instance of __Win32Provider
{
    Name  = "MyTestProvider";
    CLSID = "{C0A94C66-CB70-4D06-91D2-5DE68C0D0EC5}";

    DefaultMachineName = NULL;
    ClientLoadableCLSID = NULL;
    ImpersonationLevel = 0;

        PerUserInitialization = FALSE;
        Pure = TRUE;
    UnloadTimeout = NULL;
};


instance of __EventProviderRegistration
{
    provider = "__Win32Provider=\"MyTestProvider\"";
    EventQueryList = { "select * from PolicyRefreshEvent" };
};