2016-05-17T20:27:11.1921411 VANTAGE-RACK\John Mount true <QueryList><Query Id="0" Path="Microsoft-Windows-NetworkProfile/Operational"><Select Path="Microsoft-Windows-NetworkProfile/Operational">*[System[Provider[@Name='Microsoft-Windows-NetworkProfile'] and EventID=10000]]</Select></Query></QueryList> PT1M S-1-5-18 LeastPrivilege IgnoreNew false true true false false true false true true false false false false false P3D 7 C:\Users\John\Desktop\mount.bat