The following is a description of the elements, types, and attributes that compose the SharePoint specific tests found in Open Vulnerability and Assessment Language (OVAL). Each test is an extension of the standard test element defined in the Core Definition Schema. Through extension, each test inherits a set of elements and attributes that are shared amongst all OVAL tests. Each test is described in detail and should provide the information necessary to understand what each element and attribute represents. This document is intended for developers and assumes some familiarity with XML. A high level description of the interaction between the different tests and their relationship to the Core Definition Schema is not outlined here. The SharePoint Component Schema is based on the SharePoint Object Model (Windows SharePoint Services 3.0) The OVAL Schema is maintained by The MITRE Corporation and developed by the public OVAL Community. For more information, including how to get involved in the project and how to submit change requests, please visit the OVAL website at http://oval.mitre.org. SharePoint Definition 5.6 9/9/2009 9:44:37 AM Copyright (c) 2002-2009, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the OVAL License located at http://oval.mitre.org/oval/about/termsofuse.html. See the OVAL License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the OVAL Schema, this license header must be included. The spwebapplication test is used to check the properties or permission settings of a SharePoint web application. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references a spwebapplication_object and the optional state element specifies the data to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType. - the object child element of a spwebapplication_test must reference an spwebapplication_object - the state child element of a spwebapplication_test must reference an spwebapplication_state The spwebapplication_object element is used by a spwebapplication test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spwebapplication object consists of a webapplicationurl used to define a specific web application. See the defintion of the SPWebApplication class in the SharePoint object model documentation. The webapplicationurl element defines the SPWebApplication to evaluate specific security settings or permissions. - datatype attribute for the webapplicationurl entity of a spwebapplication_object should be 'string' The spwebapplication_state element defines security settings and permissions that can be checked for a specified SPWebApplications. The webapplicationurl element identifies a Web application. - datatype attribute for the webapplicationurl entity of a spwebapplication_state should be 'string' If the allowparttopartcommunication is enabled it allows users to create connections between Web parts. - datatype attribute for the allowparttopartcommunication entity of a spwebapplication_state should be 'boolean' If the allowaccesstowebpartcatalog is enabled it allows users access to the online Web part gallery. - datatype attribute for the allowaccesstowebpartcatalog entity of a spwebapplication_state should be 'boolean' The blockedfileextention element identifies one or more file extensions that should be blocked from the deployment. - datatype attribute for the blockedfileextention entity of a spwebapplication_state should be 'string' The defaultquotatemplate element identifies the default quota template set for the web application. - datatype attribute for the defaultquotatemplate entity of a spwebapplication_state should be 'string' If the externalworkflowparticipantsenabled is enabled then users are allowed to participate in workflows. - datatype attribute for the externalworkflowparticipantsenabled entity of a spwebapplication_state should be 'boolean' If the recyclebinenabled is enabled it will be easy to restore deleted files. - datatype attribute for the recyclebinenabled entity of a spwebapplication_state should be 'boolean' If the automaticallydeleteunusedsitecollections is disabled, sites will not be automatically deleted. - datatype attribute for the automaticallydeleteunusedsitecollections entity of a spwebapplication_state should be 'boolean' If the selfservicesitecreationenabled is enabled users will be allowed to create and manager their own top-level Web sites . - datatype attribute for the selfservicesitecreationenabled entity of a spwebapplication_state should be 'boolean' The secondstagerecyclebinquota is the quota for the second stage recyle bin - datatype attribute for the secondstagerecyclebinquota entity of a spwebapplication_state should be 'int' The recyclebinretentionperiod is the retention period for the recyle bin - datatype attribute for the recyclebinretentionperiod entity of a spwebapplication_state should be 'int' The outboundmailserverinstance element identifies the name of the SMPT server. - datatype attribute for the outboundmailserverinstance entity of a spwebapplication_state should be 'string' The outboundmailsenderaddress element identifies the address that the mail is being send from. - datatype attribute for theoutboundmailsenderaddress entity of a spwebapplication_state should be 'string' The outboundmailreplytoaddress element identifies the address that the mail should be replied to. - datatype attribute for the outboundmailreplytoaddress entity of a spwebapplication_state should be 'string' If the secvalexpires is enabled then the form will expire after the security validation time (timeout) . - datatype attribute for the secvalexpires entity of a spwebapplication_state should be 'boolean' The timeout is the amount of time before security validation expires. integer equals, not equal, greater than, less than, greater than or equal, less than or equal - datatype attribute for the timeout entity of a spwebapplication_state should be 'int' If this is true, the web application to which this test refers is the Central Administration web application. item - datatype attribute for the isadministrationwebapplication entity of a spwebapplication_state should be 'boolean' The applicationpoolname element identifies the web applications application pool name. - datatype attribute for the applicationpoolname entity of a spwebapplication_state should be 'string' The applicationpoolusername element identifies the web applications application pool username. - datatype attribute for the applicationpoolusername entity of a spwebapplication_state should be 'string' If the openitems is enabled the permission to view the source of documents with server-side file handlers is available to use for this web application.. - datatype attribute for the openitems entity of a spwebapplication_state should be 'boolean' If the addlistitems is enabled the permission to add items to lists, add documents to document libraries, and add Web discussion comments is available to use for this Web application. - datatype attribute for the addlistitems entity of a spwebapplication_state should be 'boolean' If approveitems is enabled the permission to approve a minor version of a list item or document is available to use for this the Web application. - datatype attribute for the approveitems entity of a spwebapplication_state should be 'boolean' If the deletelistitems is enabled the permission to delete items from a list, documents from a document library, and Web discussion comments in documents is available to use for this Web application. - datatype attribute for the deletelistitems entity of a spwebapplication_state should be 'boolean' If the deleteversions is enabled the permission to delete past versions of a list item or document is available to use for this Web application. - datatype attribute for the deleteversions entity of a spwebapplication_state should be 'boolean' If the editlistitems is enabled the permission to edit items in lists, edit documents in document libraries, edit Web discussion comments in documents, and customize Web Part Pages in document libraries is available to use for this Web application. - datatype attribute for the editlistitems entity of a spwebapplication_state should be 'boolean' If the managelists is enabled the permission to create and delete lists, add or remove columns in a list, and add or remove public views of a list is available to use for this the Web application. - datatype attribute for the managelists entity of a spwebapplication_state should be 'boolean' If the viewversions is enabled the permission to view past versions of a list item or document is available to use for this Web application. - datatype attribute for the viewversions entity of a spwebapplication_state should be 'boolean' If the viewlistitems is enabled the permission to view items in lists, documents in document libraries, and view Web discussion commentsis available is available to use for this Web application. - datatype attribute for the viewlistitems entity of a spwebapplication_state should be 'boolean' If the cancelcheckout is enabled the permission to discard or check in a document which is checked out to another user is available to use for this the Web application. - datatype attribute for the cancelcheckout entity of a spwebapplication_state should be 'boolean' If the createalerts is enabled the permission to Create e-mail alerts is available to use for this Web application. - datatype attribute for the createalerts entity of a spwebapplication_state should be 'boolean' If the viewformpages is enabled the permission to view forms, views, and application pages, and enumerate lists is available to use for this Web application. - datatype attribute for the viewformpages entity of a spwebapplication_state should be 'boolean' If the viewpages is enabled the permission to view pages in a Web site is available to use for this Web application. - datatype attribute for the viewpages entity of a spwebapplication_state should be 'boolean' If addandcustomizepages is enabled the permission to add, change, or delete HTML pages or Web Part Pages, and edit the Web site using a Windows SharePoint Services–compatible editor is available to use for this Web application. - datatype attribute for the addandcustomizepages entity of a spwebapplication_state should be 'boolean' If the applystylesheets is enabled the permission to Apply a style sheet (.css file) to the Web site is available to use for this Web application. - datatype attribute for the applystylesheets entity of a spwebapplication_state should be 'boolean' If the applythemeanborder is enabled the permission to apply a theme or borders to the entire Web site is available to use for this Web application. - datatype attribute for the applythemeandborder entity of a spwebapplication_state should be 'boolean' If the browsedirectories is enabled the permission to enumerate files and folders in a Web site using Microsoft Office SharePoint Designer 2007 and WebDAV interfaces is available to use for this Web application. - datatype attribute for the browsedirectories entity of a spwebapplication_state should be 'boolean' If the browseuserinfo is enabled the permission to view information about users of the Web site is available to use for this Web application. - datatype attribute for the browseuserinfo entity of a spwebapplication_state should be 'boolean' If the creategroups is enabled the permission to create a group of users that can be used anywhere within the site collection is available to use for this Web application. - datatype attribute for the creategroups entity of a spwebapplication_state should be 'boolean' If the createsscsite is enabled the permission to create a Web site using Self-Service Site Creation is available to use for this Web application. - datatype attribute for the createsscsite entity of a spwebapplication_state should be 'boolean' If the editmyuserinfo is enabled the permission to allows a user to change his or her user information, such as adding a picture is available to use for this Web application. - datatype attribute for the editmyuserinfo entity of a spwebapplication_state should be 'boolean' If enumeratepermissions is enabled the permission to enumerate permissions on the Web site, list, folder, document, or list itemis is available to use for this Web application. - datatype attribute for the enumeratepermissions entity of a spwebapplication_state should be 'boolean' If the managealerts is enabled the permission to manage alerts for all users of the Web site is available to use for this Web application. - datatype attribute for the managealerts entity of a spwebapplication_state should be 'boolean' If the managepermissions is enabled the permission to create and change permission levels on the Web site and assign permissions to users and groups is available to use for this Web application. - datatype attribute for the managepermissions entity of a spwebapplication_state should be 'boolean' If the managesubwebs is enabled the permission to create subsites such as team sites, Meeting Workspace sites, and Document Workspace sites is available to use for this Web application. - datatype attribute for the managesubwebs entity of a spwebapplication_state should be 'boolean' If the manageweb is enabled the permission to perform all administration tasks for the Web site as well as manage content is available to use for this Web application. - datatype attribute for the manageweb entity of a spwebapplication_state should be 'boolean' If open is enabled the permission to allow users to open a Web site, list, or folder to access items inside that containeris available to use for this Web application. - datatype attribute for the open entity of a spwebapplication_state should be 'boolean' If the useclientintegration is enabled the permission to use features that launch client applications; otherwise, users must work on documents locally and upload changesis is available to use for this Web application. - datatype attribute for the useclientintegration entity of a spwebapplication_state should be 'boolean' If the useremoteapis is enabled the permission to use SOAP, WebDAV, or Microsoft Office SharePoint Designer 2007 interfaces to access the Web siteis available to use for this Web application. - datatype attribute for the useremoteapis entity of a spwebapplication_state should be 'boolean' If the viewusagedata is enabled the permission to view reports on Web site usage in documents is available to use for this Web application. - datatype attribute for the viewusagedata entity of a spwebapplication_state should be 'boolean' If the managepersonalviews is enabled the permission to Create, change, and delete personal views of lists is available to use for this Web application. - datatype attribute for the managepersonalviews entity of a spwebapplication_state should be 'boolean' If the adddelprivatewebparts is enabled the permission to add or remove personal Web Parts on a Web Part Page is available to use for this Web application. - datatype attribute for the adddelprivatewebparts entity of a spwebapplication_state should be 'boolean' If the updatepersonalwebparts is enabled the permission to update Web Parts to display personalized informationis available to use for this Web application. - datatype attribute for the updatepersonalwebparts entity of a spwebapplication_state should be 'boolean' The spgroup test is used to check the group properties for site collections. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references an spwebapplication_object and the optional state element specifies the data to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType. - the object child element of a spgroup_test must reference a spgroup_object - the state child element of a spgroup_test must reference a spgroup_state The spgroup_object element is used by a spgroup test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spgroup object consists of a sitecollectionurl used to define a specific site collection. See the defintion of the SPGroup class in the SharePoint object model documentation. The sitecollectionurl element defines the Site Colection to evaluate specific group settings. - datatype attribute for the sitecollectionurl entity of a spgroup_object should be 'string' The spgroup_state element defines settings for groups in a site collections. The sitecollectionurl element identifies a Site Collection. - datatype attribute for the sitecollectionurl entity of a spgroup_state should be 'string' The name element identifies a Group name. - datatype attribute for the gname entity of a spgroup_state should be 'string' If the autoacceptrequesttojoinleave is enabled it allows users to automatically join groups. - datatype attribute for the autoacceptrequesttojoinleave entity of a spgroup_state should be 'boolean' If the allowmemberseditmembership is enabled than all group memebers will be allowed to edit the membership of a group.. - datatype attribute for the autoacceptrequesttojoinleave entity of a spgroup_state should be 'boolean' If the onlyallowmembersviewmembership is enabled it allows users to automatically join groups. - datatype attribute for the onlyallowmembersviewmembership entity of a spgroup_state should be 'boolean' The spweb test is used to check the properties for site collections. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references an spwebapplication_object and the optional state element specifies the data to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType. - the object child element of a spweb_test must reference an spweb_object - the state child element of a spweb_test must reference an spweb_state The spweb_object element is used by a spweb test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spweb object consists of a webcollection url and sitecollection url used to define a specific web apoplication and a specific site collection. See the defintion of the SPWeb class in the SharePoint object model documentation. The webcollurl element defines the web application to evaluate specific web settings. - datatype attribute for the webcollectionurl entity of a spweb_object should be 'string' The sitecollectionurl element defines the site collection to evaluate specific web settings. - datatype attribute for the sitecollectionurl entity of a spweb_object should be 'string' The spweb_state element defines settings for a site collection. The webcollurl element identifies a Site Collection. - datatype attribute for the webcollectionurl entity of a spweb_state should be 'string' The name element identifies a site collection url. - datatype attribute for the sitecollectionurl entity of a spweb_state should be 'string' The secondarysitecolladmin element identifies a secondary site collection admin. - datatype attribute for the secondarysitecolladmin entity of a spweb_state should be 'string' A boolean that represents if the secondarysitecolladmin is enabled. - datatype attribute for the secondsitecolladminenabled entity of a spweb_state should be 'boolean' If the allowanonymousaccess is enabled users will be allowed to create and manager their own top-level Web sites . - datatype attribute for the allowanonymousaccess entity of a spweb_state should be 'boolean' The splist test is used to check the properties of lists associated with a SharePoint site or site collection. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references an splist_object and the optional state element specifies the data to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType. - the object child element of a splist_test must reference an splist_object - the state child element of a splist_test must reference an splist_state The splist_object element is used by a splist test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An splist object consists of a spsiteurl used to define a specific site in a site collection that various security related configuration items need to be checked. See the defintion of the SPList class in the SharePoint object model documentation. The spsiteurl element defines the Sharepoint website being specified ... - datatype attribute for the spwebsiteurl entity of a splist_object should be 'string' The splist_state element defines the different information that can be used to evaluate the specified Sharepoint sites.... The spsiteurl element identifies an Sharepoint site to test for. - datatype attribute for the spsiteurl entity of a splist_state should be 'string' If the irmenabled option is enabled, documents are protected whenever they leave the control of the Sharepoint system. - datatype attribute for the irmenabled entity of a splist_state should be 'boolean' If the enableversioning option is enabled, backup copies of documents are kept and managed by the Sharepoint system. - datatype attribute for the enableversioning entity of a splist_state should be 'boolean' If the nocrawl option is enabled, the site is excluded from crawls that Sharepoint does when it indexes sites. - datatype attribute for the nocrawl entity of a splist_state should be 'boolean' The spantivirussettings test is used to check the settings for antivirus software associated with a SharePoint deployment. - the object child element of a spantivirussettings_test must reference an spantivirussettings_object - the state child element of a spantivirussettings_test must reference an spantivirussettings_state The spantivirussettings_object element is used by a spantivirussettings test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spantivirussettings object consists of a spwebservicename used to define a specific webservice in a farm that various security related configuration items need to be checked and an spfarmname which denotes the farm of which the spwebservice is a part. See the defintion of the SPAntiVirusSettings class in the SharePoint object model documentation. The spwebservicename element denotes the web service for which antivirus settings will be checked. - datatype attribute for the spwebservicename entity of a spantivirussettings_object should be 'string' The spfarmname element denotes the farm on which a web service to be queried resides. - datatype attribute for the spfarmname entity of a spantivirussettings_object should be 'string' The spantivirus_state element defines the different information that can be used to evaluate the specified Sharepoint sites.... The spwebservicename denotes the name of a SharePoint web service to be tested or * (the default) to test all web services. - datatype attribute for the spwebservicename entity of a spantivirusservice_state should be 'string' The spfarmname denotes the name of the farm on which the Sharepoint webservice resides or the local farm (default). - datatype attribute for the spfarmname entity of a spantivirusservice_state should be 'string' Specifies whether infected documents can be downloaded on the SharePoint system. - datatype attribute for the allowdownload entity of a spantivirussettings_state should be 'boolean' Specifies whether the virus scanner should attempt to cure files that are infected. - datatype attribute for the cleaningenabled entity of a spantivirussettings_state should be 'boolean' Specifies whetehr files are scanned for viruses when they are downloaded. - datatype attribute for the downloadscanenabled entity of a spantivirussettings_state should be 'boolean' The number of threads that the antivirus scanner can use to scan documents for viruses. - datatype attribute for the numberofthreads entity of a spantivirussettings_state should be 'integer' Specifies whether to skip scanning for viruses during a search crawl. - datatype attribute for the skipsearchcrawl entity of a spantivirussettings_state should be 'boolean' Denotes the amount of time before the virus scanner times out. - datatype attribute for the timeout entity of a spantivirussettings_state should be 'integer' Specifies whether files are scanned when they are uploaded. - datatype attribute for the uploadscanenabled entity of a spantivirussettings_state should be 'boolean' Denotes the current increment of the number of times the vendor has been updated. - datatype attribute for the vendorupdatecount entity of a spantivirussettings_state should be 'integer' The spsiteadministration test is used to check the properties of a site. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references an spwebapplication_object and the optional state element specifies the data to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType. - the object child element of a spsiteadministration_test must reference an spsiteadministration_object - the state child element of a spsiteadministration_test must reference an spsiteadministration_state The spsiteadministration_object element is used by a spsiteadministration test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spsiteadministration object consists of a webapplicationurl used to define a specific web application. See the defintion of the SPSiteAdministration class in the SharePoint object model documentation. See the defintion of the SPSiteAdministration class in the SharePoint object model documentation. The sitecollectionurl element defines the site to evaluate. - datatype attribute for the sitecollectionurl entity of a spsiteadministration_object should be 'string' The spspsiteadministration_state element defines security settings and permissions that can be checked for a specified SPSite. The sitecollectionurl element identifies a site. - datatype attribute for the sitecollectionurl entity of a spsiteadministration_state should be 'string' The storagemaxlevel is the maximum storage allowed for the site. integer equals, not equal, greater than, less than, greater than or equal, less than or equal - datatype attribute for thestoragemaxlevel entity of a spsiteadministration_state should be 'int' When the storagewarninglevel is reached a site collection receive advance notice before available storage is expended.s. integer equals, not equal, greater than, less than, greater than or equal, less than or equal - datatype attribute for the storagewarninglevel entity of a spsiteadministration_state should be 'int' The spsite test is used to check the properties of a site. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references an spwebapplication_object and the optional state element specifies the data to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType. - the object child element of a spsite_test must reference an spsite_object - the state child element of a spsite_test must reference an spsite_state The spsite_object element is used by a spsiteadministration test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spsite object consists of a sitecollectionurl used to define a specific web application. See the defintion of the SPSite class in the SharePoint object model documentation. The sitecollectionurl element defines the site to evaluate. - datatype attribute for the sitecollectionurl entity of a spsite_object should be 'string' The spsite_state element defines security settings and permissions that can be checked for a specified SPSite. The sitecollectionurl element identifies a site. - datatype attribute for the sitecollectionurl entity of a spsite_state should be 'string' The quota name is the name of quota template for a site collection. - datatype attribute for the quotaname entity of a spsite_state should be 'string' The URL is the full URL to the root Web site of the site collection, including host name, port number, and path. - datatype attribute for the url entity of a spsite_state should be 'string' The spcrawlrule test is used to check the configuration or rules associated with the SharePoint system's built-in indexer and the sites or documents that will be indexed. - the object child element of a spcrawlrule_test must reference an spcrawlrule_object - the state child element of a spcrawlrule_test must reference an spcrawlrule_state The spcrawlrule_object element is used by a spcrawlrule test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spcrawlrule object consists of a spsiteurl used to define a specific resource (eg. website or document) on a server that can be indexed by the SharePoint indexer. See the defintion of the CrawlRule class in the SharePoint object model documentation. The spsiteurl element denotes the resource on the SharePoint server (eg. a site or document) for which indexing settings will be checked. - datatype attribute for the spsiteurl entity of a spcrawlrule_object should be 'string' The spcrawlrule state element defines the various properties of the SharePoint indexer that can be checked. The spsiteurl denotes the URL of a website or resource whose indexing properties should be tested. - datatype attribute for the spsiteurl entity of a spcrawlrule_state should be 'string' Specifies whether the crawler should crawl content from a hierarchical content source, such as HTTP content. - datatype attribute for the crawlashttp entity of a spcrawlrule_state should be 'boolean' Specifies whether a particular crawl rule is enabled. - datatype attribute for the enabled entity of a spcrawlrule_state should be 'boolean' Specifies whether the indexer should crawl websites that contain the question mark (?) character. - datatype attribute for the followcomplexurls entity of a spcrawlrule_state should be 'boolean' The path to which a particular crawl rule applies. - datatype attribute for the path entity of a spcrawlrule_state should be 'string' The priority setting for a particular crawl rule. - datatype attribute for the priority entity of a spcrawlrule_state should be 'integer' Specifies whether the crawler should exclude the content of items that this rule applies to from the content index. - datatype attribute for the suppressindexing entity of a spcrawlrule_state should be 'boolean' A string containing the account name for the crawl rule. - datatype attribute for the accountname entity of a spcrawlrule_state should be 'string' The spjobdefinition test is used to check the status of the various properties associated with scheduled jobs in the SharePoint system. - the object child element of a spjobdefinition_test must reference an spjobdefinition_object - the state child element of a spjobdefinition_test must reference an spjobdefinition_state The spjobdefinition_object element is used by a spjobdefinition test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spjobdefinition object consists of a webappuri used to define a specific web application for which job checks should be done. See the defintion of the SPJobDefinition class in the SharePoint object model documentation. The URI that represents the web application for which jobs should be checked. - datatype attribute for the webappuri entity of a spjobdefinition_object should be 'string' The various properties of a Sharepoint job that can be checked. The URI that represents the web application for which jobs should be checked. - datatype attribute for the webappuri entity of a spjobdefinition_state should be 'string' The name of the job as displayed in the SharePoint Central Administration site. - datatype attribute for the displayname entity of a spjobdefinition_state should be 'string' Determines whether or not the job definition is enabled. - datatype attribute for the isdisabled entity of a spjobdefinition_state should be 'boolean' Determines whether the job definition should be retried if it ends abnormally. - datatype attribute for the retry entity of a spjobdefinition_state should be 'boolean' The title of a job as displayed in the SharePoint Central Administration site. - datatype attribute for the title entity of a spjobdefinition_state should be 'string' The bestbet test is used to get all the best bets associated with a site. - the object child element of a bestbet_test must reference an bestbet_object - the state child element of a bestbet_test must reference an bestbet_state The bestbet_object element is used by a bestbet test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An bestbet object consists of a sitecollectionurl used to define a specific site and a bestbeturl used to define a specific best bet. See the defintion of the BestBet class in the SharePoint object model documentation. The URL that represents the site collection. - datatype attribute for the sitecollectionurl entity of a bestbet_object should be 'string' The URL that represents the best bet. - datatype attribute for the bestbeturl entity of a bestbet_object should be 'string' The various properties of a Best Bet that can be checked. The URL that represents the site collection. - datatype attribute for the sitecollectionurl entity of a bestbet_state should be 'string' The name of the job as displayed in the SharePoint Central Administration site. - datatype attribute for the bestbeturl entity of a bestbet_state should be 'string' The title of a best bet. - datatype attribute for the title entity of a bestbet_state should be 'string' Thedescription of a best bet.. - datatype attribute for the description entity of a bestbet_state should be 'string' The policycoll test is used to get all the Information Policies associated with a site. - the object child element of a policycoll_test must reference an policycoll_object - the state child element of a policycoll_test must reference an policycoll_state The infopolicycoll_object element is used by a policycoll test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. A infopolicycoll object consists of a sitecollectionurl used to define a specific site and an id used to define a specific information policy. See the defintion of the Policy class and policycollection class in the SharePoint object model documentation. The URL that represents the site collection. - datatype attribute for the entity of a should be 'string' The id that represents the Information Policy. - datatype attribute for the id entity of a infopolicycoll_object should be 'string' The various properties of the Information Policy that can be checked. The URL that represents the site collection. - datatype attribute for the sitecollectionurl entity of a infopolicycoll_state should be 'string' The id of the Information Policy. - datatype attribute for the id entity of a infopolicycoll_state should be 'string' The name of the Information Policy. - datatype attribute for the name entity of a infopolicycoll_state should be 'string' The description of an Information Policy.. - datatype attribute for the description entity of a infopolicycoll_state should be 'string' The long description of an Information Policy.. - datatype attribute for the longdescription entity of a infopolicycoll_state should be 'string' The spdiagnosticsservice test is used to check the diagnostic properties associated with a Sharepoint system. - the object child element of an spdiagnosticsservice_test must reference an spdiagnosticsservice_object - the state child element of an spdiagnosticsservice_test must reference an spdiagnosticsservice_state The spdiagnosticsservice_object element is used by an spdiagnosticsservice test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spdiagnosticsservice object consists of a farmname used to define a specific Sharepoint farm for which diagnostics properties should be checked. See the defintion of the SPDiagnosticsService class in the SharePoint object model documentation. The farm whose diagnostic capabilities should be checked. Use .* for all farms or SPFarm.Local for the local farm. - datatype attribute for the farmname entity of an spdiagnosticsservice_object should be 'string' The various properties of a diagnostics service that can be checked. The farm whose diagnostic capabilities should be checked. - datatype attribute for the farmname entity of an spdiagnosticsservice_state should be 'string' The name of the diagnostic service as shown in the Sharepoint Central Administration site. - datatype attribute for the displayname entity of an spdiagnosticsservice_state should be 'string' The number of minutes to capture events to a single log file. This value lies in the range 0 to 1440. The default value is 30. - datatype attribute for the logcutinterval entity of an spdiagnosticsservice_state should be 'integer' The path to the file system directory where log files are created and stored. - datatype attribute for the loglocation entity of an spdiagnosticsservice_state should be 'string' The value that indicates the number of log files to create. This lies in the range 0 to 1024 with a default of 96. - datatype attribute for the logstokeep entity of an spdiagnosticsservice_state should be 'integer' The required property specifies whether an instance of the spdiagnosticsservice must be running on the farm. - datatype attribute for the required entity of an spdiagnosticsservice_state should be 'boolean' The friendly name for the service as displayed in the Central Administration and in logs. This should be "Windows Sharepoint Diagnostics Service" by default. - datatype attribute for the typename entity of an spdiagnosticsservice_state should be 'string' The spdiagnosticslevel_test is used to check the status of the logging features associated with a Sharepoint deployment. - the object child element of an spdiagnosticslevel_test must reference an spdiagnosticslevel_object - the state child element of an spdiagnosticslevel_test must reference an spdiagnosticslevel_state The spdiagnosticslevel_object element is used by an spdiagnosticslevel test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An spdiagnosticslevel object consists of a farmname used to define a specific Sharepoint farm for which policy properties should be checked. See the defintion of the SPWebApplication class in the SharePoint object model documentation. See the defintion of the IDiagnosticsLevel Interface in the SharePoint object model documentation. The farm whose diagnostics levels should be checked. Use .* for all farms or SPFarm.Local for the local farm. - datatype attribute for the farmname entity of an spdiagnosticslevel_object should be 'string' The various properties of a Diagnostics level that can be checked. The name of the farm for which diagnostics level properties should be checked. - datatype attribute for the farmname entity of an spdiagnosticslevel_state should be 'string' The event severity setting for a particular diagnostic level category. - datatype attribute for the eventseverity entity of an spdiagnosticslevel_state should be 'string' Specifies whether the trace log category is hidden in the Windows Sharepoint Services Central Administration interface. - datatype attribute for the hidden entity of an spdiagnosticslevel_state should be 'boolean' A string that represents the ID of the trace log category. This is its English language name. - datatype attribute for the levelid entity of an spdiagnosticslevel_state should be 'string' The name of the trace log category. This represents the localized name for the category. - datatype attribute for the levelname entity of an spdiagnosticslevel_state should be 'string' The trace severity setting for a particular diagnostic level category. - datatype attribute for the traceseverity entity of an spdiagnosticslevel_state should be 'string' The sppolicyfeature test enables one to check the attributes associated with policies and policy features on the Sharepoint deployment. - the object child element of an sppolicyfeature_test must reference an sppolicyfeature_object - the state child element of an sppolicyfeature_test must reference an sppolicyfeature_state The sppolicyfeature_object element is used by an sppolicyfeature test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An sppolicyfeature object consists of a farmname used to define a specific Sharepoint farm for which policy feature properties should be checked. See the defintion of the PolicyFeature class in the SharePoint object model documentation. The farm whose policy features should be checked. Use .* for all farms or SPFarm.Local for the local farm. - datatype attribute for the farmname entity of an sppolicyfeature_object should be 'string' The various properties of a policy feature that can be checked. The farm whose policy features should be checked. Use .* for all farms or SPFarm.Local for the local farm. - datatype attribute for the farmname entity of an sppolicyfeature_state should be 'string' The URL to a web control used to edit policy instance-level settings. - datatype attribute for the configpage entity of an sppolicyfeature_state should be 'string' The default values for any policy instance-level settings for a policy feature. - datatype attribute for the defaultcustomdata entity of an sppolicyfeature_state should be 'string' The short description of the policy feature and of the service it provides. - datatype attribute for the description entity of an sppolicyfeature_state should be 'string' The URL to a web control used to edit server farm-level settings for this policy feature. - datatype attribute for the globalconfigpage entity of an sppolicyfeature_state should be 'string' The default settings for any server farm-level settings for this policy feature. - datatype attribute for the globalconfigpage entity of an sppolicyfeature_state should be 'string' The policy feature group to which a policy feature belongs. - datatype attribute for the group entity of an sppolicyfeature_state should be 'string' The name to display in the Microsoft Office Sharepoint Server 2007 interface for an information policy feature. - datatype attribute for the name entity of an sppolicyfeature_state should be 'string' The name of the creator of the policy feature as it is displayed in the Microsoft Office Sharepoint Server 2007 user interface. - datatype attribute for the publisher entity of an sppolicyfeature_state should be 'string' Specifies whether the policy feature is hidden or visible. - datatype attribute for the state entity of an sppolicyfeature_state should be 'string' The sppolicy test enables one to check the attributes of the policies associated with a particular URL Zone in a Sharepoint system. - the object child element of an sppolicy_test must reference an sppolicy_object - the state child element of an sppolicy_test must reference an sppolicy_state The sppolicy_object element is used by an sppolicy test to define the object to be evaluated. Each object extends the standard ObjectType as definied in the oval-definitions-schema and one should refer to the ObjectType description for more information. The common set element allows complex objects to be created using filters and set logic. Again, please refer to the description of the set element in the oval-definitions-schema. An sppolicy object consists of a webappuri and a URL Zone used to define a specific Sharepoint web application and zone for which policy properties should be checked. See the defintion of the SPPolicy class and the sppolicyroletype in the SharePoint object model documentation. The URI that represents the web application for which policies should be checked. - datatype attribute for the webappuri entity of an sppolicy_object should be 'string' The zone for which policies should be checked. - datatype attribute for the urlzone entity of an sppolicy_object should be 'string' The various properties of a policy that can be checked. The URI that represents the web application for which policies should be checked. - datatype attribute for the webappuri entity of an sppolicy_state should be 'string' The zone for which policies should be checked. - datatype attribute for the urlzone entity of an sppolicy_state should be 'string' The user or group display name for a policy. This defaults to the user name if the display name cannot be resolved through Active Directory. - datatype attribute for the displayname entity of an sppolicy_state should be 'string' Specifies whether the user identified by a particular policy is visible only as a System account within the Windows Sharepoint Services user interface. - datatype attribute for the issystemuser entity of an sppolicy_state should be 'boolean' The user name of the user or group that is associated with policy. - datatype attribute for the username entity of an sppolicy_state should be 'string' The policy role type to apply globally in a Sharepoint web application to a user or group. - datatype attribute for the policyroletype entity of an sppolicyrole_state should be 'string' The EntityObjectUrlZoneType restricts a string value to a set of values that describe the different IIS Url Zones. The empty string is also allowed to support empty element associated with error conditions. The empty string value is permitted here to allow for empty elements associated with variable references. The EntityStateEventSeverityType restricts a string value to a set of values that describe the different states that can be configured for a diagnostics level event severity level property of the diagnostics service. The empty string value is permitted here to allow for empty elements associated with variable references. The EntityStateTraceSeverityType restricts a string value to a set of values that describe the different states that can be configured for a diagnostics level trace severity level property of the diagnostics service. The empty string value is permitted here to allow for empty elements associated with variable references. The EntityStatePolicyRoleType restricts a string value to a set of values that describe the different Policy settings for Access Control that are available for users. Deny all rights. Deny write permissions. Grant full control. Grant full read permissions. No role type assigned. The empty string value is permitted here to allow for empty elements associated with variable references. The EntityStatePolicyRoleType restricts a string value to a set of values that describe the different policy feature states that can be configured for a policy feature. Specifies that the policy feature is hidden from the Sharepoint Central Administration user interface. Specifies that the policy feature is visible from the Sharepoint Central Administration user interface. The empty string value is permitted here to allow for empty elements associated with variable references. The EntityStateUrlZoneType restricts a string value to a set of values that describe the different IIS Url Zones. The empty string value is permitted here to allow for empty elements associated with variable references.