Capabilities grouped by Signing procedure ...

1. Self-Signing (Basic capabilities)
* LocalServices
* UserEnvironment
* NetworkServices
* ReadUserData
* WriteUserData

2. Express Signing (Extended capabilities)
* Location
* SwEvent
* SurroundingsDD
* ProtServ
* PowerMgmt
* ReadDeviceData
* WriteDeviceData
* TrustedUI

3. Certified Signed (Extended capabilities)
* NetworkControl
* MultimediaDD
* CommDD
* DiskAdmin

4. OEM + Certified Signed (Manufacturer-approved capabilities)
* AllFiles
* DRM
* TCB