2.2.2.2.10.1 AccountServicesPolicy Object

The following specifies the AccountServicesPolicy object schema:

 <xs:schema xmlns:g="urn:groove.net" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="urn:groove.net" xmlns:xs="http://www.w3.org/2001/XMLSchema">
  
 <xs:element name="fragment">
  <xs:complexType>
  <xs:sequence>
   <xs:element name="ManagedObject">
   <xs:complexType>
    <xs:sequence>
    <xs:element name="Header" type="ObjectHeaderType"/>
    <xs:element name="Body">
     <xs:complexType>
     <xs:sequence>
      <xs:element name="Policy">
      <xs:complexType>
       <xs:attribute name="Flags" type="xs:int"/>
      </xs:complexType>
      </xs:element>
     </xs:sequence>
     <xs:attribute name="ComponentResourceURL" type="xs:string"
                 use="required"/>
     </xs:complexType>
    </xs:element>
    <xs:element name="Signatures">
     <xs:complexType>
     <xs:sequence>
      <xs:element name="Signature" type="ObjectSignatureType"/>
     </xs:sequence>
     </xs:complexType>
    </xs:element>
    </xs:sequence>
    <xs:attribute name="Version" type="xs:string" use="required"/>
   </xs:complexType>
   </xs:element>
  </xs:sequence>
  </xs:complexType>
 </xs:element>
  
 </xs:schema>

The ObjectHeaderType and the ObjectSignatureType are specified in sections 2.2.2.2.12 and 2.2.2.2.13.

The following table describes the elements and attributes:

XPath

Description

/fragment

Object data fragment element

/fragment/ManagedObject/@Version

The value MUST be "0,0,0,0"

/fragment/ManagedObject/Header

Object header element

/fragment/ManagedObject/Body

Object body element

/fragment/ManagedObject/Body/@ComponentResourceURL

The value MUST be "http://components.groove.net/Groove/Components/Root.osd?Package=net.groove.Groove.SystemComponents.GrooveAccountMgr_DLL&amp;Version=0&amp;Factory=AccountServicesPolicy"

/fragment/ManagedObject/Body/Policy

Policy element

/fragment/ManagedObject/Body/Policy/@Flags

The value MUST be one the following values or a value produced by using a bitwise OR operation on two or more of the following values:

0x00: No restrictions

0x01: Device cannot create another account

0x02: Device cannot import an account

0x04: Device can only use managed identities from device’s management domain.<1>

/fragment/ManagedObject/Signatures

Signatures element

/fragment/ManagedObject/Signatures/Signature

Signature element