gt;&lt;Data Name='ProcessingMode'&gt;0&lt;/Data&gt;&lt;Data Name='ProcessingTimeInMilliseconds'&gt;516&lt;/Data&gt;&lt;Data Name='DCName'&gt;\\pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;Data Name='NumberOfGroupPolicyObjects'&gt;1&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>1502</EventId>
          <EventDescription>The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;8004&lt;/EventID&gt;&lt;Version&gt;1&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;2&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-21T06:37:40.7850634Z'/&gt;&lt;EventRecordID&gt;220319&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{8cb7dbe4-26fb-42a4-8242-0e0dd992e008}'/&gt;&lt;Execution ProcessID='9100' ThreadID='8896'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyElaspedTimeInSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='PrincipalSamName'&gt;POLYMER\PL-WS-000188$&lt;/Data&gt;&lt;Data Name='IsMachine'&gt;1&lt;/Data&gt;&lt;Data Name='IsConnectivityFailure'&gt;false&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>8004</EventId>
          <EventDescription>Completed manual processing of policy for computer POLYMER\PL-WS-000188$ in 0 seconds.</EventDescription>
          <EventTime>21.10.2026 9:37:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <ExtensionProcessingTime>
          <ExtensionName>Реестр</ExtensionName>
          <ExtensionGuid>{35378eac-683f-11d2-a89a-00c04fbbcfa2}</ExtensionGuid>
          <ElapsedTime>15 мс</ElapsedTime>
          <ProcessedTime>21.10.2026 9:37:40</ProcessedTime>
        </ExtensionProcessingTime>
        <ExtensionProcessingTime>
          <ExtensionName>Security</ExtensionName>
          <ExtensionGuid>{827d319e-6eac-11d2-a4ea-00c04f79f83a}</ExtensionGuid>
          <ElapsedTime>281 мс</ElapsedTime>
          <ProcessedTime>21.10.2026 9:37:40</ProcessedTime>
        </ExtensionProcessingTime>
        <ExtensionProcessingTime>
          <ExtensionName>Group Policy Infrastructure</ExtensionName>
          <ExtensionGuid>{00000000-0000-0000-0000-000000000000}</ExtensionGuid>
          <ElapsedTime>223 мс</ElapsedTime>
          <ProcessedTime>21.10.2026 9:37:40</ProcessedTime>
        </ExtensionProcessingTime>
      </SinglePassEventsDetails>
    </PolicyEventsDetails>
  </ComputerPolicySection>
  <UserPolicySection>
    <PolicyEventsDetails>
      <SinglePassEventsDetails ActivityId="{ff261987-0156-43e5-89ff-f292f136af9a}" ProcessingTrigger="Вход в систему" ProcessingAppMode="Синхронный переднего плана" LinkSpeedInKbps="223314 кбит/с" SlowLinkThresholdInKbps="500 кбит/с" DomainControllerName="pl-sr-dc1.titan-polymer.local" DomainControllerIPAddress="192.168.70.23" PolicyProcessingMode="Нет" PolicyElapsedTime="458 мс" ErrorCount="0" WarningCount="0">
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4001&lt;/EventID&gt;&lt;Version&gt;1&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7714166Z'/&gt;&lt;EventRecordID&gt;217687&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyActivityId'&gt;{ff261987-0156-43e5-89ff-f292f136af9a}&lt;/Data&gt;&lt;Data Name='PrincipalSamName'&gt;POLYMER\ad&lt;/Data&gt;&lt;Data Name='IsMachine'&gt;0&lt;/Data&gt;&lt;Data Name='IsDomainJoined'&gt;true&lt;/Data&gt;&lt;Data Name='IsBackgroundProcessing'&gt;false&lt;/Data&gt;&lt;Data Name='IsAsyncProcessing'&gt;false&lt;/Data&gt;&lt;Data Name='IsServiceRestart'&gt;false&lt;/Data&gt;&lt;Data Name='ReasonForSyncProcessing'&gt;1&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4001</EventId>
          <EventDescription>Starting user logon Policy processing for POLYMER\ad. 
Activity id: {ff261987-0156-43e5-89ff-f292f136af9a}</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5340&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7727631Z'/&gt;&lt;EventRecordID&gt;217688&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyApplicationMode'&gt;1&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5340</EventId>
          <EventDescription>The Group Policy processing mode is Foreground synchronous.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7811874Z'/&gt;&lt;EventRecordID&gt;217689&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4114&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Attempting to retrieve the account information.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7811900Z'/&gt;&lt;EventRecordID&gt;217690&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4117&lt;/Data&gt;&lt;Data Name='Parameter'&gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system call to get account information. 
</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7812187Z'/&gt;&lt;EventRecordID&gt;217691&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4118&lt;/Data&gt;&lt;Data Name='Parameter'&gt;CN=ad,OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system call to get account information completed. 
CN=ad,OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local
The call completed in 0 milliseconds.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7812196Z'/&gt;&lt;EventRecordID&gt;217692&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4115&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Retrieved account information.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4326&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7816661Z'/&gt;&lt;EventRecordID&gt;217693&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4326</EventId>
          <EventDescription>Group Policy is trying to discover the Domain Controller information.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7816670Z'/&gt;&lt;EventRecordID&gt;217694&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4096&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Retrieving Domain Controller details.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7837356Z'/&gt;&lt;EventRecordID&gt;217695&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4119&lt;/Data&gt;&lt;Data Name='Parameter'&gt;pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making LDAP calls to connect and bind to Active Directory. 
pl-sr-dc1.titan-polymer.local</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7871038Z'/&gt;&lt;EventRecordID&gt;217696&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4120&lt;/Data&gt;&lt;Data Name='Parameter'&gt;pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The LDAP call to connect and bind to Active Directory completed. 
pl-sr-dc1.titan-polymer.local
The call completed in 0 milliseconds.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5308&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7871062Z'/&gt;&lt;EventRecordID&gt;217697&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DCName'&gt;pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;Data Name='DCIPAddress'&gt;192.168.70.23&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5308</EventId>
          <EventDescription>Domain Controller details: 
	Domain Controller Name : pl-sr-dc1.titan-polymer.local
	Domain Controller IP Address : 192.168.70.23</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5326&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7871072Z'/&gt;&lt;EventRecordID&gt;217698&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DCDiscoveryTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5326</EventId>
          <EventDescription>Group Policy successfully discovered the Domain Controller in 0 milliseconds.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5309&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7871092Z'/&gt;&lt;EventRecordID&gt;217699&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='MachineRole'&gt;2&lt;/Data&gt;&lt;Data Name='NetworkName'&gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5309</EventId>
          <EventDescription>Computer details: 
	Computer role : 2
	Network name : </EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5310&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7871103Z'/&gt;&lt;EventRecordID&gt;217700&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PrincipalCNName'&gt;CN=ad,OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local&lt;/Data&gt;&lt;Data Name='PrincipalDomainName'&gt;TITAN-POLYMER.LOCAL&lt;/Data&gt;&lt;Data Name='DCName'&gt;\\pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;Data Name='DCDomainName'&gt;TITAN-POLYMER.LOCAL&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5310</EventId>
          <EventDescription>Account details: 
	Account Name : CN=ad,OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local
	Account Domain Name : TITAN-POLYMER.LOCAL
	DC Name : \\pl-sr-dc1.titan-polymer.local
	DC Domain Name : TITAN-POLYMER.LOCAL</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5311&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7902121Z'/&gt;&lt;EventRecordID&gt;217701&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyProcessingMode'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5311</EventId>
          <EventDescription>The loopback policy processing mode is "No loopback mode".</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4126&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7902140Z'/&gt;&lt;EventRecordID&gt;217702&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;false&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4126</EventId>
          <EventDescription>Group Policy receiving applicable GPOs from the domain controller.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4257&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.7902395Z'/&gt;&lt;EventRecordID&gt;217703&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;false&lt;/Data&gt;&lt;Data Name='IsBackgroundProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsAsyncProcessing'&gt;true&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4257</EventId>
          <EventDescription>Starting to download policies.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5327&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.8921837Z'/&gt;&lt;EventRecordID&gt;217704&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='NetworkBandwidthInKbps'&gt;27914364&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5327</EventId>
          <EventDescription>Estimated network bandwidth on one of the connections: 27914364 kbps.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5314&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.8931603Z'/&gt;&lt;EventRecordID&gt;217705&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='BandwidthInkbps'&gt;223314&lt;/Data&gt;&lt;Data Name='IsSlowLink'&gt;false&lt;/Data&gt;&lt;Data Name='ThresholdInkbps'&gt;500&lt;/Data&gt;&lt;Data Name='PolicyApplicationMode'&gt;1&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='LinkDescription'&gt;%%4113&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5314</EventId>
          <EventDescription>A fast link was detected. The Estimated bandwidth is 223314 kbps. The slow link threshold is 500 kbps.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.8932081Z'/&gt;&lt;EventRecordID&gt;217706&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4131&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system calls to access specified file. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\gpt.ini</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.9121836Z'/&gt;&lt;EventRecordID&gt;217707&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;15&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4132&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system calls to access specified file completed. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\gpt.ini
The call completed in 15 milliseconds.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.9122492Z'/&gt;&lt;EventRecordID&gt;217708&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4131&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system calls to access specified file. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\gpt.ini</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.9222360Z'/&gt;&lt;EventRecordID&gt;217709&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;16&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4132&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system calls to access specified file completed. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\gpt.ini
The call completed in 16 milliseconds.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.9223109Z'/&gt;&lt;EventRecordID&gt;217710&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4131&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system calls to access specified file. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\gpt.ini</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.9308904Z'/&gt;&lt;EventRecordID&gt;217711&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4132&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system calls to access specified file completed. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\gpt.ini
The call completed in 0 milliseconds.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5257&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.9309305Z'/&gt;&lt;EventRecordID&gt;217712&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;false&lt;/Data&gt;&lt;Data Name='PolicyDownloadTimeElapsedInMilliseconds'&gt;141&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5257</EventId>
          <EventDescription>Successfully completed downloading policies.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5126&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.9315668Z'/&gt;&lt;EventRecordID&gt;217713&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;true&lt;/Data&gt;&lt;Data Name='IsBackgroundProcessing'&gt;false&lt;/Data&gt;&lt;Data Name='IsAsyncProcessing'&gt;false&lt;/Data&gt;&lt;Data Name='NumberOfGPOsDownloaded'&gt;3&lt;/Data&gt;&lt;Data Name='NumberOfGPOsApplicable'&gt;0&lt;/Data&gt;&lt;Data Name='GPODownloadTimeElapsedInMilliseconds'&gt;141&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5126</EventId>
          <EventDescription>Group Policy successfully got applicable GPOs from the domain controller.</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5312&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.9317587Z'/&gt;&lt;EventRecordID&gt;217714&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DescriptionString'&gt;Map_Obmen
map_disk_msk
Map_IT
&lt;/Data&gt;&lt;Data Name='GPOInfoList'&gt;&amp;lt;GPO ID="{EAF2E2E4-84F4-4784-9A8D-917C55240E26}"&amp;gt;&amp;lt;Name&amp;gt;Map_Obmen&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;1310740&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;LDAP://OU=Полимер - Пользователи,DC=titan-polymer,DC=local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\User&amp;lt;/FSPath&amp;gt;&amp;lt;Extensions&amp;gt;[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]&amp;lt;/Extensions&amp;gt;&amp;lt;/GPO&amp;gt;&amp;lt;GPO ID="{9DB7608C-421E-4901-B9B5-665278FED72B}"&amp;gt;&amp;lt;Name&amp;gt;map_disk_msk&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;2752554&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;LDAP://OU=Полимер - Пользователи,DC=titan-polymer,DC=local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\User&amp;lt;/FSPath&amp;gt;&amp;lt;Extensions&amp;gt;[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]&amp;lt;/Extensions&amp;gt;&amp;lt;/GPO&amp;gt;&amp;lt;GPO ID="{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}"&amp;gt;&amp;lt;Name&amp;gt;Map_IT&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;3932220&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;LDAP://OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\User&amp;lt;/FSPath&amp;gt;&amp;lt;Extensions&amp;gt;[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]&amp;lt;/Extensions&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5312</EventId>
          <EventDescription>List of applicable Group Policy objects: 

Map_Obmen
map_disk_msk
Map_IT
</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5313&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:40.9317711Z'/&gt;&lt;EventRecordID&gt;217715&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DescriptionString'&gt;Local Group Policy
	Не применяется (пусто)
&lt;/Data&gt;&lt;Data Name='GPOInfoList'&gt;&amp;lt;GPO ID="Local Group Policy"&amp;gt;&amp;lt;Name&amp;gt;Local Group Policy&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;0&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;Local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;C:\Windows\System32\GroupPolicy\User&amp;lt;/FSPath&amp;gt;&amp;lt;Reason&amp;gt;NOTAPPLIED-EMPTY&amp;lt;/Reason&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5313</EventId>
          <EventDescription>The following Group Policy objects were not applicable because they were filtered out : 

Local Group Policy
	Не применяется (пусто)
</EventDescription>
          <EventTime>20.10.2026 9:57:40</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:41.0686900Z'/&gt;&lt;EventRecordID&gt;217716&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4161&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Checking for Group Policy client extensions that are not part of the system.</EventDescription>
          <EventTime>20.10.2026 9:57:41</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:41.0687832Z'/&gt;&lt;EventRecordID&gt;217717&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4163&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Service configuration update to standalone is not required and will be skipped.</EventDescription>
          <EventTime>20.10.2026 9:57:41</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:41.0687837Z'/&gt;&lt;EventRecordID&gt;217718&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4165&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Finished checking for non-system extensions.</EventDescription>
          <EventTime>20.10.2026 9:57:41</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4016&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:41.0755566Z'/&gt;&lt;EventRecordID&gt;217719&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='CSEExtensionId'&gt;{5794dafd-be60-433f-88a2-1a31939ac01f}&lt;/Data&gt;&lt;Data Name='CSEExtensionName'&gt;Group Policy Drive Maps&lt;/Data&gt;&lt;Data Name='IsExtensionAsyncProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsGPOListChanged'&gt;true&lt;/Data&gt;&lt;Data Name='GPOListStatusString'&gt;%%4102&lt;/Data&gt;&lt;Data Name='DescriptionString'&gt;Map_Obmen
map_disk_msk
Map_IT
&lt;/Data&gt;&lt;Data Name='ApplicableGPOList'&gt;&amp;lt;GPO ID="{EAF2E2E4-84F4-4784-9A8D-917C55240E26}"&amp;gt;&amp;lt;Name&amp;gt;Map_Obmen&amp;lt;/Name&amp;gt;&amp;lt;/GPO&amp;gt;&amp;lt;GPO ID="{9DB7608C-421E-4901-B9B5-665278FED72B}"&amp;gt;&amp;lt;Name&amp;gt;map_disk_msk&amp;lt;/Name&amp;gt;&amp;lt;/GPO&amp;gt;&amp;lt;GPO ID="{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}"&amp;gt;&amp;lt;Name&amp;gt;Map_IT&amp;lt;/Name&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4016</EventId>
          <EventDescription>Starting Group Policy Drive Maps Extension Processing. 

List of applicable Group Policy objects: (Changes were detected.)

Map_Obmen
map_disk_msk
Map_IT
</EventDescription>
          <EventTime>20.10.2026 9:57:41</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5016&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;2&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:41.2132871Z'/&gt;&lt;EventRecordID&gt;217720&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='CSEElaspedTimeInMilliSeconds'&gt;141&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='CSEExtensionName'&gt;Group Policy Drive Maps&lt;/Data&gt;&lt;Data Name='CSEExtensionId'&gt;{5794dafd-be60-433f-88a2-1a31939ac01f}&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5016</EventId>
          <EventDescription>Completed Group Policy Drive Maps Extension Processing in 141 milliseconds.</EventDescription>
          <EventTime>20.10.2026 9:57:41</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;1503&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x8000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:41.2266418Z'/&gt;&lt;EventRecordID&gt;58276&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;System&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='SupportInfo1'&gt;1&lt;/Data&gt;&lt;Data Name='SupportInfo2'&gt;4427&lt;/Data&gt;&lt;Data Name='ProcessingMode'&gt;1&lt;/Data&gt;&lt;Data Name='ProcessingTimeInMilliseconds'&gt;453&lt;/Data&gt;&lt;Data Name='DCName'&gt;\\pl-sr-dc1.titan-polymer.local&lt;/Data&gt;&lt;Data Name='NumberOfGroupPolicyObjects'&gt;3&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>1503</EventId>
          <EventDescription>The Group Policy settings for the user were processed successfully. New settings from 3 Group Policy objects were detected and applied.</EventDescription>
          <EventTime>20.10.2026 9:57:41</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;8001&lt;/EventID&gt;&lt;Version&gt;1&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;2&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:41.2299979Z'/&gt;&lt;EventRecordID&gt;217721&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyElaspedTimeInSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='PrincipalSamName'&gt;POLYMER\ad&lt;/Data&gt;&lt;Data Name='IsMachine'&gt;0&lt;/Data&gt;&lt;Data Name='IsConnectivityFailure'&gt;false&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>8001</EventId>
          <EventDescription>Completed user logon policy processing for POLYMER\ad in 0 seconds.</EventDescription>
          <EventTime>20.10.2026 9:57:41</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5117&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T06:57:41.2516008Z'/&gt;&lt;EventRecordID&gt;217722&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{ff261987-0156-43e5-89ff-f292f136af9a}'/&gt;&lt;Execution ProcessID='1820' ThreadID='6336'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;false&lt;/Data&gt;&lt;Data Name='SessionTimeElapsedInMilliseconds'&gt;484&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5117</EventId>
          <EventDescription>Group policy session completed successfully.</EventDescription>
          <EventTime>20.10.2026 9:57:41</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <ExtensionProcessingTime>
          <ExtensionName>Group Policy Drive Maps</ExtensionName>
          <ExtensionGuid>{5794dafd-be60-433f-88a2-1a31939ac01f}</ExtensionGuid>
          <ElapsedTime>141 мс</ElapsedTime>
          <ProcessedTime>20.10.2026 9:57:41</ProcessedTime>
        </ExtensionProcessingTime>
        <ExtensionProcessingTime>
          <ExtensionName>Group Policy Infrastructure</ExtensionName>
          <ExtensionGuid>{00000000-0000-0000-0000-000000000000}</ExtensionGuid>
          <ElapsedTime>317 мс</ElapsedTime>
          <ProcessedTime>20.10.2026 9:57:41</ProcessedTime>
        </ExtensionProcessingTime>
      </SinglePassEventsDetails>
      <SinglePassEventsDetails ActivityId="{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}" ProcessingTrigger="Вручную" ProcessingAppMode="Фоновый" LinkSpeedInKbps="676245 кбит/с" SlowLinkThresholdInKbps="500 кбит/с" DomainControllerName="pl-sr-dc2.titan-polymer.local" DomainControllerIPAddress="192.168.70.24" PolicyProcessingMode="Нет" PolicyElapsedTime="796 мс" ErrorCount="0" WarningCount="0">
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4005&lt;/EventID&gt;&lt;Version&gt;1&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:18.7626313Z'/&gt;&lt;EventRecordID&gt;218745&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyActivityId'&gt;{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}&lt;/Data&gt;&lt;Data Name='PrincipalSamName'&gt;POLYMER\ad&lt;/Data&gt;&lt;Data Name='IsMachine'&gt;0&lt;/Data&gt;&lt;Data Name='IsDomainJoined'&gt;true&lt;/Data&gt;&lt;Data Name='IsBackgroundProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsAsyncProcessing'&gt;false&lt;/Data&gt;&lt;Data Name='IsServiceRestart'&gt;false&lt;/Data&gt;&lt;Data Name='ReasonForSyncProcessing'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4005</EventId>
          <EventDescription>Starting manual processing of policy for user POLYMER\ad. 
Activity id: {001d05c3-2f16-4245-bcb8-1dcc0057b2e8}</EventDescription>
          <EventTime>20.10.2026 17:45:18</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5340&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:18.7635462Z'/&gt;&lt;EventRecordID&gt;218746&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyApplicationMode'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5340</EventId>
          <EventDescription>The Group Policy processing mode is Background.</EventDescription>
          <EventTime>20.10.2026 17:45:18</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:18.7638055Z'/&gt;&lt;EventRecordID&gt;218747&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4114&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Attempting to retrieve the account information.</EventDescription>
          <EventTime>20.10.2026 17:45:18</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:18.7638072Z'/&gt;&lt;EventRecordID&gt;218748&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4117&lt;/Data&gt;&lt;Data Name='Parameter'&gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system call to get account information. 
</EventDescription>
          <EventTime>20.10.2026 17:45:18</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:18.7638631Z'/&gt;&lt;EventRecordID&gt;218749&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4118&lt;/Data&gt;&lt;Data Name='Parameter'&gt;CN=ad,OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system call to get account information completed. 
CN=ad,OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local
The call completed in 0 milliseconds.</EventDescription>
          <EventTime>20.10.2026 17:45:18</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:18.7638643Z'/&gt;&lt;EventRecordID&gt;218750&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4115&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Retrieved account information.</EventDescription>
          <EventTime>20.10.2026 17:45:18</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4326&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:18.7643314Z'/&gt;&lt;EventRecordID&gt;218751&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4326</EventId>
          <EventDescription>Group Policy is trying to discover the Domain Controller information.</EventDescription>
          <EventTime>20.10.2026 17:45:18</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:18.7643326Z'/&gt;&lt;EventRecordID&gt;218752&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4096&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Retrieving Domain Controller details.</EventDescription>
          <EventTime>20.10.2026 17:45:18</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.0686360Z'/&gt;&lt;EventRecordID&gt;218753&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4119&lt;/Data&gt;&lt;Data Name='Parameter'&gt;pl-sr-dc2.titan-polymer.local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making LDAP calls to connect and bind to Active Directory. 
pl-sr-dc2.titan-polymer.local</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.0722226Z'/&gt;&lt;EventRecordID&gt;218754&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4120&lt;/Data&gt;&lt;Data Name='Parameter'&gt;pl-sr-dc2.titan-polymer.local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The LDAP call to connect and bind to Active Directory completed. 
pl-sr-dc2.titan-polymer.local
The call completed in 0 milliseconds.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5308&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.0722259Z'/&gt;&lt;EventRecordID&gt;218755&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DCName'&gt;pl-sr-dc2.titan-polymer.local&lt;/Data&gt;&lt;Data Name='DCIPAddress'&gt;192.168.70.24&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5308</EventId>
          <EventDescription>Domain Controller details: 
	Domain Controller Name : pl-sr-dc2.titan-polymer.local
	Domain Controller IP Address : 192.168.70.24</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5326&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.0722273Z'/&gt;&lt;EventRecordID&gt;218756&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DCDiscoveryTimeInMilliSeconds'&gt;312&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5326</EventId>
          <EventDescription>Group Policy successfully discovered the Domain Controller in 312 milliseconds.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5309&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.0722297Z'/&gt;&lt;EventRecordID&gt;218757&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='MachineRole'&gt;2&lt;/Data&gt;&lt;Data Name='NetworkName'&gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5309</EventId>
          <EventDescription>Computer details: 
	Computer role : 2
	Network name : </EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5310&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.0722307Z'/&gt;&lt;EventRecordID&gt;218758&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PrincipalCNName'&gt;CN=ad,OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local&lt;/Data&gt;&lt;Data Name='PrincipalDomainName'&gt;TITAN-POLYMER.LOCAL&lt;/Data&gt;&lt;Data Name='DCName'&gt;\\pl-sr-dc2.titan-polymer.local&lt;/Data&gt;&lt;Data Name='DCDomainName'&gt;TITAN-POLYMER.LOCAL&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5310</EventId>
          <EventDescription>Account details: 
	Account Name : CN=ad,OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local
	Account Domain Name : TITAN-POLYMER.LOCAL
	DC Name : \\pl-sr-dc2.titan-polymer.local
	DC Domain Name : TITAN-POLYMER.LOCAL</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5311&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.0763358Z'/&gt;&lt;EventRecordID&gt;218759&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyProcessingMode'&gt;0&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5311</EventId>
          <EventDescription>The loopback policy processing mode is "No loopback mode".</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4126&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.0763375Z'/&gt;&lt;EventRecordID&gt;218760&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;false&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4126</EventId>
          <EventDescription>Group Policy receiving applicable GPOs from the domain controller.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4257&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.0763753Z'/&gt;&lt;EventRecordID&gt;218761&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;false&lt;/Data&gt;&lt;Data Name='IsBackgroundProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsAsyncProcessing'&gt;true&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4257</EventId>
          <EventDescription>Starting to download policies.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5327&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.3998539Z'/&gt;&lt;EventRecordID&gt;218762&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='NetworkBandwidthInKbps'&gt;84530705&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5327</EventId>
          <EventDescription>Estimated network bandwidth on one of the connections: 84530705 kbps.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5314&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4027538Z'/&gt;&lt;EventRecordID&gt;218763&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='BandwidthInkbps'&gt;676245&lt;/Data&gt;&lt;Data Name='IsSlowLink'&gt;false&lt;/Data&gt;&lt;Data Name='ThresholdInkbps'&gt;500&lt;/Data&gt;&lt;Data Name='PolicyApplicationMode'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='LinkDescription'&gt;%%4113&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5314</EventId>
          <EventDescription>A fast link was detected. The Estimated bandwidth is 676245 kbps. The slow link threshold is 500 kbps.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4029141Z'/&gt;&lt;EventRecordID&gt;218764&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4131&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system calls to access specified file. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\gpt.ini</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4102942Z'/&gt;&lt;EventRecordID&gt;218765&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4132&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system calls to access specified file completed. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\gpt.ini
The call completed in 0 milliseconds.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4105488Z'/&gt;&lt;EventRecordID&gt;218766&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4131&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system calls to access specified file. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\gpt.ini</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4124652Z'/&gt;&lt;EventRecordID&gt;218767&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4132&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system calls to access specified file completed. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\gpt.ini
The call completed in 0 milliseconds.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4127075Z'/&gt;&lt;EventRecordID&gt;218768&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationDescription'&gt;%%4131&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4017</EventId>
          <EventDescription>Making system calls to access specified file. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\gpt.ini</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5017&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4146309Z'/&gt;&lt;EventRecordID&gt;218769&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='OperationElaspedTimeInMilliSeconds'&gt;16&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='OperationDescription'&gt;%%4132&lt;/Data&gt;&lt;Data Name='Parameter'&gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\gpt.ini&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5017</EventId>
          <EventDescription>The system calls to access specified file completed. 
\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\gpt.ini
The call completed in 16 milliseconds.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5257&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4147696Z'/&gt;&lt;EventRecordID&gt;218770&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;false&lt;/Data&gt;&lt;Data Name='PolicyDownloadTimeElapsedInMilliseconds'&gt;344&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5257</EventId>
          <EventDescription>Successfully completed downloading policies.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4216&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4171289Z'/&gt;&lt;EventRecordID&gt;218771&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;false&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4216</EventId>
          <EventDescription>Starting to save policies to the local datastore.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5216&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4646723Z'/&gt;&lt;EventRecordID&gt;218772&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;false&lt;/Data&gt;&lt;Data Name='SaveToCacheTimeElapsedInMilliseconds'&gt;47&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5216</EventId>
          <EventDescription>Successfully saved policies to the local datastore.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5126&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4646741Z'/&gt;&lt;EventRecordID&gt;218773&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='IsMachine'&gt;true&lt;/Data&gt;&lt;Data Name='IsBackgroundProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsAsyncProcessing'&gt;false&lt;/Data&gt;&lt;Data Name='NumberOfGPOsDownloaded'&gt;3&lt;/Data&gt;&lt;Data Name='NumberOfGPOsApplicable'&gt;0&lt;/Data&gt;&lt;Data Name='GPODownloadTimeElapsedInMilliseconds'&gt;391&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5126</EventId>
          <EventDescription>Group Policy successfully got applicable GPOs from the domain controller.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5312&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4649128Z'/&gt;&lt;EventRecordID&gt;218774&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DescriptionString'&gt;Map_Obmen
map_disk_msk
Map_IT
&lt;/Data&gt;&lt;Data Name='GPOInfoList'&gt;&amp;lt;GPO ID="{EAF2E2E4-84F4-4784-9A8D-917C55240E26}"&amp;gt;&amp;lt;Name&amp;gt;Map_Obmen&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;1310740&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;LDAP://OU=Полимер - Пользователи,DC=titan-polymer,DC=local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{EAF2E2E4-84F4-4784-9A8D-917C55240E26}\User&amp;lt;/FSPath&amp;gt;&amp;lt;Extensions&amp;gt;[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]&amp;lt;/Extensions&amp;gt;&amp;lt;/GPO&amp;gt;&amp;lt;GPO ID="{9DB7608C-421E-4901-B9B5-665278FED72B}"&amp;gt;&amp;lt;Name&amp;gt;map_disk_msk&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;2752554&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;LDAP://OU=Полимер - Пользователи,DC=titan-polymer,DC=local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{9DB7608C-421E-4901-B9B5-665278FED72B}\User&amp;lt;/FSPath&amp;gt;&amp;lt;Extensions&amp;gt;[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]&amp;lt;/Extensions&amp;gt;&amp;lt;/GPO&amp;gt;&amp;lt;GPO ID="{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}"&amp;gt;&amp;lt;Name&amp;gt;Map_IT&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;3932220&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;LDAP://OU=ОИТ,OU=Полимер - Пользователи,DC=titan-polymer,DC=local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;\\titan-polymer.local\SysVol\titan-polymer.local\Policies\{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}\User&amp;lt;/FSPath&amp;gt;&amp;lt;Extensions&amp;gt;[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]&amp;lt;/Extensions&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5312</EventId>
          <EventDescription>List of applicable Group Policy objects: 

Map_Obmen
map_disk_msk
Map_IT
</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5313&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4649313Z'/&gt;&lt;EventRecordID&gt;218775&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='DescriptionString'&gt;Local Group Policy
	Не применяется (пусто)
&lt;/Data&gt;&lt;Data Name='GPOInfoList'&gt;&amp;lt;GPO ID="Local Group Policy"&amp;gt;&amp;lt;Name&amp;gt;Local Group Policy&amp;lt;/Name&amp;gt;&amp;lt;Version&amp;gt;0&amp;lt;/Version&amp;gt;&amp;lt;SOM&amp;gt;Local&amp;lt;/SOM&amp;gt;&amp;lt;FSPath&amp;gt;C:\Windows\System32\GroupPolicy\User&amp;lt;/FSPath&amp;gt;&amp;lt;Reason&amp;gt;NOTAPPLIED-EMPTY&amp;lt;/Reason&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5313</EventId>
          <EventDescription>The following Group Policy objects were not applicable because they were filtered out : 

Local Group Policy
	Не применяется (пусто)
</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4665609Z'/&gt;&lt;EventRecordID&gt;218776&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4161&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Checking for Group Policy client extensions that are not part of the system.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4666633Z'/&gt;&lt;EventRecordID&gt;218777&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4163&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Service configuration update to standalone is not required and will be skipped.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5320&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;0&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4666637Z'/&gt;&lt;EventRecordID&gt;218778&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='InfoDescription'&gt;%%4165&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5320</EventId>
          <EventDescription>Finished checking for non-system extensions.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;4016&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.4688964Z'/&gt;&lt;EventRecordID&gt;218779&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='CSEExtensionId'&gt;{5794dafd-be60-433f-88a2-1a31939ac01f}&lt;/Data&gt;&lt;Data Name='CSEExtensionName'&gt;Group Policy Drive Maps&lt;/Data&gt;&lt;Data Name='IsExtensionAsyncProcessing'&gt;true&lt;/Data&gt;&lt;Data Name='IsGPOListChanged'&gt;false&lt;/Data&gt;&lt;Data Name='GPOListStatusString'&gt;%%4101&lt;/Data&gt;&lt;Data Name='DescriptionString'&gt;Map_Obmen
map_disk_msk
Map_IT
&lt;/Data&gt;&lt;Data Name='ApplicableGPOList'&gt;&amp;lt;GPO ID="{EAF2E2E4-84F4-4784-9A8D-917C55240E26}"&amp;gt;&amp;lt;Name&amp;gt;Map_Obmen&amp;lt;/Name&amp;gt;&amp;lt;/GPO&amp;gt;&amp;lt;GPO ID="{9DB7608C-421E-4901-B9B5-665278FED72B}"&amp;gt;&amp;lt;Name&amp;gt;map_disk_msk&amp;lt;/Name&amp;gt;&amp;lt;/GPO&amp;gt;&amp;lt;GPO ID="{71AFB6DA-E3A8-4D14-B7C6-4C7E3B729707}"&amp;gt;&amp;lt;Name&amp;gt;Map_IT&amp;lt;/Name&amp;gt;&amp;lt;/GPO&amp;gt;&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>4016</EventId>
          <EventDescription>Starting Group Policy Drive Maps Extension Processing. 

List of applicable Group Policy objects: (No changes were detected.)

Map_Obmen
map_disk_msk
Map_IT
</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;5016&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;2&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.5545671Z'/&gt;&lt;EventRecordID&gt;218780&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='CSEElaspedTimeInMilliSeconds'&gt;94&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='CSEExtensionName'&gt;Group Policy Drive Maps&lt;/Data&gt;&lt;Data Name='CSEExtensionId'&gt;{5794dafd-be60-433f-88a2-1a31939ac01f}&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>5016</EventId>
          <EventDescription>Completed Group Policy Drive Maps Extension Processing in 94 milliseconds.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;1501&lt;/EventID&gt;&lt;Version&gt;0&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;1&lt;/Opcode&gt;&lt;Keywords&gt;0x8000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.5573236Z'/&gt;&lt;EventRecordID&gt;61072&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;System&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-21-1911489494-524194877-3288920093-3238'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='SupportInfo1'&gt;1&lt;/Data&gt;&lt;Data Name='SupportInfo2'&gt;4446&lt;/Data&gt;&lt;Data Name='ProcessingMode'&gt;0&lt;/Data&gt;&lt;Data Name='ProcessingTimeInMilliseconds'&gt;797&lt;/Data&gt;&lt;Data Name='DCName'&gt;\\pl-sr-dc2.titan-polymer.local&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>1501</EventId>
          <EventDescription>The Group Policy settings for the user were processed successfully. There were no changes detected since the last successful processing of Group Policy.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <EventRecord>
          <EventXml>&lt;Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'&gt;&lt;System&gt;&lt;Provider Name='Microsoft-Windows-GroupPolicy' Guid='{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}'/&gt;&lt;EventID&gt;8005&lt;/EventID&gt;&lt;Version&gt;1&lt;/Version&gt;&lt;Level&gt;4&lt;/Level&gt;&lt;Task&gt;0&lt;/Task&gt;&lt;Opcode&gt;2&lt;/Opcode&gt;&lt;Keywords&gt;0x4000000000000000&lt;/Keywords&gt;&lt;TimeCreated SystemTime='2026-10-20T14:45:19.5589531Z'/&gt;&lt;EventRecordID&gt;218781&lt;/EventRecordID&gt;&lt;Correlation ActivityID='{001d05c3-2f16-4245-bcb8-1dcc0057b2e8}'/&gt;&lt;Execution ProcessID='4768' ThreadID='14292'/&gt;&lt;Channel&gt;Microsoft-Windows-GroupPolicy/Operational&lt;/Channel&gt;&lt;Computer&gt;PL-WS-000188.titan-polymer.local&lt;/Computer&gt;&lt;Security UserID='S-1-5-18'/&gt;&lt;/System&gt;&lt;EventData&gt;&lt;Data Name='PolicyElaspedTimeInSeconds'&gt;0&lt;/Data&gt;&lt;Data Name='ErrorCode'&gt;0&lt;/Data&gt;&lt;Data Name='PrincipalSamName'&gt;POLYMER\ad&lt;/Data&gt;&lt;Data Name='IsMachine'&gt;0&lt;/Data&gt;&lt;Data Name='IsConnectivityFailure'&gt;false&lt;/Data&gt;&lt;/EventData&gt;&lt;/Event&gt;</EventXml>
          <EventId>8005</EventId>
          <EventDescription>Completed manual processing of policy for user POLYMER\ad in 0 seconds.</EventDescription>
          <EventTime>20.10.2026 17:45:19</EventTime>
          <EventLevel>4</EventLevel>
        </EventRecord>
        <ExtensionProcessingTime>
          <ExtensionName>Group Policy Drive Maps</ExtensionName>
          <ExtensionGuid>{5794dafd-be60-433f-88a2-1a31939ac01f}</ExtensionGuid>
          <ElapsedTime>94 мс</ElapsedTime>
          <ProcessedTime>20.10.2026 17:45:19</ProcessedTime>
        </ExtensionProcessingTime>
        <ExtensionProcessingTime>
          <ExtensionName>Group Policy Infrastructure</ExtensionName>
          <ExtensionGuid>{00000000-0000-0000-0000-000000000000}</ExtensionGuid>
          <ElapsedTime>702 мс</ElapsedTime>
          <ProcessedTime>20.10.2026 17:45:19</ProcessedTime>
        </ExtensionProcessingTime>
      </SinglePassEventsDetails>
    </PolicyEventsDetails>
  </UserPolicySection>
</MainSection></xml></script></body></html>